Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/j_kywoHD5CLPB4whJ7lhkZ9Mdm8.roa
File: j_kywoHD5CLPB4whJ7lhkZ9Mdm8.roa (raw, json)
Hash identifier: vVT5LeeGNtJwZp+pDmnuzFOyG49F/zYV/fhODrGqLy8=
Subject key identifier: 8F:F9:32:C2:81:C3:E4:22:CF:07:8C:21:27:B9:61:91:9F:4C:76:6F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DCD2E7D460EDEE27EBDDA4A8BDAEF3
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/j_kywoHD5CLPB4whJ7lhkZ9Mdm8.roa
Signing time: Tue 02 Jan 2024 06:29:24 +0000
ROA not before: Tue 02 Jan 2024 06:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 195.178.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Apr 2024 12:45:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:d2:e7:d4:60:ed:ee:27:eb:dd:a4:a8:bd:ae:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ff932c281c3e422cf078c2127b961919f4c766f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:17:04:ba:13:92:b7:5a:39:d2:a7:01:15:ee:
59:f5:94:26:6d:c3:13:73:33:6d:55:48:2b:99:52:
d9:5d:6e:09:03:fc:ac:07:93:72:ed:5b:a1:6f:8a:
2b:33:a8:5d:2e:3d:0c:5b:55:20:87:a3:28:2c:93:
21:c5:b8:f0:e0:b5:fc:99:cd:5f:2a:bb:55:d8:60:
18:bc:70:bd:55:2f:94:da:6e:db:00:a3:b6:ad:15:
5a:34:70:d0:9e:cd:35:a6:4e:17:c6:1c:85:b1:33:
9f:19:ae:1f:dc:4e:66:35:e0:1b:30:92:b3:25:43:
67:eb:fe:f9:d7:2a:64:38:c4:34:b7:a2:41:69:0a:
bb:02:d8:fb:48:43:8d:9c:0a:8c:e1:fc:ca:80:10:
07:d5:cf:19:21:37:60:db:07:d4:1f:e0:64:0a:90:
83:bf:2d:9f:8e:dd:9c:3f:e9:16:f1:64:92:61:72:
c6:bc:3f:8a:25:48:0a:bf:b5:2e:9d:f8:f5:55:88:
aa:6c:8a:01:83:7d:99:5d:78:7f:33:b6:fb:67:2b:
ff:30:80:ba:24:38:bb:29:ec:c9:2f:e6:1a:97:5a:
7a:cd:5a:08:a3:3a:c8:c1:8f:30:35:70:c1:1a:e4:
b9:10:f4:64:de:31:0e:0a:79:d5:9b:ac:06:3e:16:
51:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F9:32:C2:81:C3:E4:22:CF:07:8C:21:27:B9:61:91:9F:4C:76:6F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/j_kywoHD5CLPB4whJ7lhkZ9Mdm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.111.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:6a:3d:c7:4d:50:ff:79:ed:58:14:ed:32:67:e2:94:88:99:
6a:af:04:2d:30:f5:c3:08:e2:76:c6:35:2e:f7:6f:36:29:5b:
5b:c4:9a:c3:b1:5a:cb:55:22:2e:c6:dd:09:85:a0:e0:14:32:
60:f4:bf:0f:8b:67:a5:bf:c1:27:4f:5b:a9:6e:b3:27:25:d9:
1f:df:a9:3d:e4:5f:ac:ec:4e:54:20:71:72:be:4a:39:f3:9b:
f2:36:73:24:91:63:c9:35:f4:44:39:f4:7e:42:cd:7e:10:13:
25:78:8d:d7:c9:f8:d5:6b:07:fd:a0:31:17:70:7f:84:68:cd:
bb:e8:4b:75:44:bd:52:a1:d8:a2:51:64:e9:87:13:b6:1a:c2:
7c:a9:be:7d:f3:59:72:e8:14:a6:cc:f8:83:a0:af:39:ec:62:
f1:50:6c:44:30:e1:04:4b:9d:79:42:e5:a6:16:af:98:91:02:
e5:14:12:43:b9:db:4e:db:b4:57:4b:8b:15:ec:6e:68:a8:a8:
86:0a:19:52:0e:db:46:22:f7:ac:ae:31:13:12:f5:62:64:18:
60:4a:31:d3:33:68:40:05:e6:0c:85:56:e4:cf:99:d1:f5:3a:
64:c6:51:28:74:f0:1e:43:63:91:aa:1a:c2:8c:ef:00:4a:53:
23:72:b0:0a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI3NLn1GDt7ifr3aSova7zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwMTAyMDYyOTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZmY5MzJjMjgxYzNlNDIyY2YwNzhjMjEyN2I5NjE5MTlmNGM3NjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRcEuhOSt1o50qcBFe5Z9ZQmbcMT
czNtVUgrmVLZXW4JA/ysB5Ny7Vuhb4orM6hdLj0MW1Ugh6MoLJMhxbjw4LX8mc1f
KrtV2GAYvHC9VS+U2m7bAKO2rRVaNHDQns01pk4XxhyFsTOfGa4f3E5mNeAbMJKz
JUNn6/751ypkOMQ0t6JBaQq7Atj7SEONnAqM4fzKgBAH1c8ZITdg2wfUH+BkCpCD
vy2fjt2cP+kW8WSSYXLGvD+KJUgKv7Uunfj1VYiqbIoBg32ZXXh/M7b7Zyv/MIC6
JDi7KezJL+Yal1p6zVoIozrIwY8wNXDBGuS5EPRk3jEOCnnVm6wGPhZRVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI/5MsKBw+QizweMISe5YZGfTHZvMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEval9reXdvSEQ1Q0xQQjR3aEo3bGhrWjlNZG04LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw7JvMA0G
CSqGSIb3DQEBCwUAA4IBAQBfaj3HTVD/ee1YFO0yZ+KUiJlqrwQtMPXDCOJ2xjUu
9282KVtbxJrDsVrLVSIuxt0JhaDgFDJg9L8Pi2elv8EnT1upbrMnJdkf36k95F+s
7E5UIHFyvko585vyNnMkkWPJNfREOfR+Qs1+EBMleI3XyfjVawf9oDEXcH+EaM27
6Et1RL1SodiiUWTphxO2GsJ8qb5981ly6BSmzPiDoK857GLxUGxEMOEES515QuWm
Fq+YkQLlFBJDudtO27RXS4sV7G5oqKiGChlSDttGIvesrjETEvViZBhgSjHTM2hA
BeYMhVbkz5nR9TpkxlEodPAeQ2ORqhrCjO8ASlMjcrAK
-----END CERTIFICATE-----
Generated at Fri Apr 19 18:28:15 2024 by rpki-client on console-ams.rpki-client.org