Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/CJ_-gf0XufZlCSH2cT4s4jDkvyo.roa
File: CJ_-gf0XufZlCSH2cT4s4jDkvyo.roa (raw, json)
Hash identifier: mg3eMKl/SZj3LEOn+vqFmppBJdF62Z9FYb52TAStMnA=
Subject key identifier: 08:9F:FE:81:FD:17:B9:F6:65:09:21:F6:71:3E:2C:E2:30:E4:BF:2A
Certificate issuer: /CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Certificate serial: 0185728CAC50645EE4F52F8E2EBDBDE4C395
Authority key identifier: E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/CJ_-gf0XufZlCSH2cT4s4jDkvyo.roa
Signing time: Mon 02 Jan 2023 12:54:59 +0000
ROA not before: Mon 02 Jan 2023 12:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57419
IP address blocks: 185.207.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:ac:50:64:5e:e4:f5:2f:8e:2e:bd:bd:e4:c3:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Validity
Not Before: Jan 2 12:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=089ffe81fd17b9f6650921f6713e2ce230e4bf2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c6:b3:f7:ae:72:34:46:c9:17:8d:73:08:00:
0a:2d:59:ab:1e:e9:4c:bd:f0:7f:2c:9f:7b:85:6d:
5c:a2:b4:ba:60:b1:ac:dd:41:9b:c1:57:42:b9:14:
f1:be:e4:fb:2a:30:ab:30:80:44:d6:c5:78:e1:31:
d5:57:7c:de:3a:69:c0:36:df:38:79:88:62:62:11:
c0:35:ad:fc:09:53:ce:b2:45:96:1c:0e:11:9e:a1:
c6:13:e0:01:4c:6c:d8:a1:18:40:02:11:19:4c:c7:
a7:27:3b:ab:ab:b8:38:1c:fa:5c:1c:d5:34:55:4e:
e5:e0:4e:09:ac:1a:6a:c2:51:b1:b2:33:b5:b3:c5:
9d:73:54:3f:67:27:8e:17:0d:db:53:f1:d6:cd:4b:
cd:dc:01:a6:fa:de:47:78:50:42:38:42:bd:d1:07:
a6:7a:21:26:6c:35:d1:c6:1b:18:25:7d:59:6f:5e:
b5:77:18:42:67:48:8d:9c:b0:8f:2a:84:f5:3b:10:
22:f9:f2:03:e0:0a:f8:59:79:0f:0b:29:eb:c8:1a:
1f:60:73:c4:9e:92:5f:5d:47:60:69:62:44:35:9c:
3d:88:56:47:79:08:47:9f:6b:7d:36:a5:eb:a5:7f:
80:96:15:a0:21:8f:b9:3f:ed:d0:b8:da:b0:89:0c:
44:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:9F:FE:81:FD:17:B9:F6:65:09:21:F6:71:3E:2C:E2:30:E4:BF:2A
X509v3 Authority Key Identifier:
keyid:E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/CJ_-gf0XufZlCSH2cT4s4jDkvyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.3.0/24
Signature Algorithm: sha256WithRSAEncryption
79:38:a0:67:28:ca:bd:af:98:8b:ef:7f:6d:ec:b3:18:d0:04:
39:17:d3:62:3a:0e:5b:35:3e:d1:72:de:d0:ba:4a:65:f7:55:
1f:ec:1b:17:6e:ea:a7:1c:b4:3e:44:a5:e6:3b:86:f8:6c:cb:
62:7c:7d:d3:b1:d7:46:8f:ea:31:18:ac:b7:2c:e1:db:e9:f4:
a6:15:dd:05:71:66:f1:e7:db:f0:8b:80:56:e2:9e:47:ca:13:
b1:3a:eb:c2:fd:7e:99:b5:79:45:5c:d9:24:0f:5c:29:48:7d:
65:31:4c:59:2b:25:67:fb:2f:e9:fe:89:c8:a5:a5:d8:15:ce:
02:f4:c9:6a:c1:89:cf:ec:c2:b0:28:51:9b:0c:fa:2d:fb:da:
bb:a3:43:ac:a3:66:6a:fc:88:82:60:fa:44:33:f6:cf:e6:be:
13:8a:b3:72:12:c8:5b:de:e5:46:76:22:00:dd:58:bb:dd:07:
36:32:9f:3a:1f:bf:be:d4:29:90:bf:a8:10:dc:42:d9:34:bd:
5e:51:11:93:d7:db:df:ed:00:15:83:f7:11:91:d1:61:c6:73:
20:00:81:c3:3c:6f:1f:c7:7d:2b:dc:db:8b:b3:f3:d5:79:45:
e0:fa:ff:0b:7e:9d:d5:be:c8:73:5e:ce:6e:b2:ba:f0:8c:95:
4d:73:96:f5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyjKxQZF7k9S+OLr295MOVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MTM1ZDYzOTc2OGEzYTYzZWQ5YzVmZjQwYWY1ZWQwMWRm
NzQxY2IwHhcNMjMwMTAyMTI1NDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODlmZmU4MWZkMTdiOWY2NjUwOTIxZjY3MTNlMmNlMjMwZTRiZjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMaz965yNEbJF41zCAAKLVmrHulM
vfB/LJ97hW1corS6YLGs3UGbwVdCuRTxvuT7KjCrMIBE1sV44THVV3zeOmnANt84
eYhiYhHANa38CVPOskWWHA4RnqHGE+ABTGzYoRhAAhEZTMenJzurq7g4HPpcHNU0
VU7l4E4JrBpqwlGxsjO1s8Wdc1Q/ZyeOFw3bU/HWzUvN3AGm+t5HeFBCOEK90Qem
eiEmbDXRxhsYJX1Zb161dxhCZ0iNnLCPKoT1OxAi+fID4Ar4WXkPCynryBofYHPE
npJfXUdgaWJENZw9iFZHeQhHn2t9NqXrpX+AlhWgIY+5P+3QuNqwiQxEjwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAif/oH9F7n2ZQkh9nE+LOIw5L8qMB8GA1UdIwQY
MBaAFOYTXWOXaKOmPtnF/0CvXtAd90HLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWhOZFk1ZG9vNlktMmNYX1FLOWUwQjMzUWNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS83NDZhNzUtZDM2MS00ZTkxLTg3M2Et
MGE3NzBmMGM3NjA4LzEvQ0pfLWdmMFh1ZlpsQ1NIMmNUNHM0akRrdnlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS83NDZhNzUtZDM2MS00ZTkxLTg3M2EtMGE3NzBmMGM3NjA4
LzEvNWhOZFk1ZG9vNlktMmNYX1FLOWUwQjMzUWNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuc8DMA0G
CSqGSIb3DQEBCwUAA4IBAQB5OKBnKMq9r5iL739t7LMY0AQ5F9NiOg5bNT7Rct7Q
ukpl91Uf7BsXbuqnHLQ+RKXmO4b4bMtifH3TsddGj+oxGKy3LOHb6fSmFd0FcWbx
59vwi4BW4p5HyhOxOuvC/X6ZtXlFXNkkD1wpSH1lMUxZKyVn+y/p/onIpaXYFc4C
9MlqwYnP7MKwKFGbDPot+9q7o0Oso2Zq/IiCYPpEM/bP5r4TirNyEshb3uVGdiIA
3Vi73Qc2Mp86H7++1CmQv6gQ3ELZNL1eURGT19vf7QAVg/cRkdFhxnMgAIHDPG8f
x30r3NuLs/PVeUXg+v8Lfp3VvshzXs5usrrwjJVNc5b1
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:20 2024 by rpki-client on console-ams.rpki-client.org