Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/J-sO8HyFJVt_6flO0XFEhVBZGEI.roa
File: J-sO8HyFJVt_6flO0XFEhVBZGEI.roa (raw, json)
Hash identifier: WC7rksI9rhWX3Er/Bt6l3gbW6fudR7cTnfW/AS4zS18=
Subject key identifier: 27:EB:0E:F0:7C:85:25:5B:7F:E9:F9:4E:D1:71:44:85:50:59:18:42
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 0188E39F6E22C446132C16F66534E63BADE1
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/J-sO8HyFJVt_6flO0XFEhVBZGEI.roa
Signing time: Thu 22 Jun 2023 15:00:56 +0000
ROA not before: Thu 22 Jun 2023 15:00:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1887
IP address blocks: 148.81.13.0/24 maxlen: 24
195.187.64.0/18 maxlen: 18
148.81.100.0/24 maxlen: 24
148.81.0.0/16 maxlen: 16
2a00:1488::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e3:9f:6e:22:c4:46:13:2c:16:f6:65:34:e6:3b:ad:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jun 22 15:00:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27eb0ef07c85255b7fe9f94ed171448550591842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a8:21:f5:5b:fe:6e:4a:f6:29:9a:ee:b7:6c:
d5:a7:5e:56:60:5a:f7:42:7c:f3:a9:72:4d:75:41:
30:90:1d:1c:43:37:50:ca:33:0b:c3:14:c9:6f:47:
dc:62:7d:6f:64:ad:76:4c:5d:19:dd:a6:60:ae:d9:
0f:be:88:4b:56:a6:17:d0:10:23:23:4f:97:d9:8f:
64:b6:b4:83:d4:4e:e2:3a:42:ac:27:d9:93:e0:d9:
52:6c:56:50:27:38:ab:c8:ec:dd:7c:09:e0:1f:7c:
96:32:3b:ad:8b:d2:9a:3d:67:8f:bf:2c:98:80:55:
15:08:51:b5:52:75:05:19:c1:12:b2:60:ce:f7:bf:
8c:e3:08:18:f5:a2:39:7f:98:c0:7e:a9:a6:15:f7:
26:e9:ce:a9:98:7a:c4:86:0e:74:18:99:18:4a:54:
8d:65:67:ae:a4:58:52:fa:17:02:d1:f3:65:b7:1a:
b1:46:08:e6:08:e7:28:ce:e7:b7:dd:56:10:96:d6:
93:b9:70:78:f6:81:e0:f6:8d:59:ca:0a:cc:27:29:
82:9d:b9:8c:27:53:d8:24:a1:f9:43:23:1c:8c:53:
18:6c:46:a6:8d:f5:06:46:68:8f:4e:6f:19:8a:7d:
d0:db:4b:54:e7:a6:8d:11:a4:bb:f7:9b:7f:69:b2:
99:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:EB:0E:F0:7C:85:25:5B:7F:E9:F9:4E:D1:71:44:85:50:59:18:42
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/J-sO8HyFJVt_6flO0XFEhVBZGEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.81.0.0/16
195.187.64.0/18
IPv6:
2a00:1488::/32
Signature Algorithm: sha256WithRSAEncryption
2a:d3:37:56:1d:8e:6f:8e:53:35:26:69:31:e5:01:e7:1f:eb:
3d:ba:f5:d6:1d:4e:46:b9:c0:b6:8f:07:7f:56:f3:1a:d4:53:
8f:a6:c5:b3:2f:86:0d:d8:49:35:25:8e:55:c9:e0:0a:ba:5f:
77:c5:7e:34:56:6a:02:d2:4e:68:d0:0e:58:4c:f2:5e:0e:24:
c3:70:5c:58:f4:0e:70:2f:51:5b:20:70:8b:b7:c5:81:3e:6e:
d1:ad:0f:96:e3:ae:df:ab:5f:59:c0:62:f1:80:24:3e:1c:0b:
f7:49:2e:e6:aa:8a:04:4e:0c:c1:8a:8f:e3:be:c0:c1:c9:75:
7a:d2:ba:59:41:ba:b8:f4:62:d0:af:bc:8a:11:7f:60:af:dc:
2c:0a:d8:9f:2d:a4:10:13:96:28:f9:c7:b9:cf:61:af:1d:a0:
9e:8e:47:75:c9:f3:6e:96:46:d8:af:0d:6d:46:db:00:95:ba:
37:0f:2b:6e:f2:c8:39:e5:50:1f:bb:3c:a4:f5:50:c0:b5:e0:
15:c1:b3:cb:6e:95:11:51:42:e9:33:54:72:9f:48:3c:4c:c7:
79:c2:d7:e1:42:67:e8:7d:73:fb:0d:c9:c1:c3:9e:9d:6a:ce:
54:cf:e0:79:80:72:cd:cd:79:26:14:45:21:00:8e:14:6c:16:
a0:6e:35:7a
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYjjn24ixEYTLBb2ZTTmO63hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYzQwOTYxM2ZlYTBhMmI0NDJjZTExMmU5Y2JkYjQ4NWUw
MTE4OGYwHhcNMjMwNjIyMTUwMDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyN2ViMGVmMDdjODUyNTViN2ZlOWY5NGVkMTcxNDQ4NTUwNTkxODQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhagh9Vv+bkr2KZrut2zVp15WYFr3
QnzzqXJNdUEwkB0cQzdQyjMLwxTJb0fcYn1vZK12TF0Z3aZgrtkPvohLVqYX0BAj
I0+X2Y9ktrSD1E7iOkKsJ9mT4NlSbFZQJziryOzdfAngH3yWMjuti9KaPWePvyyY
gFUVCFG1UnUFGcESsmDO97+M4wgY9aI5f5jAfqmmFfcm6c6pmHrEhg50GJkYSlSN
ZWeupFhS+hcC0fNltxqxRgjmCOcozue33VYQltaTuXB49oHg9o1ZygrMJymCnbmM
J1PYJKH5QyMcjFMYbEamjfUGRmiPTm8Zin3Q20tU56aNEaS795t/abKZwQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFCfrDvB8hSVbf+n5TtFxRIVQWRhCMB8GA1UdIwQY
MBaAFDDECWE/6gorRCzhEunL20heARiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYt
YzA2NzFiZjRjZjNlLzEvSi1zTzhIeUZKVnRfNmZsTzBYRkVoVkJaR0VJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYtYzA2NzFiZjRjZjNl
LzEvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjARBAIAATALAwMAlFEDBAbD
u0AwDQQCAAIwBwMFACoAFIgwDQYJKoZIhvcNAQELBQADggEBACrTN1Ydjm+OUzUm
aTHlAecf6z269dYdTka5wLaPB39W8xrUU4+mxbMvhg3YSTUljlXJ4Aq6X3fFfjRW
agLSTmjQDlhM8l4OJMNwXFj0DnAvUVsgcIu3xYE+btGtD5bjrt+rX1nAYvGAJD4c
C/dJLuaqigRODMGKj+O+wMHJdXrSullBurj0YtCvvIoRf2Cv3CwK2J8tpBATlij5
x7nPYa8doJ6OR3XJ826WRtivDW1G2wCVujcPK27yyDnlUB+7PKT1UMC14BXBs8tu
lRFRQukzVHKfSDxMx3nC1+FCZ+h9c/sNycHDnp1qzlTP4HmAcs3NeSYURSEAjhRs
FqBuNXo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:40 2024 by rpki-client on console-fra.rpki-client.org