Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Jh3KSC009WLkBwKhB2vxl0rdfIQ.roa
File: Jh3KSC009WLkBwKhB2vxl0rdfIQ.roa (raw, json)
Hash identifier: k/H81ePC1qKau0ybY6IEp8fc8njVxmWPw3xaIhZQmIw=
Subject key identifier: 26:1D:CA:48:2D:34:F5:62:E4:07:02:A1:07:6B:F1:97:4A:DD:7C:84
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018571A7A02B457585B6D37D240AF6144473
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Jh3KSC009WLkBwKhB2vxl0rdfIQ.roa
Signing time: Mon 02 Jan 2023 08:44:49 +0000
ROA not before: Mon 02 Jan 2023 08:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15836
IP address blocks: 185.195.4.0/23 maxlen: 23
185.195.6.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:a7:a0:2b:45:75:85:b6:d3:7d:24:0a:f6:14:44:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 2 08:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=261dca482d34f562e40702a1076bf1974add7c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7a:81:b1:0e:84:df:37:d2:9d:fe:c9:93:8b:
bd:fb:32:d5:55:49:f3:06:af:5d:35:94:58:f8:06:
58:fc:12:4a:4e:60:31:66:f5:b9:21:9d:7f:65:57:
8c:e0:fa:92:40:cf:90:ed:73:13:38:c1:4d:99:59:
db:30:80:b3:a9:53:11:98:12:71:18:82:40:d6:28:
0b:0d:3c:c9:7e:16:10:28:1b:5e:1a:57:52:2a:af:
08:46:27:a5:59:6b:37:e8:04:8f:7e:c5:26:a4:fa:
16:48:23:6b:8b:14:dc:4a:a6:14:d1:d6:a1:6a:91:
33:5d:33:a7:48:f8:14:1e:1a:bb:79:6f:d0:c8:15:
e4:d4:c1:a1:c2:e4:9a:c5:87:f2:30:e0:59:7a:c3:
f8:e4:3c:0c:6e:7b:16:5c:3b:60:66:5c:4e:ca:50:
e9:ec:e6:12:9d:27:96:e6:d5:c1:43:84:51:ce:b8:
9e:4f:08:c0:0d:75:d0:71:bb:23:4e:05:28:07:e4:
1a:cf:0e:09:61:25:6e:90:eb:57:60:5b:8e:ab:38:
8a:f3:9c:32:2f:b6:36:54:db:ba:46:72:9d:29:6e:
c3:91:a7:97:30:1d:85:4c:ff:39:53:cb:16:3a:0e:
9f:5c:57:f6:24:02:2e:31:e4:89:19:81:e2:1d:31:
d8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:1D:CA:48:2D:34:F5:62:E4:07:02:A1:07:6B:F1:97:4A:DD:7C:84
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Jh3KSC009WLkBwKhB2vxl0rdfIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.4.0/22
Signature Algorithm: sha256WithRSAEncryption
91:f6:3d:2a:35:70:73:45:cc:0a:68:61:79:13:c7:ad:ad:b7:
86:89:ca:ea:81:67:f3:67:e2:e3:b6:ae:c7:74:75:c8:55:df:
cc:a1:ed:98:1b:ee:62:0f:88:da:5b:e3:07:ba:b6:16:be:8a:
c3:44:29:3b:cf:ae:0a:bc:24:2f:1c:0b:98:6c:bd:32:fd:06:
53:59:90:f0:0d:db:ad:d7:67:bb:80:3b:57:11:1e:a2:b3:63:
90:d7:dc:29:19:31:b2:0d:d5:7c:4a:1d:0c:cf:80:ab:15:fa:
39:42:52:69:ec:52:35:4c:7b:82:c9:a3:5e:80:10:a3:b6:0e:
81:09:02:61:c0:c7:60:29:35:22:f0:aa:29:d8:0f:d4:11:a9:
da:54:2b:b0:09:ed:78:7a:b2:c4:09:17:eb:74:d8:9f:5b:a5:
82:41:8e:a0:a7:f2:30:16:c9:1f:e9:52:4e:65:9e:3c:f4:34:
5b:00:fe:6b:c7:26:b4:6f:bc:2a:cf:30:0a:5a:6e:72:9c:f1:
26:64:7d:55:8b:3e:a4:04:ea:2b:98:62:8d:a6:0f:74:50:aa:
c8:c2:10:ef:ab:f9:52:d8:c2:cb:66:2e:9d:37:95:f6:3d:60:
27:36:1a:1d:05:34:3e:10:98:a1:17:f4:d7:e3:4a:77:58:44:
90:a2:f4:4f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxp6ArRXWFttN9JAr2FERzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjMwMTAyMDg0NDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjFkY2E0ODJkMzRmNTYyZTQwNzAyYTEwNzZiZjE5NzRhZGQ3Yzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXqBsQ6E3zfSnf7Jk4u9+zLVVUnz
Bq9dNZRY+AZY/BJKTmAxZvW5IZ1/ZVeM4PqSQM+Q7XMTOMFNmVnbMICzqVMRmBJx
GIJA1igLDTzJfhYQKBteGldSKq8IRielWWs36ASPfsUmpPoWSCNrixTcSqYU0dah
apEzXTOnSPgUHhq7eW/QyBXk1MGhwuSaxYfyMOBZesP45DwMbnsWXDtgZlxOylDp
7OYSnSeW5tXBQ4RRzrieTwjADXXQcbsjTgUoB+Qazw4JYSVukOtXYFuOqziK85wy
L7Y2VNu6RnKdKW7DkaeXMB2FTP85U8sWOg6fXFf2JAIuMeSJGYHiHTHYjwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCYdykgtNPVi5AcCoQdr8ZdK3XyEMB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEvSmgzS1NDMDA5V0xrQndLaEIydnhsMHJkZklRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucMEMA0G
CSqGSIb3DQEBCwUAA4IBAQCR9j0qNXBzRcwKaGF5E8etrbeGicrqgWfzZ+Ljtq7H
dHXIVd/Moe2YG+5iD4jaW+MHurYWvorDRCk7z64KvCQvHAuYbL0y/QZTWZDwDdut
12e7gDtXER6is2OQ19wpGTGyDdV8Sh0Mz4CrFfo5QlJp7FI1THuCyaNegBCjtg6B
CQJhwMdgKTUi8Kop2A/UEanaVCuwCe14erLECRfrdNifW6WCQY6gp/IwFskf6VJO
ZZ489DRbAP5rxya0b7wqzzAKWm5ynPEmZH1Viz6kBOormGKNpg90UKrIwhDvq/lS
2MLLZi6dN5X2PWAnNhodBTQ+EJihF/TX40p3WESQovRP
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:41 2024 by rpki-client on console-fra.rpki-client.org