Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/JjVFHtQsUjNLb_QZKY9mwTYrCQo.roa
File: JjVFHtQsUjNLb_QZKY9mwTYrCQo.roa (raw, json)
Hash identifier: RaG5gZddTUdMK8qVFUISwOPDVRhBK5ajZIcBNtOTBI4=
Subject key identifier: 26:35:45:1E:D4:2C:52:33:4B:6F:F4:19:29:8F:66:C1:36:2B:09:0A
Certificate issuer: /CN=44df4fcb8ea51e18d290805c8f50f0df4340dbd5
Certificate serial: 0190073713669E3ADC7B97E11088834E4D6E
Authority key identifier: 44:DF:4F:CB:8E:A5:1E:18:D2:90:80:5C:8F:50:F0:DF:43:40:DB:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RN9Py46lHhjSkIBcj1Dw30NA29U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/JjVFHtQsUjNLb_QZKY9mwTYrCQo.roa
Signing time: Tue 11 Jun 2024 12:12:48 +0000
ROA not before: Tue 11 Jun 2024 12:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49747
IP address blocks: 188.64.141.0/24 maxlen: 24
2001:67c:c6c::/48 maxlen: 48
2a14:5f40::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 11 Jun 2024 14:32:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:07:37:13:66:9e:3a:dc:7b:97:e1:10:88:83:4e:4d:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44df4fcb8ea51e18d290805c8f50f0df4340dbd5
Validity
Not Before: Jun 11 12:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2635451ed42c52334b6ff419298f66c1362b090a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c4:26:52:bb:18:94:ec:ae:ef:26:c6:a0:63:
eb:b0:4d:42:c6:ab:d2:c7:b3:20:ec:aa:ab:cd:2e:
f7:53:c0:9e:e2:db:04:14:bd:08:21:65:99:41:f5:
fa:38:3c:cb:2d:85:47:a3:e3:3c:37:86:76:ea:f9:
c2:54:5b:d7:1c:18:38:f1:46:2b:e1:30:12:84:5f:
60:0f:09:ec:ac:ff:79:ee:a8:ba:ec:23:1b:4b:99:
5b:0d:a1:c7:89:87:90:89:51:2e:d2:10:ef:ae:cb:
4c:d4:e5:d6:5d:6d:9e:1e:95:c1:86:ea:74:74:b5:
bd:03:48:74:14:aa:8c:f3:17:ef:15:07:c9:4f:3f:
71:90:c1:03:72:99:0d:4d:39:eb:d9:83:12:65:32:
91:bf:f2:39:f4:7e:27:e3:7e:c1:44:a0:9c:21:83:
c1:23:8a:77:ae:0a:20:ec:d2:9e:c1:97:2b:2f:4c:
c9:da:c4:df:b5:a0:01:35:fe:04:51:cd:16:25:84:
0c:b9:fd:16:1f:85:a4:4a:9f:06:e3:07:93:b3:37:
6c:0d:22:26:68:88:08:e5:bf:e1:41:6b:7b:e7:dd:
6a:a5:fe:62:4d:f2:a9:3d:7e:ea:c7:b0:97:f3:a6:
3f:70:37:eb:08:f5:32:80:88:83:67:ed:f4:0f:c1:
fe:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:35:45:1E:D4:2C:52:33:4B:6F:F4:19:29:8F:66:C1:36:2B:09:0A
X509v3 Authority Key Identifier:
keyid:44:DF:4F:CB:8E:A5:1E:18:D2:90:80:5C:8F:50:F0:DF:43:40:DB:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RN9Py46lHhjSkIBcj1Dw30NA29U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/JjVFHtQsUjNLb_QZKY9mwTYrCQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.64.141.0/24
IPv6:
2001:67c:c6c::/48
2a14:5f40::/29
Signature Algorithm: sha256WithRSAEncryption
84:b7:38:0e:6b:ae:1b:bb:7a:79:c4:dc:f9:2f:83:13:03:09:
19:d7:02:fa:0b:95:c4:9f:9a:83:00:64:c2:3e:b2:56:c6:b1:
15:59:91:9f:da:e1:ca:d2:1b:5d:29:7c:96:8f:84:51:c7:79:
32:ad:26:3b:a1:53:c4:44:74:d2:21:81:ac:6c:b0:cf:49:20:
43:83:7c:78:b5:89:d6:ff:fe:45:09:e2:df:1f:7b:cb:0e:5b:
be:d2:56:85:95:0c:4e:ba:06:ee:fe:aa:9e:42:78:77:83:bf:
7c:8e:cd:f2:5f:e1:6a:6f:3f:a9:39:86:45:19:ba:0c:03:56:
4f:b0:aa:b9:42:a5:83:e6:6a:5b:72:ec:70:5b:77:b5:a4:3f:
a8:29:a4:ae:27:b8:44:0d:01:e2:aa:52:b0:cb:56:db:73:a1:
72:72:85:3a:07:be:14:45:9f:61:f2:be:85:da:6c:3e:e7:f2:
4b:f0:5f:87:09:d4:0c:0b:c0:16:6e:22:cc:20:08:ab:14:59:
14:a0:b3:19:cc:7a:cd:cc:2a:a4:41:47:31:fc:e5:dc:f0:28:
e3:76:1d:99:56:82:15:8e:e0:09:15:5b:7f:e5:0c:fb:cf:22:
8f:20:2d:b6:3b:df:d2:a9:c7:cf:9e:8a:2a:6e:73:fd:d8:11:
0c:d3:90:0b
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZAHNxNmnjrce5fhEIiDTk1uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ZGY0ZmNiOGVhNTFlMThkMjkwODA1YzhmNTBmMGRmNDM0
MGRiZDUwHhcNMjQwNjExMTIxMjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjM1NDUxZWQ0MmM1MjMzNGI2ZmY0MTkyOThmNjZjMTM2MmIwOTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8QmUrsYlOyu7ybGoGPrsE1CxqvS
x7Mg7KqrzS73U8Ce4tsEFL0IIWWZQfX6ODzLLYVHo+M8N4Z26vnCVFvXHBg48UYr
4TAShF9gDwnsrP957qi67CMbS5lbDaHHiYeQiVEu0hDvrstM1OXWXW2eHpXBhup0
dLW9A0h0FKqM8xfvFQfJTz9xkMEDcpkNTTnr2YMSZTKRv/I59H4n437BRKCcIYPB
I4p3rgog7NKewZcrL0zJ2sTftaABNf4EUc0WJYQMuf0WH4WkSp8G4weTszdsDSIm
aIgI5b/hQWt7591qpf5iTfKpPX7qx7CX86Y/cDfrCPUygIiDZ+30D8H+QQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFCY1RR7ULFIzS2/0GSmPZsE2KwkKMB8GA1UdIwQY
MBaAFETfT8uOpR4Y0pCAXI9Q8N9DQNvVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUk45UHk0NmxIaGpTa0lCY2oxRHczME5BMjlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS83Y2MxODMtZWJhNS00NzQ3LThiMTAt
ZjM4Yzc0OWI2ZTM5LzEvSmpWRkh0UXNVak5MYl9RWktZOW13VFlyQ1FvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS83Y2MxODMtZWJhNS00NzQ3LThiMTAtZjM4Yzc0OWI2ZTM5
LzEvUk45UHk0NmxIaGpTa0lCY2oxRHczME5BMjlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQAvECNMBYE
AgACMBADBwAgAQZ8DGwDBQMqFF9AMA0GCSqGSIb3DQEBCwUAA4IBAQCEtzgOa64b
u3p5xNz5L4MTAwkZ1wL6C5XEn5qDAGTCPrJWxrEVWZGf2uHK0htdKXyWj4RRx3ky
rSY7oVPERHTSIYGsbLDPSSBDg3x4tYnW//5FCeLfH3vLDlu+0laFlQxOugbu/qqe
Qnh3g798js3yX+Fqbz+pOYZFGboMA1ZPsKq5QqWD5mpbcuxwW3e1pD+oKaSuJ7hE
DQHiqlKwy1bbc6FycoU6B74URZ9h8r6F2mw+5/JL8F+HCdQMC8AWbiLMIAirFFkU
oLMZzHrNzCqkQUcx/OXc8Cjjdh2ZVoIVjuAJFVt/5Qz7zyKPIC22O9/SqcfPnooq
bnP92BEM05AL
-----END CERTIFICATE-----
Generated at Tue Jun 11 17:40:39 2024 by rpki-client on console-fra.rpki-client.org