Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/JrhPh_ggkCQpCPvicJAidf3AFuk.roa
File: JrhPh_ggkCQpCPvicJAidf3AFuk.roa (raw, json)
Hash identifier: 9AF8OIDAW/QdSd3YL+eg1j7iYhrnH5r3yCopU5NAVw4=
Subject key identifier: 26:B8:4F:87:F8:20:90:24:29:08:FB:E2:70:90:22:75:FD:C0:16:E9
Certificate issuer: /CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8
Certificate serial: 01856CF86A27648D2B425F6BF4D2041C1125
Authority key identifier: 4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/JrhPh_ggkCQpCPvicJAidf3AFuk.roa
Signing time: Sun 01 Jan 2023 10:54:57 +0000
ROA not before: Sun 01 Jan 2023 10:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13127
IP address blocks: 185.36.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:6a:27:64:8d:2b:42:5f:6b:f4:d2:04:1c:11:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8
Validity
Not Before: Jan 1 10:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26b84f87f82090242908fbe270902275fdc016e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b9:e4:93:19:80:32:87:94:1a:1e:e0:3b:d4:
7e:f4:e5:9c:d2:25:77:1a:81:28:73:6b:9f:88:98:
fa:b0:55:c7:11:4c:c2:bb:3d:54:94:94:b8:c4:1b:
b6:70:59:4b:14:dd:24:7f:b0:d6:be:90:51:ab:a0:
8c:5f:a5:b8:76:51:14:c5:23:18:f8:74:b7:b4:9e:
01:83:d1:bb:87:23:4a:2b:f2:6b:4a:d8:3d:e0:27:
93:da:15:8e:79:e5:27:12:c9:2b:e3:3d:1f:5d:cd:
f2:bc:e8:b5:6d:67:f0:8f:85:77:78:58:12:f6:89:
19:92:b3:3e:e0:3e:f7:fe:9b:66:ff:10:36:0b:99:
35:11:d2:b4:64:b5:7e:09:38:58:79:11:d2:27:df:
83:54:88:ed:55:0b:7a:d4:94:59:ce:7d:87:e7:25:
84:3d:e7:44:1d:2a:a6:b4:e2:b8:3b:1e:3e:c7:28:
2a:9f:dd:4a:2d:ca:fb:72:f4:65:61:c4:70:b5:26:
a3:b1:7b:88:58:d5:b1:97:bf:26:56:ad:d7:b1:7e:
dc:d1:a8:cb:da:ec:f7:3f:05:94:b4:c3:31:23:be:
4b:05:10:0a:f8:dc:ee:bd:3d:42:8e:a3:b8:49:b4:
f3:79:e8:cf:6f:98:bb:a3:31:51:fa:ff:21:0a:b0:
af:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B8:4F:87:F8:20:90:24:29:08:FB:E2:70:90:22:75:FD:C0:16:E9
X509v3 Authority Key Identifier:
keyid:4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/JrhPh_ggkCQpCPvicJAidf3AFuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.41.0/24
Signature Algorithm: sha256WithRSAEncryption
28:1f:69:f9:ae:3c:3d:8c:3c:ea:52:74:37:36:01:b6:85:a9:
95:a1:13:ec:6e:7d:d6:fc:ff:35:c5:15:f2:fe:3c:3f:54:19:
aa:d2:12:29:9c:59:ac:82:12:53:68:78:13:31:d3:b4:93:79:
49:8d:0b:21:5b:25:49:27:fa:f1:64:86:80:41:70:60:72:1f:
ad:16:bc:aa:ef:04:46:e1:6e:88:13:25:f6:02:ec:a5:88:e1:
eb:96:59:86:83:23:07:fc:b2:0a:0c:23:b0:d0:ee:61:91:5b:
61:25:43:14:ec:08:a1:2d:a3:ec:73:53:b0:8d:68:11:7d:e4:
bb:30:aa:40:e8:49:7f:19:0d:e8:f4:66:82:d1:c2:e1:df:1d:
1f:81:81:47:7a:fe:58:a0:c8:99:c3:2a:33:7f:c6:30:6a:6e:
33:fe:ec:7a:f5:4b:ce:65:f8:6f:5c:da:ca:e7:ff:4d:ef:8c:
d4:73:d1:49:7f:61:a4:1a:bb:eb:bb:17:98:59:17:82:13:d5:
0c:4a:6a:5a:10:3c:b0:0a:e8:14:9e:24:9f:21:8d:74:73:53:
a9:36:a3:ea:85:b0:c1:2e:78:19:31:90:9d:21:79:46:e6:a5:
3f:9b:d6:a9:13:42:b8:b9:be:19:f8:93:5b:6d:8f:19:79:ca:
ee:cb:a1:ec
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVs+GonZI0rQl9r9NIEHBElMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNDAzYmM2MGI0YTEzYzNkYWEzNDExYWM5MjNjNjM3MmQ0
MjNlYjgwHhcNMjMwMTAxMTA1NDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNmI4NGY4N2Y4MjA5MDI0MjkwOGZiZTI3MDkwMjI3NWZkYzAxNmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7nkkxmAMoeUGh7gO9R+9OWc0iV3
GoEoc2ufiJj6sFXHEUzCuz1UlJS4xBu2cFlLFN0kf7DWvpBRq6CMX6W4dlEUxSMY
+HS3tJ4Bg9G7hyNKK/JrStg94CeT2hWOeeUnEskr4z0fXc3yvOi1bWfwj4V3eFgS
9okZkrM+4D73/ptm/xA2C5k1EdK0ZLV+CThYeRHSJ9+DVIjtVQt61JRZzn2H5yWE
PedEHSqmtOK4Ox4+xygqn91KLcr7cvRlYcRwtSajsXuIWNWxl78mVq3XsX7c0ajL
2uz3PwWUtMMxI75LBRAK+NzuvT1CjqO4SbTzeejPb5i7ozFR+v8hCrCv4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCa4T4f4IJAkKQj74nCQInX9wBbpMB8GA1UdIwQY
MBaAFExAO8YLShPD2qNBGskjxjctQj64MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEVBN3hndEtFOFBhbzBFYXlTUEdOeTFDUHJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8wOGI5YzQtMGFmZC00ODc2LTllZjct
MmU4NGI4ZDE4ZTRlLzEvSnJoUGhfZ2drQ1FwQ1B2aWNKQWlkZjNBRnVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi8wOGI5YzQtMGFmZC00ODc2LTllZjctMmU4NGI4ZDE4ZTRl
LzEvVEVBN3hndEtFOFBhbzBFYXlTUEdOeTFDUHJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSQpMA0G
CSqGSIb3DQEBCwUAA4IBAQAoH2n5rjw9jDzqUnQ3NgG2hamVoRPsbn3W/P81xRXy
/jw/VBmq0hIpnFmsghJTaHgTMdO0k3lJjQshWyVJJ/rxZIaAQXBgch+tFryq7wRG
4W6IEyX2AuyliOHrllmGgyMH/LIKDCOw0O5hkVthJUMU7AihLaPsc1OwjWgRfeS7
MKpA6El/GQ3o9GaC0cLh3x0fgYFHev5YoMiZwyozf8Ywam4z/ux69UvOZfhvXNrK
5/9N74zUc9FJf2GkGrvruxeYWReCE9UMSmpaEDywCugUniSfIY10c1OpNqPqhbDB
LngZMZCdIXlG5qU/m9apE0K4ub4Z+JNbbY8Zecruy6Hs
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:55 2024 by rpki-client on console-ams.rpki-client.org