Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JsBPtTinTFIl9PItubqMzWRiOD8.roa
File: JsBPtTinTFIl9PItubqMzWRiOD8.roa (raw, json)
Hash identifier: 4hGyXSLkaValiBmtjw7poporCvxI36Ws0X9qZKCIuoY=
Subject key identifier: 26:C0:4F:B5:38:A7:4C:52:25:F4:F2:2D:B9:BA:8C:CD:64:62:38:3F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0188BD97D2693076A4FFD32BD95B5A01B751
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JsBPtTinTFIl9PItubqMzWRiOD8.roa
Signing time: Thu 15 Jun 2023 05:47:03 +0000
ROA not before: Thu 15 Jun 2023 05:47:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207633
IP address blocks: 87.120.166.0/24 maxlen: 24
87.121.44.0/24 maxlen: 24
87.121.46.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
45.128.233.0/24 maxlen: 24
94.156.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Jul 2023 11:17:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bd:97:d2:69:30:76:a4:ff:d3:2b:d9:5b:5a:01:b7:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 15 05:47:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26c04fb538a74c5225f4f22db9ba8ccd6462383f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d4:93:ab:ba:a2:1f:5d:f9:1d:e0:1e:98:0d:
09:22:24:d9:bc:55:4a:c7:6d:7b:82:32:19:ce:4a:
03:52:64:38:93:1c:95:69:dd:89:56:c7:18:c8:15:
f4:c3:6e:5b:93:b9:2b:1a:f6:04:42:e6:5d:1f:ed:
c6:41:5e:c8:7e:0d:29:3e:ee:e1:3f:f9:0b:1d:d7:
b3:f2:5a:ba:bd:94:31:84:e1:39:09:d5:37:da:5b:
c0:34:66:3a:8c:c2:42:01:38:8f:e0:7f:1b:a7:3f:
f7:bc:78:17:f2:fb:fa:14:92:49:53:ef:ab:0f:12:
aa:b7:93:96:21:6f:9c:ce:bc:27:15:d3:02:64:4a:
73:58:aa:62:0a:0c:39:f5:7b:f1:a9:19:e2:7c:fd:
a8:18:ad:12:40:68:f9:21:7b:9a:24:d1:2a:d5:92:
e4:05:12:89:58:c8:0d:96:22:c3:0f:c3:86:f9:6c:
6f:2a:00:e0:4f:fb:31:f2:ed:47:32:88:90:d3:f4:
0f:50:1b:a7:2c:42:3e:c2:b7:58:ca:ed:05:e9:a5:
97:04:2c:b9:f0:22:46:27:9e:75:19:58:12:ed:dd:
1e:8a:f2:3f:50:07:da:27:61:26:1c:9d:4b:e8:01:
47:e5:b9:fd:aa:3d:27:9d:11:24:f8:ad:0c:21:41:
6d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C0:4F:B5:38:A7:4C:52:25:F4:F2:2D:B9:BA:8C:CD:64:62:38:3F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JsBPtTinTFIl9PItubqMzWRiOD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.233.0/24
85.31.47.0/24
87.120.166.0/24
87.121.44.0/24
87.121.46.0/24
94.156.79.0/24
Signature Algorithm: sha256WithRSAEncryption
03:86:f9:f8:cc:a3:f2:4a:0c:37:51:ec:04:69:9c:cd:7d:4d:
8b:e6:ad:a2:21:27:2f:bb:06:7c:e2:2f:74:fa:d4:c5:f8:cd:
72:d2:7c:68:33:6a:f9:a1:ce:a8:9d:6f:30:6a:cb:c4:30:9b:
3c:3a:2f:7c:83:dd:ff:43:ce:f5:dc:d3:02:83:93:c7:53:f0:
bf:ec:ae:10:bc:02:c8:31:57:9f:38:cc:e3:e2:8f:fb:3b:c0:
82:89:cc:59:e7:27:a4:db:f0:c1:31:5e:11:c3:41:79:c2:00:
75:fe:f2:39:74:92:d6:42:de:76:07:4c:ed:3f:8d:3d:a5:11:
b7:f1:34:51:65:78:ee:77:5c:05:00:51:4c:fb:60:6b:e8:96:
b5:d9:56:d7:2c:87:80:8a:58:5a:91:c1:3f:bc:91:c4:0b:c6:
46:ed:de:bd:7a:e5:f3:83:bb:64:23:0f:ba:e6:f5:45:f7:26:
bd:4e:ea:a5:88:04:31:a6:94:8c:5b:0c:ba:f0:9d:aa:26:ee:
42:22:b4:48:ce:61:dd:38:da:f4:3c:cd:4c:11:1e:aa:c5:59:
b0:ba:1b:58:28:3d:b1:62:c1:ca:de:40:90:9c:38:e3:0e:43:
91:c5:38:35:26:5e:6b:30:2f:c8:13:90:98:65:da:1a:6f:2c:
0c:17:fd:d1
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYi9l9JpMHak/9Mr2VtaAbdRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwNjE1MDU0NzAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNmMwNGZiNTM4YTc0YzUyMjVmNGYyMmRiOWJhOGNjZDY0NjIzODNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9STq7qiH135HeAemA0JIiTZvFVK
x217gjIZzkoDUmQ4kxyVad2JVscYyBX0w25bk7krGvYEQuZdH+3GQV7Ifg0pPu7h
P/kLHdez8lq6vZQxhOE5CdU32lvANGY6jMJCATiP4H8bpz/3vHgX8vv6FJJJU++r
DxKqt5OWIW+czrwnFdMCZEpzWKpiCgw59XvxqRnifP2oGK0SQGj5IXuaJNEq1ZLk
BRKJWMgNliLDD8OG+WxvKgDgT/sx8u1HMoiQ0/QPUBunLEI+wrdYyu0F6aWXBCy5
8CJGJ551GVgS7d0eivI/UAfaJ2EmHJ1L6AFH5bn9qj0nnREk+K0MIUFtLQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFCbAT7U4p0xSJfTyLbm6jM1kYjg/MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvSnNCUHRUaW5URklsOVBJdHVicU16V1JpT0Q4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQALYDpAwQA
VR8vAwQAV3imAwQAV3ksAwQAV3kuAwQAXpxPMA0GCSqGSIb3DQEBCwUAA4IBAQAD
hvn4zKPySgw3UewEaZzNfU2L5q2iIScvuwZ84i90+tTF+M1y0nxoM2r5oc6onW8w
asvEMJs8Oi98g93/Q8713NMCg5PHU/C/7K4QvALIMVefOMzj4o/7O8CCicxZ5yek
2/DBMV4Rw0F5wgB1/vI5dJLWQt52B0ztP409pRG38TRRZXjud1wFAFFM+2Br6Ja1
2VbXLIeAilhakcE/vJHEC8ZG7d69euXzg7tkIw+65vVF9ya9TuqliAQxppSMWwy6
8J2qJu5CIrRIzmHdONr0PM1MER6qxVmwuhtYKD2xYsHK3kCQnDjjDkORxTg1Jl5r
MC/IE5CYZdoabywMF/3R
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:30 2024 by rpki-client on console-ams.rpki-client.org