Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JnixeFjjCO6RllD_JBmTwrt59LA.roa
File: JnixeFjjCO6RllD_JBmTwrt59LA.roa (raw, json)
Hash identifier: 6wjSUV7Hv25bDhjH65jQWpU9UAMz1Mlh6hPYYNnLvJM=
Subject key identifier: 26:78:B1:78:58:E3:08:EE:91:96:50:FF:24:19:93:C2:BB:79:F4:B0
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01856D81D651092F844C7787CDA6A0AFEB24
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JnixeFjjCO6RllD_JBmTwrt59LA.roa
Signing time: Sun 01 Jan 2023 13:25:03 +0000
ROA not before: Sun 01 Jan 2023 13:25:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 17447
IP address blocks: 84.54.51.0/24 maxlen: 24
185.246.220.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:d6:51:09:2f:84:4c:77:87:cd:a6:a0:af:eb:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 13:25:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2678b17858e308ee919650ff241993c2bb79f4b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:72:ac:08:c7:a1:d8:47:83:5d:cb:ee:0c:b0:
8b:2f:ca:13:c8:6d:02:83:f5:4e:f5:a7:22:72:f0:
4b:ae:6a:df:ab:33:f0:9a:5a:b0:f5:e4:ad:12:6f:
9c:5d:e3:92:1a:dd:e9:3c:9c:8e:7e:7b:b9:23:73:
09:17:6d:c4:5f:1a:1a:f5:ec:c8:16:49:4c:c8:19:
59:2a:0b:82:70:7b:88:25:c7:9e:04:8a:77:df:cb:
ce:cf:09:7c:a2:9b:8e:1a:98:00:32:bf:b7:2d:da:
68:f4:a7:00:d8:8b:26:48:0c:36:c3:2b:17:f4:74:
91:5b:b7:ed:a8:cb:bf:48:9f:79:c5:08:8f:cb:27:
7a:bd:3e:5b:c9:70:9b:56:d5:1e:4f:6e:b8:bb:20:
e1:db:36:25:26:f8:89:8f:f1:1d:7e:f3:99:ff:69:
50:49:85:3f:4c:07:c1:2c:9d:d6:56:06:15:27:e3:
a7:62:08:37:76:23:f9:d8:0b:fe:82:c2:4d:5e:22:
c7:aa:7b:7c:fc:04:28:77:32:6f:ea:d7:f2:24:44:
20:a6:b5:46:74:05:b7:2b:3a:94:df:1a:e1:4c:1d:
e1:45:2d:6b:c3:3e:c4:de:43:57:7b:a6:c3:b5:bc:
89:a6:40:24:e1:eb:96:b4:c0:bb:6d:c5:dd:d4:f0:
65:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:78:B1:78:58:E3:08:EE:91:96:50:FF:24:19:93:C2:BB:79:F4:B0
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JnixeFjjCO6RllD_JBmTwrt59LA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.51.0/24
185.246.220.0/24
Signature Algorithm: sha256WithRSAEncryption
30:c5:80:aa:a5:45:1a:86:a8:ff:dd:92:59:a6:06:3c:ec:f2:
2e:dc:87:52:27:5e:57:2f:cc:eb:f5:a8:cf:09:75:39:32:30:
89:d2:d6:3c:05:06:cf:9a:8f:ab:3b:b5:21:7d:f0:ca:e6:08:
03:0e:5b:22:e2:8a:64:d0:b8:56:ce:01:2a:ad:f4:79:bf:3b:
ae:32:ef:c9:77:26:a8:7f:86:b9:94:be:eb:9d:92:0a:1d:98:
9c:7c:15:b3:df:93:a1:d0:90:3d:f9:99:cd:03:a5:aa:33:05:
6e:0e:d9:a0:59:60:25:23:a0:7b:3a:1c:e3:3f:08:c4:fa:c8:
82:30:43:5b:6e:9d:80:ce:c3:f6:90:11:ba:8d:5d:3e:4f:f9:
89:43:c3:ce:b6:05:bb:bb:da:33:a1:cb:f7:3d:ea:e7:88:fd:
66:6e:3e:15:5d:32:96:72:be:de:0f:fa:2b:da:d6:e7:9d:f0:
00:f6:2d:d5:ca:85:20:5e:0a:15:80:25:97:fd:8d:eb:3b:26:
e8:47:6d:ed:05:6b:08:c7:14:65:50:b7:27:c7:ff:a0:c4:09:
54:d3:5b:81:26:52:48:c5:26:d0:c7:b0:fc:f7:28:70:1c:44:
07:68:44:02:c1:6f:5b:56:29:97:8d:e5:ef:67:84:90:ea:ef:
10:ba:08:e4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVtgdZRCS+ETHeHzaagr+skMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwMTAxMTMyNTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjc4YjE3ODU4ZTMwOGVlOTE5NjUwZmYyNDE5OTNjMmJiNzlmNGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHKsCMeh2EeDXcvuDLCLL8oTyG0C
g/VO9acicvBLrmrfqzPwmlqw9eStEm+cXeOSGt3pPJyOfnu5I3MJF23EXxoa9ezI
FklMyBlZKguCcHuIJceeBIp338vOzwl8opuOGpgAMr+3Ldpo9KcA2IsmSAw2wysX
9HSRW7ftqMu/SJ95xQiPyyd6vT5byXCbVtUeT264uyDh2zYlJviJj/EdfvOZ/2lQ
SYU/TAfBLJ3WVgYVJ+OnYgg3diP52Av+gsJNXiLHqnt8/AQodzJv6tfyJEQgprVG
dAW3KzqU3xrhTB3hRS1rwz7E3kNXe6bDtbyJpkAk4euWtMC7bcXd1PBlkwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCZ4sXhY4wjukZZQ/yQZk8K7efSwMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvSm5peGVGampDTzZSbGxEX0pCbVR3cnQ1OUxBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVDYzAwQA
ufbcMA0GCSqGSIb3DQEBCwUAA4IBAQAwxYCqpUUahqj/3ZJZpgY87PIu3IdSJ15X
L8zr9ajPCXU5MjCJ0tY8BQbPmo+rO7UhffDK5ggDDlsi4opk0LhWzgEqrfR5vzuu
Mu/Jdyaof4a5lL7rnZIKHZicfBWz35Oh0JA9+ZnNA6WqMwVuDtmgWWAlI6B7Ohzj
PwjE+siCMENbbp2AzsP2kBG6jV0+T/mJQ8POtgW7u9ozocv3PerniP1mbj4VXTKW
cr7eD/or2tbnnfAA9i3VyoUgXgoVgCWX/Y3rOyboR23tBWsIxxRlULcnx/+gxAlU
01uBJlJIxSbQx7D89yhwHEQHaEQCwW9bVimXjeXvZ4SQ6u8Qugjk
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:35 2023 by rpki-client on console-ams.rpki-client.org