Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/JYI9WQS9IeFds7uVJJTPExmX99Q.roa
File: JYI9WQS9IeFds7uVJJTPExmX99Q.roa (raw, json)
Hash identifier: h/yWJRvcl7kvLq1nvfiaSDmlPi93O5fSWZniO4/5kb0=
Subject key identifier: 25:82:3D:59:04:BD:21:E1:5D:B3:BB:95:24:94:CF:13:19:97:F7:D4
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0185B964FD01F5B6490C077B7B65847EC144
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/JYI9WQS9IeFds7uVJJTPExmX99Q.roa
Signing time: Mon 16 Jan 2023 07:04:41 +0000
ROA not before: Mon 16 Jan 2023 07:04:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9199
IP address blocks: 81.180.64.0/22 maxlen: 24
81.180.70.0/23 maxlen: 24
81.180.68.0/23 maxlen: 24
81.180.76.0/22 maxlen: 24
81.180.84.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b9:64:fd:01:f5:b6:49:0c:07:7b:7b:65:84:7e:c1:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 16 07:04:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25823d5904bd21e15db3bb952494cf131997f7d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2b:88:b9:a9:76:ae:33:83:7c:2f:b5:d5:c5:
eb:b3:1b:c4:1d:f5:f9:f3:0e:1b:c1:39:54:7a:97:
78:d6:1b:29:33:92:bd:7f:01:68:e7:43:2e:a2:af:
be:3e:f5:11:50:54:70:9a:66:31:9c:d7:9e:fc:e5:
03:ca:ba:65:d5:40:8b:30:a3:16:42:95:88:09:7d:
fd:7c:2f:08:0c:e3:56:a4:ef:e2:7e:2e:9e:2d:73:
af:0b:6b:77:b5:84:4b:fc:30:58:15:bb:74:be:fb:
28:b8:96:ab:8a:b1:85:37:3c:5e:83:0e:6a:7f:33:
6f:11:45:34:34:2a:f8:c0:04:1c:ce:a6:2d:3b:c2:
df:7a:df:67:5d:f4:d1:77:77:e4:ed:ee:26:16:ec:
06:f6:43:83:89:40:b3:df:29:40:43:d8:80:e2:63:
d3:ba:fe:00:fa:f0:6f:f6:88:6c:b4:d1:8b:03:da:
50:c6:08:89:df:4d:34:b5:a6:89:6d:7f:d2:5d:73:
c4:08:76:7b:46:10:5b:4a:ff:d9:88:f8:1b:ec:10:
cd:93:4f:01:6f:8c:70:5e:51:07:60:62:dc:82:75:
11:b3:d3:8f:86:4b:41:39:13:6d:85:13:5e:6b:59:
af:f5:da:f0:02:9c:6c:f9:31:d6:ed:f6:cc:49:67:
bc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:82:3D:59:04:BD:21:E1:5D:B3:BB:95:24:94:CF:13:19:97:F7:D4
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/JYI9WQS9IeFds7uVJJTPExmX99Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.180.64.0/21
81.180.76.0/22
81.180.84.0/23
Signature Algorithm: sha256WithRSAEncryption
56:ac:00:0f:0d:ec:3d:12:47:9f:90:8f:b9:f2:ab:f3:3c:3b:
52:d7:5b:76:12:80:5c:c4:e4:ad:4f:c6:79:e6:9d:41:41:de:
a4:e3:9c:19:c5:5f:cc:84:21:2d:69:70:cd:f2:e1:08:ea:8b:
51:2c:2f:e9:d2:f0:db:4e:35:93:7b:26:40:06:0a:bc:6c:ae:
bd:75:1b:09:5a:3f:2b:2d:2d:b8:98:f6:76:ad:15:d3:29:61:
42:df:26:aa:9f:27:59:da:f2:79:7b:e7:77:b4:9d:64:3a:49:
bb:0c:d0:18:dc:de:7d:6a:04:dd:df:0a:de:5b:85:65:1d:91:
c5:df:d7:dd:cb:56:fd:0a:b6:6f:e4:5f:c8:7b:5a:2b:f9:84:
d9:9f:7b:a5:c0:6b:94:25:da:7a:64:93:12:6f:6b:19:96:fe:
0a:9d:4f:27:c4:cc:fe:94:b5:98:95:6b:57:5c:55:bb:c2:05:
e9:cc:40:7b:57:92:ed:ea:b0:1c:0f:13:6f:6b:f0:e8:3d:9b:
0d:74:5e:93:bb:87:a9:83:5a:85:db:99:ba:db:39:cc:b1:4a:
57:b7:1a:de:6e:4e:fe:a7:fa:b5:42:a8:1f:00:87:f7:bc:ea:
77:99:66:f3:d1:7d:60:2a:3e:21:b6:2e:54:3e:bd:55:b8:db:
a0:92:ab:24
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYW5ZP0B9bZJDAd7e2WEfsFEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjMwMTE2MDcwNDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTgyM2Q1OTA0YmQyMWUxNWRiM2JiOTUyNDk0Y2YxMzE5OTdmN2Q0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSuIual2rjODfC+11cXrsxvEHfX5
8w4bwTlUepd41hspM5K9fwFo50Muoq++PvURUFRwmmYxnNee/OUDyrpl1UCLMKMW
QpWICX39fC8IDONWpO/ifi6eLXOvC2t3tYRL/DBYFbt0vvsouJarirGFNzxegw5q
fzNvEUU0NCr4wAQczqYtO8Lfet9nXfTRd3fk7e4mFuwG9kODiUCz3ylAQ9iA4mPT
uv4A+vBv9ohstNGLA9pQxgiJ3000taaJbX/SXXPECHZ7RhBbSv/ZiPgb7BDNk08B
b4xwXlEHYGLcgnURs9OPhktBORNthRNea1mv9drwApxs+THW7fbMSWe85wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCWCPVkEvSHhXbO7lSSUzxMZl/fUMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvSllJOVdRUzlJZUZkczd1VkpKVFBFeG1YOTlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDUbRAAwQC
UbRMAwQBUbRUMA0GCSqGSIb3DQEBCwUAA4IBAQBWrAAPDew9EkefkI+58qvzPDtS
11t2EoBcxOStT8Z55p1BQd6k45wZxV/MhCEtaXDN8uEI6otRLC/p0vDbTjWTeyZA
Bgq8bK69dRsJWj8rLS24mPZ2rRXTKWFC3yaqnydZ2vJ5e+d3tJ1kOkm7DNAY3N59
agTd3wreW4VlHZHF39fdy1b9CrZv5F/Ie1or+YTZn3ulwGuUJdp6ZJMSb2sZlv4K
nU8nxMz+lLWYlWtXXFW7wgXpzEB7V5Lt6rAcDxNva/DoPZsNdF6Tu4epg1qF25m6
2znMsUpXtxrebk7+p/q1QqgfAIf3vOp3mWbz0X1gKj4hti5UPr1VuNugkqsk
-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:06 2024 by rpki-client on console-fra.rpki-client.org