Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/JylRYXilYzfeKQjr41hbbpj_NV0.roa
File: JylRYXilYzfeKQjr41hbbpj_NV0.roa (raw, json)
Hash identifier: ENmnw82z32i5hep/GuNdZgYGUYLtbdyj+yjx3nLuAUI=
Subject key identifier: 27:29:51:61:78:A5:63:37:DE:29:08:EB:E3:58:5B:6E:98:FF:35:5D
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019299AF57649AAF7182CB06B7D1701E5B16
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/JylRYXilYzfeKQjr41hbbpj_NV0.roa
Signing time: Thu 17 Oct 2024 08:54:17 +0000
ROA not before: Thu 17 Oct 2024 08:54:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60615
IP address blocks: 85.120.232.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:47:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:99:af:57:64:9a:af:71:82:cb:06:b7:d1:70:1e:5b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Oct 17 08:54:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2729516178a56337de2908ebe3585b6e98ff355d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:28:a9:3e:41:f2:a4:09:db:70:a9:6f:22:a7:
88:fa:a7:2e:f2:5d:b5:0d:df:7e:da:9e:e2:73:7f:
9f:86:7d:90:1e:96:f5:fd:42:be:51:c4:c3:39:5e:
96:31:15:f7:e5:c0:9b:c7:dd:2a:1a:0b:d9:86:6e:
c9:cb:0f:e9:52:fc:bc:de:bf:00:25:4e:2b:08:1e:
38:e0:2b:1d:3e:87:29:01:f8:fa:76:4a:46:fa:47:
8b:7e:c2:d6:bd:cf:63:50:2b:2f:46:26:29:05:23:
fb:4f:eb:f0:70:6e:f5:ec:bc:c5:c8:59:b3:e9:11:
d0:74:cc:d0:86:e6:2d:c5:9e:b2:db:fe:dc:9b:69:
eb:9e:ad:3d:84:f8:40:64:5c:c8:1e:fd:9b:c7:d8:
56:64:4c:94:c5:5b:07:97:4c:23:55:8f:bd:f0:86:
bb:04:17:42:2e:64:fb:8f:fb:32:fb:ab:fb:29:04:
0c:cc:c4:1a:7b:b7:4e:b1:86:aa:23:b1:b9:62:32:
d1:e6:ca:c1:e6:a5:72:73:7e:d2:48:2b:58:f5:13:
2f:ef:3a:d6:4b:5d:e8:93:14:80:da:5a:b7:52:93:
a3:57:29:6f:f5:62:8c:0c:96:c0:2d:70:0b:7f:eb:
d4:f5:c7:a2:54:20:9e:3b:69:42:cb:55:00:c5:26:
e4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:29:51:61:78:A5:63:37:DE:29:08:EB:E3:58:5B:6E:98:FF:35:5D
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/JylRYXilYzfeKQjr41hbbpj_NV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.232.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:12:56:37:cb:ae:0f:52:7b:5c:31:9f:c6:5a:a1:7c:f1:ec:
9c:dd:fe:68:e4:eb:5b:7d:7e:95:ef:7c:b9:3e:0c:d5:49:8e:
73:2f:8e:3c:e0:c5:f6:69:1a:3f:88:42:fd:b5:63:d7:dc:64:
41:62:95:ad:ed:3e:13:e1:fc:a2:fd:9e:6d:8a:df:fa:3c:5d:
71:72:8c:83:39:c3:29:43:74:23:6c:f9:84:87:f0:62:d8:60:
a7:ee:20:28:6f:18:9a:c7:b3:fd:55:7f:29:01:e9:16:f0:42:
d9:8b:a8:31:6a:26:02:44:1e:4c:62:ca:f2:eb:8a:37:5a:2b:
14:c9:95:09:f5:5d:c8:80:30:b3:b2:5a:0d:7a:3c:65:98:4c:
0d:99:75:88:94:b7:52:61:ec:b4:20:66:94:1f:80:a2:b0:b2:
31:00:42:49:3e:67:12:b4:e9:82:a4:3d:61:7a:5e:5e:2b:4e:
ea:9e:ef:25:c8:88:dc:fd:62:72:df:33:13:3b:87:03:aa:92:
cb:a7:c3:88:01:31:6a:2e:2b:41:07:b8:90:cf:35:da:1f:13:
85:95:8e:8a:41:bb:8a:a5:ed:04:90:b8:c3:d1:d5:ba:3e:ae:
69:06:84:17:9c:e1:34:f0:5d:5a:9d:e8:72:84:ee:fe:58:9b:
32:94:d0:de
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZKZr1dkmq9xgssGt9FwHlsWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjQxMDE3MDg1NDE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzI5NTE2MTc4YTU2MzM3ZGUyOTA4ZWJlMzU4NWI2ZTk4ZmYzNTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCipPkHypAnbcKlvIqeI+qcu8l21
Dd9+2p7ic3+fhn2QHpb1/UK+UcTDOV6WMRX35cCbx90qGgvZhm7Jyw/pUvy83r8A
JU4rCB444CsdPocpAfj6dkpG+keLfsLWvc9jUCsvRiYpBSP7T+vwcG717LzFyFmz
6RHQdMzQhuYtxZ6y2/7cm2nrnq09hPhAZFzIHv2bx9hWZEyUxVsHl0wjVY+98Ia7
BBdCLmT7j/sy+6v7KQQMzMQae7dOsYaqI7G5YjLR5srB5qVyc37SSCtY9RMv7zrW
S13okxSA2lq3UpOjVylv9WKMDJbALXALf+vU9ceiVCCeO2lCy1UAxSbkHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCcpUWF4pWM33ikI6+NYW26Y/zVdMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvSnlsUllYaWxZemZlS1FqcjQxaGJicGpfTlYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVXjoMA0G
CSqGSIb3DQEBCwUAA4IBAQCcElY3y64PUntcMZ/GWqF88eyc3f5o5OtbfX6V73y5
PgzVSY5zL4484MX2aRo/iEL9tWPX3GRBYpWt7T4T4fyi/Z5tit/6PF1xcoyDOcMp
Q3QjbPmEh/Bi2GCn7iAobxiax7P9VX8pAekW8ELZi6gxaiYCRB5MYsry64o3WisU
yZUJ9V3IgDCzsloNejxlmEwNmXWIlLdSYey0IGaUH4CisLIxAEJJPmcStOmCpD1h
el5eK07qnu8lyIjc/WJy3zMTO4cDqpLLp8OIATFqLitBB7iQzzXaHxOFlY6KQbuK
pe0EkLjD0dW6Pq5pBoQXnOE08F1anehyhO7+WJsylNDe
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:25:06 2025 by rpki-client