Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/JjsJw4pGAzJXwLZFZB9Tz9PAyPY.roa
File: JjsJw4pGAzJXwLZFZB9Tz9PAyPY.roa (raw, json)
Hash identifier: C8eBsrVo3XYR88mh5jB9P4ZWvzwH3BwclUNg07raAJw=
Subject key identifier: 26:3B:09:C3:8A:46:03:32:57:C0:B6:45:64:1F:53:CF:D3:C0:C8:F6
Certificate issuer: /CN=ef7f31bd6d985e45299c31d052ca4a8ebef5578b
Certificate serial: 018B68F87830CBE373520EB19908B9E0F16F
Authority key identifier: EF:7F:31:BD:6D:98:5E:45:29:9C:31:D0:52:CA:4A:8E:BE:F5:57:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/JjsJw4pGAzJXwLZFZB9Tz9PAyPY.roa
Signing time: Wed 25 Oct 2023 22:33:16 +0000
ROA not before: Wed 25 Oct 2023 22:33:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8075
IP address blocks: 80.64.222.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:68:f8:78:30:cb:e3:73:52:0e:b1:99:08:b9:e0:f1:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7f31bd6d985e45299c31d052ca4a8ebef5578b
Validity
Not Before: Oct 25 22:33:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=263b09c38a46033257c0b645641f53cfd3c0c8f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:aa:8e:80:4f:dd:4c:54:e2:e1:3d:7c:ba:84:
11:57:fc:66:d7:c9:f4:69:4f:d0:28:f7:35:2e:4f:
68:87:6e:04:42:9b:5f:b1:28:c7:7f:3e:2d:ee:75:
df:5a:88:c4:3f:3c:92:7f:0e:c9:32:70:0d:72:fe:
f2:b0:5f:2d:7d:d9:97:27:ac:34:ea:e2:a2:90:9d:
28:7e:7e:b9:61:79:ac:ce:f9:f0:43:58:fe:a6:56:
7f:f6:d9:4a:9a:68:26:74:68:4f:61:47:8a:bb:5b:
f4:a0:2a:10:81:a6:0d:97:37:9e:5f:3b:50:3a:46:
85:18:a7:e3:91:2b:37:6c:69:db:46:b4:0b:27:97:
c1:11:ca:27:07:b7:66:f3:c3:b3:aa:77:c3:f9:47:
4c:ab:3a:a7:93:52:52:79:06:a5:40:e7:24:f5:3e:
51:56:5a:ee:91:93:fe:06:71:e7:c5:20:21:81:b3:
93:39:f0:38:38:92:0b:20:bd:a9:60:12:b7:bf:ee:
a3:1e:15:55:20:08:a0:f1:b6:f7:9f:de:b3:18:38:
60:f1:be:b0:26:46:5b:ef:c4:54:9e:e0:f7:00:33:
c8:7a:7e:98:28:8c:d8:88:bc:01:86:28:2a:e1:7a:
e9:bf:06:c5:53:2b:b3:a1:74:c1:ed:7c:7c:05:eb:
8a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:3B:09:C3:8A:46:03:32:57:C0:B6:45:64:1F:53:CF:D3:C0:C8:F6
X509v3 Authority Key Identifier:
keyid:EF:7F:31:BD:6D:98:5E:45:29:9C:31:D0:52:CA:4A:8E:BE:F5:57:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/JjsJw4pGAzJXwLZFZB9Tz9PAyPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.64.222.0/24
Signature Algorithm: sha256WithRSAEncryption
47:f7:bd:87:a1:eb:be:c3:83:f6:37:0a:92:b5:98:d7:ac:27:
b9:ee:c4:22:22:70:36:f7:a7:71:b0:f2:a8:66:02:3c:1b:55:
c8:0e:38:91:78:7b:d8:b7:74:b1:0e:ee:77:a1:c2:b4:d9:27:
af:84:c9:05:00:67:26:d5:fe:1c:43:5c:ce:a7:0a:b2:3b:85:
a1:5b:2d:d4:ba:f8:b2:91:82:a0:37:6a:8f:27:cc:43:d8:f6:
ce:2d:4b:a2:56:e1:63:50:7f:e6:63:45:03:f4:23:3c:a8:00:
11:18:0e:3d:1b:44:f5:ea:fe:e9:68:12:ba:a7:64:49:40:29:
4a:c0:6e:4a:24:96:ef:d1:70:a4:2b:e2:49:67:1d:c5:bd:44:
1a:b6:5a:0e:d0:a4:5d:0c:95:aa:ba:7c:1a:e7:ca:6c:aa:f9:
29:ec:6e:3a:6e:3a:1d:b7:3c:30:6c:dd:bc:96:55:29:ab:53:
21:17:da:47:d9:9e:bf:a8:f5:42:bd:96:36:36:ab:de:69:a8:
ac:84:dd:a3:4d:96:1e:87:ac:a0:0d:56:e5:2c:25:ad:87:b1:
cb:95:42:c0:68:b5:3d:59:31:c6:bc:e0:db:cf:eb:81:94:25:
f7:52:7f:cc:2e:0c:3b:0d:12:99:e4:54:a1:9e:77:3f:d7:0c:
ef:26:1c:50
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYto+Hgwy+NzUg6xmQi54PFvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmN2YzMWJkNmQ5ODVlNDUyOTljMzFkMDUyY2E0YThlYmVm
NTU3OGIwHhcNMjMxMDI1MjIzMzE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjNiMDljMzhhNDYwMzMyNTdjMGI2NDU2NDFmNTNjZmQzYzBjOGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraqOgE/dTFTi4T18uoQRV/xm18n0
aU/QKPc1Lk9oh24EQptfsSjHfz4t7nXfWojEPzySfw7JMnANcv7ysF8tfdmXJ6w0
6uKikJ0ofn65YXmszvnwQ1j+plZ/9tlKmmgmdGhPYUeKu1v0oCoQgaYNlzeeXztQ
OkaFGKfjkSs3bGnbRrQLJ5fBEconB7dm88OzqnfD+UdMqzqnk1JSeQalQOck9T5R
VlrukZP+BnHnxSAhgbOTOfA4OJILIL2pYBK3v+6jHhVVIAig8bb3n96zGDhg8b6w
JkZb78RUnuD3ADPIen6YKIzYiLwBhigq4XrpvwbFUyuzoXTB7Xx8BeuKzwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCY7CcOKRgMyV8C2RWQfU8/TwMj2MB8GA1UdIwQY
MBaAFO9/Mb1tmF5FKZwx0FLKSo6+9VeLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzM4eHZXMllYa1VwbkRIUVVzcEtqcjcxVjRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lYmVhNjAtZDIzMS00ODBiLTg0ZmQt
YTc2M2RmM2FlZTZkLzEvSmpzSnc0cEdBekpYd0xaRlpCOVR6OVBBeVBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9lYmVhNjAtZDIzMS00ODBiLTg0ZmQtYTc2M2RmM2FlZTZk
LzEvNzM4eHZXMllYa1VwbkRIUVVzcEtqcjcxVjRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUEDeMA0G
CSqGSIb3DQEBCwUAA4IBAQBH972Hoeu+w4P2NwqStZjXrCe57sQiInA296dxsPKo
ZgI8G1XIDjiReHvYt3SxDu53ocK02SevhMkFAGcm1f4cQ1zOpwqyO4WhWy3Uuviy
kYKgN2qPJ8xD2PbOLUuiVuFjUH/mY0UD9CM8qAARGA49G0T16v7paBK6p2RJQClK
wG5KJJbv0XCkK+JJZx3FvUQatloO0KRdDJWqunwa58psqvkp7G46bjodtzwwbN28
llUpq1MhF9pH2Z6/qPVCvZY2NqveaaishN2jTZYeh6ygDVblLCWth7HLlULAaLU9
WTHGvODbz+uBlCX3Un/MLgw7DRKZ5FShnnc/1wzvJhxQ
-----END CERTIFICATE-----
Generated at Tue Jan 2 18:21:29 2024 by rpki-client on console-ams.rpki-client.org