Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/JTCMO0n1i08DouYxfU4vx28sgck.roa
File: JTCMO0n1i08DouYxfU4vx28sgck.roa (raw, json)
Hash identifier: BWQZGKbAYGsCJMtqRvFQbbUcGUEm74TGi+su/LKquN4=
Subject key identifier: 25:30:8C:3B:49:F5:8B:4F:03:A2:E6:31:7D:4E:2F:C7:6F:2C:81:C9
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018AFF1E6AF92C9A8CB1C1CB0BF281428285
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/JTCMO0n1i08DouYxfU4vx28sgck.roa
Signing time: Thu 05 Oct 2023 09:14:58 +0000
ROA not before: Thu 05 Oct 2023 09:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44881
IP address blocks: 46.161.12.0/23 maxlen: 23
5.8.56.0/23 maxlen: 23
46.161.20.0/22 maxlen: 22
37.139.48.0/23 maxlen: 23
146.185.244.0/23 maxlen: 23
91.243.62.0/23 maxlen: 23
5.8.19.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ff:1e:6a:f9:2c:9a:8c:b1:c1:cb:0b:f2:81:42:82:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Oct 5 09:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25308c3b49f58b4f03a2e6317d4e2fc76f2c81c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f7:e6:b3:63:28:2d:9f:3a:5f:0f:a0:cf:47:
1d:0d:1e:ae:b0:ad:2a:49:de:85:dd:36:61:03:29:
f7:e7:e8:3e:9a:96:05:9f:2c:7f:9f:b5:7d:2d:71:
38:50:e8:f4:ae:a9:bb:de:07:96:03:f1:45:c8:0b:
f9:eb:ce:40:84:02:7a:49:58:aa:3f:c0:f4:71:19:
70:13:12:a0:59:d6:4e:6f:6e:e9:61:5e:2d:c5:16:
02:46:69:f1:80:8d:0f:cd:96:93:f1:41:93:d4:c4:
8d:c4:df:fc:e6:40:22:87:b6:b2:b6:01:50:ea:2c:
c8:fc:6e:11:cb:9b:0c:87:d0:10:1f:ce:06:78:21:
54:79:9f:87:98:9e:7b:4c:e5:11:09:2c:6c:78:df:
81:52:ca:21:aa:69:6c:bd:76:62:36:72:d8:72:05:
00:ff:54:44:bd:ff:16:e5:33:c1:16:74:ae:fa:fe:
50:94:2f:82:b9:7e:62:29:c1:c6:ce:a0:98:08:6d:
49:e1:69:74:b3:42:ea:2b:a0:90:b8:14:35:b8:52:
cf:3b:57:55:2b:03:d1:c2:a3:e5:b4:70:8a:5a:cc:
10:72:b4:b0:30:45:8e:41:23:4b:8f:c9:63:44:95:
e3:58:2c:c1:23:76:ff:34:43:50:ac:0f:74:19:c6:
08:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:30:8C:3B:49:F5:8B:4F:03:A2:E6:31:7D:4E:2F:C7:6F:2C:81:C9
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/JTCMO0n1i08DouYxfU4vx28sgck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.19.0/24
5.8.56.0/23
37.139.48.0/23
46.161.12.0/23
46.161.20.0/22
91.243.62.0/23
146.185.244.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:a2:6e:a9:df:32:b9:72:1e:b4:3c:41:6b:bd:5c:cf:cf:0c:
b6:bb:5f:35:c0:96:e8:ba:cf:34:78:f0:17:20:00:46:8a:27:
65:60:b3:1a:ff:31:c7:59:89:49:63:ca:42:d2:5a:6e:0a:2c:
b1:98:74:1e:55:90:13:07:74:85:5e:50:25:c0:9b:2b:53:d6:
92:dd:fe:14:5f:ab:20:0a:0a:09:72:34:9c:58:2b:2b:fc:03:
0a:95:88:05:6c:52:8a:24:f5:6a:d2:7c:63:b4:49:b4:d9:88:
1a:29:8a:90:02:2a:7e:ae:4e:3e:3e:fd:0e:0e:b2:30:9a:21:
f2:70:f7:66:19:af:02:78:78:cf:1f:08:71:36:a1:4a:17:34:
37:71:be:80:4a:39:4f:45:c4:49:7c:09:60:87:fc:92:2c:4e:
a5:d3:71:bd:e6:e8:ba:d9:18:1e:b3:a3:8e:85:0f:bf:00:3e:
e2:a3:85:f8:7e:27:53:47:3c:80:a3:fb:aa:0b:81:3c:ce:16:
b7:7a:47:2a:f0:a1:65:61:cc:60:e8:2d:44:58:d0:a5:e1:23:
7d:df:bf:8b:30:8a:e4:c9:11:77:7a:0c:5a:38:8b:f9:56:f1:
95:66:86:ca:7a:49:2e:79:08:dc:ac:9a:9f:33:7f:56:48:2b:
3d:22:15:e1
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAYr/Hmr5LJqMscHLC/KBQoKFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl
Y2EwNzEwHhcNMjMxMDA1MDkxNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTMwOGMzYjQ5ZjU4YjRmMDNhMmU2MzE3ZDRlMmZjNzZmMmM4MWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzffms2MoLZ86Xw+gz0cdDR6usK0q
Sd6F3TZhAyn35+g+mpYFnyx/n7V9LXE4UOj0rqm73geWA/FFyAv5685AhAJ6SViq
P8D0cRlwExKgWdZOb27pYV4txRYCRmnxgI0PzZaT8UGT1MSNxN/85kAih7aytgFQ
6izI/G4Ry5sMh9AQH84GeCFUeZ+HmJ57TOURCSxseN+BUsohqmlsvXZiNnLYcgUA
/1REvf8W5TPBFnSu+v5QlC+CuX5iKcHGzqCYCG1J4Wl0s0LqK6CQuBQ1uFLPO1dV
KwPRwqPltHCKWswQcrSwMEWOQSNLj8ljRJXjWCzBI3b/NENQrA90GcYI/wIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFCUwjDtJ9YtPA6LmMX1OL8dvLIHJMB8GA1UdIwQY
MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt
ODlkMDkyNDBjNDNiLzEvSlRDTU8wbjFpMDhEb3VZeGZVNHZ4MjhzZ2NrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi
LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQABQgTAwQB
BQg4AwQBJYswAwQBLqEMAwQCLqEUAwQBW/M+AwQBkrn0MA0GCSqGSIb3DQEBCwUA
A4IBAQBLom6p3zK5ch60PEFrvVzPzwy2u181wJbous80ePAXIABGiidlYLMa/zHH
WYlJY8pC0lpuCiyxmHQeVZATB3SFXlAlwJsrU9aS3f4UX6sgCgoJcjScWCsr/AMK
lYgFbFKKJPVq0nxjtEm02YgaKYqQAip+rk4+Pv0ODrIwmiHycPdmGa8CeHjPHwhx
NqFKFzQ3cb6ASjlPRcRJfAlgh/ySLE6l03G95ui62Rges6OOhQ+/AD7io4X4fidT
RzyAo/uqC4E8zha3ekcq8KFlYcxg6C1EWNCl4SN937+LMIrkyRF3egxaOIv5VvGV
ZobKekkueQjcrJqfM39WSCs9IhXh
-----END CERTIFICATE-----
Generated at Thu Oct 5 12:36:10 2023 by rpki-client on console-ams.rpki-client.org