Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/jjnJzjDzgdwK6EHHoI2v8IGd0qg.roa
File: jjnJzjDzgdwK6EHHoI2v8IGd0qg.roa (raw, json)
Hash identifier: 0XfSTs3nk/QxKFF6aUiJp9XYhQIOlyT7Hlw3UUjhj3w=
Subject key identifier: 8E:39:C9:CE:30:F3:81:DC:0A:E8:41:C7:A0:8D:AF:F0:81:9D:D2:A8
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018C122853E0CE62B0CBA5A27F772FBCAEE6
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/jjnJzjDzgdwK6EHHoI2v8IGd0qg.roa
Signing time: Mon 27 Nov 2023 19:01:21 +0000
ROA not before: Mon 27 Nov 2023 19:01:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 81.181.57.0/24 maxlen: 24
81.181.55.0/24 maxlen: 24
81.181.56.0/24 maxlen: 24
81.181.54.0/24 maxlen: 24
81.181.58.0/24 maxlen: 24
81.181.63.0/24 maxlen: 24
81.181.61.0/24 maxlen: 24
81.181.59.0/24 maxlen: 24
81.181.62.0/24 maxlen: 24
81.181.60.0/24 maxlen: 24
85.122.192.0/19 maxlen: 24
85.122.224.0/22 maxlen: 24
85.122.228.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:12:28:53:e0:ce:62:b0:cb:a5:a2:7f:77:2f:bc:ae:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Nov 27 19:01:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e39c9ce30f381dc0ae841c7a08daff0819dd2a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c2:75:61:80:c8:a9:a1:60:86:72:74:84:98:
c8:d4:55:a2:18:6a:70:24:05:85:f2:cb:5d:4f:3f:
3c:fe:ba:58:7f:fd:6d:57:cb:93:47:e0:4a:99:ae:
4d:90:9d:84:59:16:3d:5f:18:ea:f4:2c:36:dd:d9:
dd:e2:ea:ad:55:22:2e:a8:e1:d0:80:5a:31:86:b2:
8b:79:de:66:a4:12:f9:10:6d:85:30:08:6e:a2:ec:
ed:51:e1:39:a1:b3:fc:b7:c9:8a:54:ad:64:6a:5a:
e7:60:d2:c5:e9:2d:bc:ac:18:c0:1b:46:d5:82:e8:
f4:b7:e1:3d:26:59:42:8f:e1:39:d4:6f:ad:22:0a:
a8:13:d5:46:c8:a1:6c:24:6d:ff:58:24:23:3d:f5:
1d:43:ae:15:a8:34:2c:20:2b:c5:e9:a7:af:7a:20:
a9:85:eb:77:f6:66:9e:e5:b0:96:a5:1f:ab:25:97:
a0:6d:5c:e0:fc:cf:9f:0c:e3:59:82:00:8a:11:80:
ff:07:6e:1d:51:7e:65:e5:0d:90:2d:71:69:d2:2b:
9a:2f:b4:73:95:37:62:7d:8e:23:41:0f:34:3d:de:
04:6d:16:ec:fd:4a:e6:87:e3:76:06:ec:b9:82:75:
a7:fa:33:99:8a:a7:07:eb:58:0f:71:33:1e:bb:07:
18:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:39:C9:CE:30:F3:81:DC:0A:E8:41:C7:A0:8D:AF:F0:81:9D:D2:A8
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/jjnJzjDzgdwK6EHHoI2v8IGd0qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.181.54.0-81.181.63.255
85.122.192.0-85.122.228.255
Signature Algorithm: sha256WithRSAEncryption
1f:df:3b:8b:e4:ae:93:76:7f:f9:28:39:c9:7a:ea:4c:16:6d:
c2:82:4b:1d:0c:19:03:59:7b:37:50:c1:81:7e:ed:6e:7f:bf:
9a:8d:2f:7f:f0:e0:f0:46:c8:50:df:d7:39:3c:87:be:05:82:
3d:a8:1a:52:8a:b8:49:b8:a6:69:a4:70:20:c7:7a:4f:9c:85:
fd:49:ad:85:58:a1:32:64:d4:a5:39:fb:7d:a3:e2:8c:9a:e6:
16:b0:e1:fe:77:cd:19:e8:08:5b:1a:19:0e:3a:11:ef:ba:46:
b9:9a:fe:f3:5e:b6:03:73:88:b3:98:c0:d1:ea:0d:71:d5:ea:
3c:e4:7a:09:b1:8c:fd:d3:21:cf:9c:a8:d5:86:64:fe:7b:61:
54:6d:69:af:bc:cb:e2:b4:b6:74:df:8f:e2:7b:f3:ba:63:43:
10:6a:f8:6c:ea:75:f9:fe:68:32:38:ec:6f:f9:3a:a6:10:15:
0e:69:dd:91:5f:72:40:6a:55:00:17:f5:29:b1:d3:cc:68:f4:
28:49:6c:e2:9f:41:13:21:25:cd:9d:f2:8a:6f:9f:b1:4a:f6:
5e:b8:39:43:ad:51:c5:4e:5b:1f:1a:4d:cd:e0:43:3a:64:83:
78:15:93:02:cc:28:d6:7a:b9:95:be:9d:60:b6:4c:7a:90:6b:
c5:44:c6:07
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAYwSKFPgzmKwy6Wif3cvvK7mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjMxMTI3MTkwMTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTM5YzljZTMwZjM4MWRjMGFlODQxYzdhMDhkYWZmMDgxOWRkMmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcJ1YYDIqaFghnJ0hJjI1FWiGGpw
JAWF8stdTz88/rpYf/1tV8uTR+BKma5NkJ2EWRY9Xxjq9Cw23dnd4uqtVSIuqOHQ
gFoxhrKLed5mpBL5EG2FMAhuouztUeE5obP8t8mKVK1kalrnYNLF6S28rBjAG0bV
guj0t+E9JllCj+E51G+tIgqoE9VGyKFsJG3/WCQjPfUdQ64VqDQsICvF6aeveiCp
het39mae5bCWpR+rJZegbVzg/M+fDONZggCKEYD/B24dUX5l5Q2QLXFp0iuaL7Rz
lTdifY4jQQ80Pd4EbRbs/Urmh+N2Buy5gnWn+jOZiqcH61gPcTMeuwcYcwIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFI45yc4w84HcCuhBx6CNr/CBndKoMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvampuSnpqRHpnZHdLNkVISG9JMnY4SUdkMHFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAFRtTYD
BAZRtQAwDAMEBlV6wAMEAFV65DANBgkqhkiG9w0BAQsFAAOCAQEAH987i+Suk3Z/
+Sg5yXrqTBZtwoJLHQwZA1l7N1DBgX7tbn+/mo0vf/Dg8EbIUN/XOTyHvgWCPaga
Uoq4SbimaaRwIMd6T5yF/UmthVihMmTUpTn7faPijJrmFrDh/nfNGegIWxoZDjoR
77pGuZr+8162A3OIs5jA0eoNcdXqPOR6CbGM/dMhz5yo1YZk/nthVG1pr7zL4rS2
dN+P4nvzumNDEGr4bOp1+f5oMjjsb/k6phAVDmndkV9yQGpVABf1KbHTzGj0KEls
4p9BEyElzZ3yim+fsUr2Xrg5Q61RxU5bHxpNzeBDOmSDeBWTAswo1nq5lb6dYLZM
epBrxUTGBw==
-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:06 2024 by rpki-client on console-fra.rpki-client.org