Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/JJMM_Zrehy0SXMIbuTDsEg3vG9Y.roa
File: JJMM_Zrehy0SXMIbuTDsEg3vG9Y.roa (raw, json)
Hash identifier: +/RvDYom12J2DGGARa12VgJHl5E4MsV3nXjr8IrIwZs=
Subject key identifier: 24:93:0C:FD:9A:DE:87:2D:12:5C:C2:1B:B9:30:EC:12:0D:EF:1B:D6
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018E5B2D647F7C8B3F4D79B939493E8530AF
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/JJMM_Zrehy0SXMIbuTDsEg3vG9Y.roa
Signing time: Wed 20 Mar 2024 09:24:45 +0000
ROA not before: Wed 20 Mar 2024 09:24:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57494
IP address blocks: 147.45.102.0/24 maxlen: 24
147.45.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Apr 2024 17:24:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:5b:2d:64:7f:7c:8b:3f:4d:79:b9:39:49:3e:85:30:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Mar 20 09:24:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24930cfd9ade872d125cc21bb930ec120def1bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f2:f1:cb:ef:50:95:a4:8d:a3:03:d8:e3:f1:
d3:96:88:41:72:6d:5c:09:02:53:2f:3d:a8:62:1f:
5d:db:d4:2b:d7:16:d2:60:62:05:d0:f5:b7:6b:bd:
1a:27:0b:54:33:3f:2e:4d:81:a4:f0:9e:1d:b6:5e:
d7:29:40:b5:b9:6d:3c:67:79:0f:c4:d8:4c:59:ec:
4f:12:94:f5:42:a7:65:a0:53:a2:17:42:ec:70:54:
f9:c8:49:09:1e:71:42:c5:8b:7a:08:46:8a:87:1c:
02:c8:23:78:fb:54:17:93:31:2e:9d:12:50:21:12:
03:72:a3:1c:65:83:14:62:52:00:d7:1f:51:08:24:
58:76:8f:fc:75:b3:99:b1:28:d9:40:27:b0:d7:d1:
a6:04:9a:3e:fa:31:6c:d1:c2:b4:a3:d6:65:cb:74:
bb:09:06:25:60:84:1d:a5:47:62:be:ea:05:b3:af:
59:25:1c:4a:ca:42:cb:d3:f5:88:f7:56:39:dc:b8:
b6:16:a0:7e:04:f5:77:5d:e8:ca:11:8c:dd:09:2c:
05:51:b7:40:a9:f9:82:45:71:22:25:6c:53:da:fc:
5e:b7:3d:22:70:c0:8c:cb:5b:34:6d:9d:a5:be:c7:
23:28:bf:4e:73:b3:a1:9d:d1:d5:7a:1e:28:53:c9:
83:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:93:0C:FD:9A:DE:87:2D:12:5C:C2:1B:B9:30:EC:12:0D:EF:1B:D6
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/JJMM_Zrehy0SXMIbuTDsEg3vG9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.102.0/24
147.45.147.0/24
Signature Algorithm: sha256WithRSAEncryption
49:0b:34:81:6b:b8:68:1e:21:59:6f:46:19:96:b2:14:1d:bf:
1b:19:ec:04:77:24:9b:53:4a:21:e7:7b:4d:cb:e2:1a:62:13:
be:15:30:cc:e5:c2:b2:06:9f:1a:7f:30:eb:c2:ce:65:96:2f:
2c:a2:96:83:13:67:be:71:f6:95:24:e6:be:89:45:c8:47:e6:
74:91:88:e6:c2:d6:58:26:ac:16:07:e7:fa:04:bd:c9:79:27:
a2:c7:72:77:f0:a3:79:6d:78:ed:80:d2:71:03:66:87:61:0e:
68:ec:54:d5:27:ed:21:04:fc:de:c1:31:77:76:e8:bf:4b:ab:
98:8f:d8:23:64:5f:cd:ff:bb:2e:f3:59:fc:14:b0:4e:e0:ca:
49:50:ff:57:80:c5:8f:da:ca:f7:d1:59:f9:20:7b:fb:5f:0c:
93:14:df:3d:01:ca:03:10:66:04:a5:0d:e5:86:a4:20:9f:84:
4d:45:eb:ac:14:8a:a6:11:72:bb:09:13:74:e9:83:ea:eb:8a:
4c:2f:39:27:7d:49:71:69:75:2c:39:cd:63:dc:63:2a:21:93:
2a:40:17:e2:1b:a5:4a:1a:9f:bb:00:6c:b3:43:f1:af:38:f4:
c2:e5:fb:38:8d:51:8e:3e:27:1e:a2:ea:2d:e0:51:04:3e:c5:
a1:fa:c3:aa
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY5bLWR/fIs/TXm5OUk+hTCvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4
Mjg3M2MwHhcNMjQwMzIwMDkyNDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDkzMGNmZDlhZGU4NzJkMTI1Y2MyMWJiOTMwZWMxMjBkZWYxYmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/Lxy+9QlaSNowPY4/HTlohBcm1c
CQJTLz2oYh9d29Qr1xbSYGIF0PW3a70aJwtUMz8uTYGk8J4dtl7XKUC1uW08Z3kP
xNhMWexPEpT1QqdloFOiF0LscFT5yEkJHnFCxYt6CEaKhxwCyCN4+1QXkzEunRJQ
IRIDcqMcZYMUYlIA1x9RCCRYdo/8dbOZsSjZQCew19GmBJo++jFs0cK0o9Zly3S7
CQYlYIQdpUdivuoFs69ZJRxKykLL0/WI91Y53Li2FqB+BPV3XejKEYzdCSwFUbdA
qfmCRXEiJWxT2vxetz0icMCMy1s0bZ2lvscjKL9Oc7OhndHVeh4oU8mDFQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCSTDP2a3octElzCG7kw7BIN7xvWMB8GA1UdIwQY
MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt
NGRlYzRkYWZlZTQ5LzEvSkpNTV9acmVoeTBTWE1JYnVURHNFZzN2RzlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5
LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAky1mAwQA
ky2TMA0GCSqGSIb3DQEBCwUAA4IBAQBJCzSBa7hoHiFZb0YZlrIUHb8bGewEdySb
U0oh53tNy+IaYhO+FTDM5cKyBp8afzDrws5lli8sopaDE2e+cfaVJOa+iUXIR+Z0
kYjmwtZYJqwWB+f6BL3JeSeix3J38KN5bXjtgNJxA2aHYQ5o7FTVJ+0hBPzewTF3
dui/S6uYj9gjZF/N/7su81n8FLBO4MpJUP9XgMWP2sr30Vn5IHv7XwyTFN89AcoD
EGYEpQ3lhqQgn4RNReusFIqmEXK7CRN06YPq64pMLzknfUlxaXUsOc1j3GMqIZMq
QBfiG6VKGp+7AGyzQ/GvOPTC5fs4jVGOPiceouot4FEEPsWh+sOq
-----END CERTIFICATE-----
Generated at Mon Apr 8 22:09:10 2024 by rpki-client on console-ams.rpki-client.org