Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Jl9ha_OPHmre-WYih4U9sefwFJc.roa
File: Jl9ha_OPHmre-WYih4U9sefwFJc.roa (raw, json)
Hash identifier: OK/nlx3Bln5BJsqzcmfnlK/gqJHKoUcK3ZdSxgxLQ6Q=
Subject key identifier: 26:5F:61:6B:F3:8F:1E:6A:DE:F9:66:22:87:85:3D:B1:E7:F0:14:97
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01856D81DEFDB02C7020B04CF4F16A21BA80
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Jl9ha_OPHmre-WYih4U9sefwFJc.roa
Signing time: Sun 01 Jan 2023 13:25:05 +0000
ROA not before: Sun 01 Jan 2023 13:25:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31083
IP address blocks: 87.120.41.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:de:fd:b0:2c:70:20:b0:4c:f4:f1:6a:21:ba:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 13:25:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=265f616bf38f1e6adef9662287853db1e7f01497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f5:32:50:e4:fc:d5:b1:08:3b:e0:7c:9c:1c:
c4:06:60:03:8b:40:c0:7c:33:ec:de:ed:5e:d1:b6:
ef:45:f7:27:05:fc:e0:a5:cf:d9:a4:f3:52:13:83:
2a:d3:e6:bc:c2:5b:64:cf:aa:47:96:f0:fd:27:40:
8f:3b:47:25:35:40:03:85:26:2b:9c:36:25:5a:b4:
ea:cc:17:8e:98:bb:b2:8d:41:26:33:30:32:c1:cb:
2b:ee:56:01:9e:be:9f:cb:ac:42:2b:eb:4d:99:09:
9e:d8:7b:dd:fd:68:9f:bd:d7:9a:e9:b1:6d:13:1b:
64:65:a9:5e:0a:5b:d9:28:8c:e1:01:ff:33:54:ff:
a0:ae:5d:4c:13:72:c1:62:bf:2d:6a:f2:59:af:62:
5d:a6:d0:40:61:11:ea:c9:be:0d:77:73:0f:fb:bf:
95:fe:1c:99:98:3c:d2:ec:51:58:9f:c4:81:30:13:
11:75:b9:49:d4:9a:0a:84:e8:a5:c1:c8:ee:5a:f7:
48:5c:3b:68:16:ca:a4:73:6d:6e:e3:b1:6c:1c:29:
c0:b5:4a:33:55:69:24:43:70:eb:89:27:30:73:6e:
b7:2b:18:44:87:1f:51:d6:2a:9c:26:c4:50:8b:7d:
6a:cf:01:70:e2:33:09:b7:33:f3:9d:07:c1:0b:f2:
37:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:5F:61:6B:F3:8F:1E:6A:DE:F9:66:22:87:85:3D:B1:E7:F0:14:97
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Jl9ha_OPHmre-WYih4U9sefwFJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.41.0/24
Signature Algorithm: sha256WithRSAEncryption
37:5c:0d:ad:2d:b1:0d:0e:32:5d:4c:ee:5a:4d:66:4c:91:f6:
d9:11:f6:4e:a9:36:d2:3c:8d:39:55:3a:1c:9e:2f:a8:87:95:
d2:e0:01:7c:92:38:74:52:2d:4c:97:44:2b:8c:f1:c9:24:02:
c7:ca:fc:78:09:c1:68:c1:86:46:12:1b:90:48:72:74:56:aa:
a0:5f:c0:d8:bd:79:e3:b5:3c:d0:45:98:e7:21:81:29:7b:76:
fc:51:6b:a2:51:d4:ce:95:59:aa:ca:17:9d:30:fa:27:4d:e9:
ee:a5:da:e3:4c:c1:67:d2:d7:97:ee:54:2c:53:45:f3:43:aa:
0d:51:2e:de:da:89:12:ea:fb:c9:88:d8:1b:7c:5f:9d:1a:15:
59:d7:6c:ba:50:11:7a:98:77:a0:c7:c7:b4:f8:11:0d:31:c2:
fe:37:7a:f3:02:19:2a:7e:9e:9e:90:59:c2:65:47:61:5a:39:
58:2b:e1:5d:3d:6e:03:80:41:f7:83:5f:7c:d6:35:fb:e4:76:
14:22:20:d5:31:b4:1c:85:40:0b:e6:a8:0e:9a:0c:94:40:0b:
4e:5a:2f:a2:40:40:79:8b:fe:03:b2:3d:9f:2b:7f:1d:20:78:
6a:06:57:3c:81:db:83:b1:c3:84:4f:d6:f8:6a:c2:10:89:55:
dc:c0:53:1e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtgd79sCxwILBM9PFqIbqAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwMTAxMTMyNTA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjVmNjE2YmYzOGYxZTZhZGVmOTY2MjI4Nzg1M2RiMWU3ZjAxNDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvUyUOT81bEIO+B8nBzEBmADi0DA
fDPs3u1e0bbvRfcnBfzgpc/ZpPNSE4Mq0+a8wltkz6pHlvD9J0CPO0clNUADhSYr
nDYlWrTqzBeOmLuyjUEmMzAywcsr7lYBnr6fy6xCK+tNmQme2Hvd/Wifvdea6bFt
ExtkZaleClvZKIzhAf8zVP+grl1ME3LBYr8tavJZr2JdptBAYRHqyb4Nd3MP+7+V
/hyZmDzS7FFYn8SBMBMRdblJ1JoKhOilwcjuWvdIXDtoFsqkc21u47FsHCnAtUoz
VWkkQ3DriScwc263KxhEhx9R1iqcJsRQi31qzwFw4jMJtzPznQfBC/I3FwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCZfYWvzjx5q3vlmIoeFPbHn8BSXMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvSmw5aGFfT1BIbXJlLVdZaWg0VTlzZWZ3RkpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV3gpMA0G
CSqGSIb3DQEBCwUAA4IBAQA3XA2tLbENDjJdTO5aTWZMkfbZEfZOqTbSPI05VToc
ni+oh5XS4AF8kjh0Ui1Ml0QrjPHJJALHyvx4CcFowYZGEhuQSHJ0VqqgX8DYvXnj
tTzQRZjnIYEpe3b8UWuiUdTOlVmqyhedMPonTenupdrjTMFn0teX7lQsU0XzQ6oN
US7e2okS6vvJiNgbfF+dGhVZ12y6UBF6mHegx8e0+BENMcL+N3rzAhkqfp6ekFnC
ZUdhWjlYK+FdPW4DgEH3g1981jX75HYUIiDVMbQchUAL5qgOmgyUQAtOWi+iQEB5
i/4Dsj2fK38dIHhqBlc8gduDscOET9b4asIQiVXcwFMe
-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:10 2024 by rpki-client on console-ams.rpki-client.org