Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/JvQTQfS29xXI9SNodw6iYp6pRyc.roa
File: JvQTQfS29xXI9SNodw6iYp6pRyc.roa (raw, json)
Hash identifier: a7SUIuzXDbOEakq3b4bFvft2qeaedJFy9jERRMS2Bc4=
Subject key identifier: 26:F4:13:41:F4:B6:F7:15:C8:F5:23:68:77:0E:A2:62:9E:A9:47:27
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: 0189BF36AAA0D3882B60DB0ED8C59208F045
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/JvQTQfS29xXI9SNodw6iYp6pRyc.roa
Signing time: Fri 04 Aug 2023 06:22:58 +0000
ROA not before: Fri 04 Aug 2023 06:22:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8100
IP address blocks: 185.244.107.0/24 maxlen: 24
212.46.37.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bf:36:aa:a0:d3:88:2b:60:db:0e:d8:c5:92:08:f0:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: Aug 4 06:22:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26f41341f4b6f715c8f52368770ea2629ea94727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:fe:e4:79:ec:7a:0b:ab:42:ad:32:af:c1:28:
58:bd:00:3e:41:54:9c:a1:94:4a:66:19:34:57:d2:
c5:20:09:67:ad:de:4c:fe:b6:7a:6e:e0:07:a8:28:
e7:8d:37:a1:68:51:08:ce:a5:64:93:5d:96:31:dc:
0e:d9:e6:09:84:3a:b8:66:13:50:f5:7f:eb:47:27:
e1:b9:6f:f1:36:0f:7d:f8:dc:30:c9:7d:43:d1:18:
4b:bc:ec:7b:8c:3e:66:ec:32:cb:87:b1:7b:e1:d3:
d3:39:30:be:78:60:3f:82:e7:77:4f:aa:b9:2b:5e:
05:ea:77:49:0e:80:e6:9c:f6:43:01:89:02:e5:a8:
50:b8:5c:ba:4a:ff:cf:28:e0:79:db:22:65:87:86:
df:a0:61:03:21:dd:f2:b5:62:52:9e:7c:d8:5f:15:
ec:ce:81:b8:fd:db:12:9a:bc:98:87:7d:5e:29:d0:
ad:2a:67:30:82:bf:8a:55:80:9f:9f:e5:5b:4c:1d:
9e:cb:ce:a9:6b:04:ac:fa:a9:c1:ef:44:ac:ce:47:
57:c0:9d:31:2d:62:4b:a5:89:b6:17:f7:80:bf:4b:
a1:74:4a:1b:6b:25:98:96:48:f7:06:e7:f5:01:17:
17:1b:71:28:83:19:b5:7d:84:a4:04:5a:00:1e:37:
f0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F4:13:41:F4:B6:F7:15:C8:F5:23:68:77:0E:A2:62:9E:A9:47:27
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/JvQTQfS29xXI9SNodw6iYp6pRyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.107.0/24
212.46.37.0/24
Signature Algorithm: sha256WithRSAEncryption
57:94:5e:e3:b8:74:53:ae:4e:0b:b0:c5:46:79:e1:9f:24:b8:
b9:08:1c:a5:da:b8:d2:6c:25:7d:77:a7:95:25:81:af:7a:14:
f8:e4:88:23:35:08:19:e8:82:8a:8d:47:c7:d7:8a:10:b4:48:
4f:1f:98:73:ac:0f:40:aa:c9:be:92:c9:73:5e:c6:5d:81:4a:
97:8d:60:af:89:d0:aa:09:12:b9:7c:01:57:5b:a7:5a:2a:3a:
4b:21:0b:e9:0b:62:7a:2b:a7:7b:02:35:04:97:11:ce:3b:0c:
7a:b1:37:ac:4d:e5:d7:89:7f:d1:57:b2:3f:0d:4e:33:69:a3:
a1:ef:06:bb:99:cd:5c:a7:e7:40:78:13:94:d2:60:3a:6b:2a:
81:ba:2e:cd:8e:25:54:21:04:4c:fc:12:09:4f:40:c2:6c:9c:
df:6a:17:f3:48:87:14:8a:0e:fa:20:d0:4a:2b:ab:1c:1d:69:
47:f9:f6:b0:f7:64:29:e6:e7:5d:de:1a:a7:3e:e4:3e:4a:98:
c7:be:c1:12:22:f2:00:ff:a0:eb:7c:88:00:2b:f7:39:84:b3:
08:c9:30:9c:1b:a1:77:a5:d7:ab:1a:2a:ea:fa:53:c5:c4:9a:
b7:59:9a:8f:29:5c:c1:7d:f2:38:a5:7d:cf:91:78:bc:2c:bf:
21:32:c1:31
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYm/Nqqg04grYNsO2MWSCPBFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMTQ1YThiZGYyYmNhMTUwZjI1ZWQ1NGEyNzdiOGY2NTNl
ZmRiM2UwHhcNMjMwODA0MDYyMjU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNmY0MTM0MWY0YjZmNzE1YzhmNTIzNjg3NzBlYTI2MjllYTk0NzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhv7keex6C6tCrTKvwShYvQA+QVSc
oZRKZhk0V9LFIAlnrd5M/rZ6buAHqCjnjTehaFEIzqVkk12WMdwO2eYJhDq4ZhNQ
9X/rRyfhuW/xNg99+NwwyX1D0RhLvOx7jD5m7DLLh7F74dPTOTC+eGA/gud3T6q5
K14F6ndJDoDmnPZDAYkC5ahQuFy6Sv/PKOB52yJlh4bfoGEDId3ytWJSnnzYXxXs
zoG4/dsSmryYh31eKdCtKmcwgr+KVYCfn+VbTB2ey86pawSs+qnB70SszkdXwJ0x
LWJLpYm2F/eAv0uhdEobayWYlkj3Buf1ARcXG3Eogxm1fYSkBFoAHjfwCQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCb0E0H0tvcVyPUjaHcOomKeqUcnMB8GA1UdIwQY
MBaAFCsUWovfK8oVDyXtVKJ3uPZT79s+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3hSYWk5OHJ5aFVQSmUxVW9uZTQ5bFB2Mno0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8wZDhjOGYtZmYyYy00ZGE4LWI0NDMt
MzA0MGJlZDNjY2NkLzEvSnZRVFFmUzI5eFhJOVNOb2R3NmlZcDZwUnljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8wZDhjOGYtZmYyYy00ZGE4LWI0NDMtMzA0MGJlZDNjY2Nk
LzEvS3hSYWk5OHJ5aFVQSmUxVW9uZTQ5bFB2Mno0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAufRrAwQA
1C4lMA0GCSqGSIb3DQEBCwUAA4IBAQBXlF7juHRTrk4LsMVGeeGfJLi5CByl2rjS
bCV9d6eVJYGvehT45IgjNQgZ6IKKjUfH14oQtEhPH5hzrA9Aqsm+kslzXsZdgUqX
jWCvidCqCRK5fAFXW6daKjpLIQvpC2J6K6d7AjUElxHOOwx6sTesTeXXiX/RV7I/
DU4zaaOh7wa7mc1cp+dAeBOU0mA6ayqBui7NjiVUIQRM/BIJT0DCbJzfahfzSIcU
ig76INBKK6scHWlH+faw92Qp5udd3hqnPuQ+SpjHvsESIvIA/6DrfIgAK/c5hLMI
yTCcG6F3pderGirq+lPFxJq3WZqPKVzBffI4pX3PkXi8LL8hMsEx
Generated at Sun Sep 10 06:08:40 2023 by rpki-client on console-ams.rpki-client.org