Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/JyMmLFuyXRiNOxEkTE8ad8YjPOI.roa
File: JyMmLFuyXRiNOxEkTE8ad8YjPOI.roa (raw, json)
Hash identifier: CNGjUnVGbUEFvJblpRhOxn2dwmBwXTYaxqDBnQbAN28=
Subject key identifier: 27:23:26:2C:5B:B2:5D:18:8D:3B:11:24:4C:4F:1A:77:C6:23:3C:E2
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 018B1E2A1327775AD596C636953B96181E52
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/JyMmLFuyXRiNOxEkTE8ad8YjPOI.roa
Signing time: Wed 11 Oct 2023 09:55:55 +0000
ROA not before: Wed 11 Oct 2023 09:55:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5511
IP address blocks: 185.89.251.0/24 maxlen: 24
193.239.146.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1e:2a:13:27:77:5a:d5:96:c6:36:95:3b:96:18:1e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: Oct 11 09:55:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2723262c5bb25d188d3b11244c4f1a77c6233ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7f:c9:1b:b3:ad:42:82:aa:a9:e8:3e:4d:98:
3c:e3:07:d4:26:ab:93:4d:e1:5c:06:2e:59:bc:79:
25:36:72:74:49:b3:93:fd:06:96:4b:3e:63:86:4d:
c3:7f:18:f2:c0:10:6e:67:6e:0f:bd:95:e8:df:49:
e7:ca:a3:78:24:0e:82:a7:c3:dd:f2:0b:b8:b7:e0:
dc:8e:36:8f:1d:89:46:ed:20:e7:7b:f3:8c:ef:3a:
71:6b:7e:b4:c9:09:a8:67:c8:b8:8a:20:e0:f0:df:
a5:0c:54:a4:34:d7:7c:45:3e:fe:e3:dc:7b:25:f7:
ec:68:33:b2:85:3a:fd:78:90:3f:dc:a1:6c:21:04:
78:dd:29:6a:ea:e6:e0:12:af:1c:42:76:2d:e3:fb:
bc:34:c6:ae:d0:d1:20:8a:50:4c:85:1d:82:27:88:
3c:2b:a1:ac:bb:86:9e:fe:a3:55:9b:ca:a7:0a:bd:
d6:1f:a9:f2:ed:b1:81:41:35:47:ea:d6:fb:c5:b5:
9e:4a:3b:f9:2c:45:c7:3e:74:19:b1:9b:1c:56:9b:
e9:a8:15:0c:fe:2c:df:ff:1f:9a:43:cf:38:82:39:
2d:9c:7a:65:49:87:cd:82:96:91:b3:2a:a8:38:06:
05:c4:43:4c:f7:5d:b9:65:59:ed:f4:44:3c:ea:42:
a6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:23:26:2C:5B:B2:5D:18:8D:3B:11:24:4C:4F:1A:77:C6:23:3C:E2
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/JyMmLFuyXRiNOxEkTE8ad8YjPOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.89.251.0/24
193.239.146.0/23
Signature Algorithm: sha256WithRSAEncryption
06:55:0e:bd:c0:df:1d:24:b8:b1:c8:ba:7c:36:72:80:59:2a:
f4:90:ca:39:09:a0:2e:1b:83:11:43:07:5a:6a:3b:09:82:44:
81:1d:2a:d3:ac:49:4b:3a:eb:9b:43:cd:f3:81:8a:67:7f:f8:
43:4b:6c:4f:0d:9c:70:e9:e4:fe:a6:99:7b:1c:ab:40:8e:d2:
28:70:c5:97:3a:8f:08:7a:c8:1f:3b:0c:54:96:ea:94:b3:c8:
52:f4:12:c9:04:43:8b:ca:c3:93:ea:b2:fe:ce:62:21:d3:67:
62:86:fd:f5:d3:29:ae:31:84:88:c9:11:9f:67:3a:82:f0:99:
84:b2:98:53:3e:b0:96:2a:80:71:c3:a9:cc:37:d8:78:c0:1b:
4e:f4:31:ec:8b:ab:c1:1d:55:e6:91:f0:a5:7a:44:6e:4a:89:
3e:fb:b9:d8:4c:87:10:4c:22:a2:43:2d:ab:5d:5a:57:3b:cb:
7b:12:76:ca:4f:04:3d:d9:bd:09:d0:b3:58:b5:9a:f0:70:21:
2d:2f:64:90:fa:90:1e:49:b9:09:eb:f9:88:5c:32:ba:83:31:
28:78:39:06:43:07:58:9a:7b:68:7f:f2:69:eb:1b:50:4c:e2:
6e:02:27:01:8e:92:cb:94:26:44:8b:1d:3a:db:77:f0:23:4c:
fe:3d:07:61
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYseKhMnd1rVlsY2lTuWGB5SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMDc0MzQ5NmM3ZmYzZWZmYjg3MDYwMTEzOWNhZDlkMmYy
NzFlMTAwHhcNMjMxMDExMDk1NTU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzIzMjYyYzViYjI1ZDE4OGQzYjExMjQ0YzRmMWE3N2M2MjMzY2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqX/JG7OtQoKqqeg+TZg84wfUJquT
TeFcBi5ZvHklNnJ0SbOT/QaWSz5jhk3DfxjywBBuZ24PvZXo30nnyqN4JA6Cp8Pd
8gu4t+DcjjaPHYlG7SDne/OM7zpxa360yQmoZ8i4iiDg8N+lDFSkNNd8RT7+49x7
JffsaDOyhTr9eJA/3KFsIQR43Slq6ubgEq8cQnYt4/u8NMau0NEgilBMhR2CJ4g8
K6Gsu4ae/qNVm8qnCr3WH6ny7bGBQTVH6tb7xbWeSjv5LEXHPnQZsZscVpvpqBUM
/izf/x+aQ884gjktnHplSYfNgpaRsyqoOAYFxENM9125ZVnt9EQ86kKmOQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCcjJixbsl0YjTsRJExPGnfGIzziMB8GA1UdIwQY
MBaAFJ8HQ0lsf/Pv+4cGAROcrZ0vJx4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2Mt
NjM0MTEzNjdkOTBhLzEvSnlNbUxGdXlYUmlOT3hFa1RFOGFkOFlqUE9JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2MtNjM0MTEzNjdkOTBh
LzEvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuVn7AwQB
we+SMA0GCSqGSIb3DQEBCwUAA4IBAQAGVQ69wN8dJLixyLp8NnKAWSr0kMo5CaAu
G4MRQwdaajsJgkSBHSrTrElLOuubQ83zgYpnf/hDS2xPDZxw6eT+ppl7HKtAjtIo
cMWXOo8IesgfOwxUluqUs8hS9BLJBEOLysOT6rL+zmIh02dihv310ymuMYSIyRGf
ZzqC8JmEsphTPrCWKoBxw6nMN9h4wBtO9DHsi6vBHVXmkfClekRuSok++7nYTIcQ
TCKiQy2rXVpXO8t7EnbKTwQ92b0J0LNYtZrwcCEtL2SQ+pAeSbkJ6/mIXDK6gzEo
eDkGQwdYmntof/Jp6xtQTOJuAicBjpLLlCZEix0623fwI0z+PQdh
-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:24 2024 by rpki-client on console-ams.rpki-client.org