Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JQ0ktjazbb34XvVtAP6cFB_iVcw.roa
File: JQ0ktjazbb34XvVtAP6cFB_iVcw.roa (raw, json)
Hash identifier: WuSG+7FjdNrnGKTAjF+9viHfd/M9jY4GdxrV8Ql0d7I=
Subject key identifier: 25:0D:24:B6:36:B3:6D:BD:F8:5E:F5:6D:00:FE:9C:14:1F:E2:55:CC
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DD106ACF15B4A08831DD498A706130
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JQ0ktjazbb34XvVtAP6cFB_iVcw.roa
Signing time: Tue 02 Jan 2024 06:29:39 +0000
ROA not before: Tue 02 Jan 2024 06:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215957
IP address blocks: 37.139.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Jan 2024 07:21:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dd:10:6a:cf:15:b4:a0:88:31:dd:49:8a:70:61:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=250d24b636b36dbdf85ef56d00fe9c141fe255cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:43:51:e2:19:4a:21:c4:d2:d0:a1:9a:ce:e0:
1d:0f:ac:32:8e:d8:93:d3:5a:43:c7:ec:c0:c8:88:
07:e2:ac:a3:02:3c:89:2f:ba:79:e2:af:fc:25:af:
d6:45:f0:2f:76:ef:70:88:6b:a8:21:77:07:2c:56:
cd:d1:a5:2e:18:41:53:7a:ba:6d:c4:e5:25:7f:31:
45:3c:ef:90:00:81:6a:b0:88:91:00:3d:5b:96:5f:
35:15:b5:0c:2d:0d:c1:34:3a:cc:e0:ad:c7:b6:4d:
9d:24:bc:b1:80:26:31:50:1f:b2:a2:b2:ba:25:b1:
8c:df:bc:ea:15:f8:08:09:ad:fe:24:d1:e3:69:61:
55:c6:4c:d5:a8:e9:e6:9e:ba:25:de:d1:ab:99:f2:
3a:f8:24:af:d4:ad:08:0c:d6:80:1c:19:7f:a5:2c:
a7:4a:95:79:0c:e8:80:eb:97:30:f0:e6:f9:3f:d8:
3b:3e:36:d5:57:83:28:c3:7b:3b:05:52:05:33:67:
c5:76:58:2f:4c:bf:63:22:62:5f:26:a3:57:50:30:
34:62:43:fc:63:f7:0c:8f:bd:f0:0d:40:08:a0:19:
37:62:62:f9:e9:66:b4:ec:63:04:90:f8:18:ee:07:
7f:e4:d9:c7:b4:fb:89:e6:2e:1b:75:0f:8f:f0:0f:
be:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0D:24:B6:36:B3:6D:BD:F8:5E:F5:6D:00:FE:9C:14:1F:E2:55:CC
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JQ0ktjazbb34XvVtAP6cFB_iVcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.129.0/24
Signature Algorithm: sha256WithRSAEncryption
06:87:d0:4f:6f:79:a3:55:38:6e:a6:b1:9e:e7:97:62:ac:76:
5b:c0:5f:40:a8:35:c2:3c:15:76:9b:0d:11:57:d4:ac:90:b3:
21:ae:f2:4d:72:92:a4:41:51:73:17:de:74:9c:ec:bf:09:d4:
b9:6d:e8:cb:6c:34:72:b6:a4:22:87:26:90:6f:87:a2:cb:c8:
51:61:de:37:02:c7:2a:08:4d:43:12:a2:51:40:03:2c:03:27:
e5:14:31:21:0a:52:3a:7a:e2:91:31:64:57:fc:80:07:9a:52:
2b:1a:da:75:5f:01:15:a5:7c:3c:fc:13:6b:d4:1e:df:73:7a:
fa:a2:e3:e8:77:f4:1a:da:2f:af:3d:54:82:8c:90:b8:ca:89:
b5:7e:41:92:65:40:12:37:fc:66:7e:dc:53:a9:5f:ae:49:f1:
22:e9:85:28:f6:66:6c:03:35:56:79:59:73:68:e9:24:53:04:
f8:02:e9:19:54:a4:56:6d:ec:4a:42:e7:dd:ca:70:20:91:7f:
91:02:59:9f:56:25:fc:b0:b2:1f:87:02:88:2d:06:e2:ab:e2:
c1:df:f3:61:13:8f:7c:5d:13:f2:8c:c0:f5:9e:24:d4:22:36:
7a:49:a9:c8:a1:ec:0b:24:e2:fb:69:01:24:38:58:44:c7:ac:
ff:e6:9e:4f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI3RBqzxW0oIgx3UmKcGEwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwMTAyMDYyOTM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTBkMjRiNjM2YjM2ZGJkZjg1ZWY1NmQwMGZlOWMxNDFmZTI1NWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApENR4hlKIcTS0KGazuAdD6wyjtiT
01pDx+zAyIgH4qyjAjyJL7p54q/8Ja/WRfAvdu9wiGuoIXcHLFbN0aUuGEFTerpt
xOUlfzFFPO+QAIFqsIiRAD1bll81FbUMLQ3BNDrM4K3Htk2dJLyxgCYxUB+yorK6
JbGM37zqFfgICa3+JNHjaWFVxkzVqOnmnrol3tGrmfI6+CSv1K0IDNaAHBl/pSyn
SpV5DOiA65cw8Ob5P9g7PjbVV4Mow3s7BVIFM2fFdlgvTL9jImJfJqNXUDA0YkP8
Y/cMj73wDUAIoBk3YmL56Wa07GMEkPgY7gd/5NnHtPuJ5i4bdQ+P8A++zQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCUNJLY2s229+F71bQD+nBQf4lXMMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvSlEwa3RqYXpiYjM0WHZWdEFQNmNGQl9pVmN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJYuBMA0G
CSqGSIb3DQEBCwUAA4IBAQAGh9BPb3mjVThuprGe55dirHZbwF9AqDXCPBV2mw0R
V9SskLMhrvJNcpKkQVFzF950nOy/CdS5bejLbDRytqQihyaQb4eiy8hRYd43Ascq
CE1DEqJRQAMsAyflFDEhClI6euKRMWRX/IAHmlIrGtp1XwEVpXw8/BNr1B7fc3r6
ouPod/Qa2i+vPVSCjJC4yom1fkGSZUASN/xmftxTqV+uSfEi6YUo9mZsAzVWeVlz
aOkkUwT4AukZVKRWbexKQufdynAgkX+RAlmfViX8sLIfhwKILQbiq+LB3/NhE498
XRPyjMD1niTUIjZ6SanIoewLJOL7aQEkOFhEx6z/5p5P
-----END CERTIFICATE-----
Generated at Tue Jan 9 09:51:27 2024 by rpki-client on console-fra.rpki-client.org