Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/JqOpGRk7YqDRYDSKQjTyx1IwUac.roa
File: JqOpGRk7YqDRYDSKQjTyx1IwUac.roa (raw, json)
Hash identifier: FqVvXygy3/r5CKwv/4xmbH6VpAgEAAqR7Zy3B2KyQ1Y=
Subject key identifier: 26:A3:A9:19:19:3B:62:A0:D1:60:34:8A:42:34:F2:C7:52:30:51:A7
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018571A7C1F5CD3E0E6C8BB65CBF86CC42C8
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/JqOpGRk7YqDRYDSKQjTyx1IwUac.roa
Signing time: Mon 02 Jan 2023 08:44:57 +0000
ROA not before: Mon 02 Jan 2023 08:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209982
IP address blocks: 194.35.52.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:a7:c1:f5:cd:3e:0e:6c:8b:b6:5c:bf:86:cc:42:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 2 08:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26a3a919193b62a0d160348a4234f2c7523051a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:27:6a:5a:d7:39:e0:30:f5:78:41:76:5b:15:
e6:51:69:70:21:3a:ad:27:37:b1:0e:73:d5:26:2f:
e5:e7:1e:c6:13:6b:da:06:4b:76:6b:8a:77:2c:5a:
e2:85:34:9a:41:55:34:08:5a:97:07:7a:8d:5d:73:
22:56:3b:13:d9:24:4a:f3:d9:9d:93:c4:f5:fc:1b:
23:39:d1:e4:fc:fc:96:aa:35:49:c4:bc:9f:27:8c:
5b:7c:e2:bf:44:9b:61:44:bc:64:fa:59:02:7f:77:
6d:e5:0e:a9:72:52:34:a7:64:e2:13:57:f2:21:ec:
9d:24:31:5d:c7:66:b5:80:f6:1e:39:f0:a2:b9:cf:
80:18:62:83:c8:ab:e2:f2:3c:92:be:6f:6d:e9:af:
10:91:89:05:e5:c8:de:09:1f:1e:ce:3d:1f:07:b9:
db:75:fa:3c:b6:05:a1:5b:3e:9c:c7:68:e6:04:59:
4f:3a:8b:f4:a6:e3:f4:be:ad:ab:b5:b8:6a:ac:65:
4b:8d:f7:60:b5:96:ad:d2:44:07:a8:a6:a3:8e:10:
d8:26:11:02:39:aa:3d:d7:1b:f8:17:c8:d5:be:b8:
c6:5a:ba:7c:4d:11:3c:cb:52:90:5a:2d:62:44:20:
b7:4f:40:84:2b:05:cf:c3:56:3e:7c:b5:20:19:dc:
9e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A3:A9:19:19:3B:62:A0:D1:60:34:8A:42:34:F2:C7:52:30:51:A7
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/JqOpGRk7YqDRYDSKQjTyx1IwUac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.35.52.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:a9:30:36:f1:46:70:4e:bd:d6:3c:af:02:0a:80:c6:ac:14:
5d:0c:79:29:cc:6b:d0:54:98:a9:6f:03:92:cf:06:3c:57:a6:
05:a6:76:e9:d0:1d:f6:45:05:05:b7:9d:3d:c1:63:27:b0:2a:
2f:e5:45:d8:4f:fb:c0:cb:48:43:f3:30:18:aa:8c:08:8f:4c:
d4:af:68:a9:1d:29:23:22:19:57:86:53:c5:87:d4:6a:fe:5a:
d9:e0:0b:2b:5e:e0:ec:01:db:46:09:64:00:7f:17:ca:54:97:
95:21:c6:44:af:4a:9c:89:ec:d4:27:0f:8e:f2:a3:0d:a9:b1:
71:23:05:a4:6b:80:cd:32:46:99:23:a8:82:a8:b9:51:ed:79:
bc:05:ae:7d:c1:09:84:b1:43:e1:24:cb:48:19:ee:d7:8f:10:
34:0a:66:01:b2:f1:39:f1:f3:b0:f3:57:0c:b8:98:0e:9c:ec:
c1:06:2e:1d:7f:fd:42:bd:77:3d:69:e2:7e:3d:28:d4:f2:e0:
0c:c9:a8:4c:8a:d5:05:a7:72:ed:db:c1:9e:4c:d1:c5:3a:96:
0b:ef:55:e1:20:43:5a:cc:6b:96:6c:f6:2b:18:a0:7d:3e:da:
ed:1a:4c:bd:06:5f:8c:de:e9:ab:89:28:a9:8d:78:b4:4f:77:
d3:1c:39:64
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxp8H1zT4ObIu2XL+GzELIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjMwMTAyMDg0NDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNmEzYTkxOTE5M2I2MmEwZDE2MDM0OGE0MjM0ZjJjNzUyMzA1MWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3idqWtc54DD1eEF2WxXmUWlwITqt
JzexDnPVJi/l5x7GE2vaBkt2a4p3LFrihTSaQVU0CFqXB3qNXXMiVjsT2SRK89md
k8T1/BsjOdHk/PyWqjVJxLyfJ4xbfOK/RJthRLxk+lkCf3dt5Q6pclI0p2TiE1fy
IeydJDFdx2a1gPYeOfCiuc+AGGKDyKvi8jySvm9t6a8QkYkF5cjeCR8ezj0fB7nb
dfo8tgWhWz6cx2jmBFlPOov0puP0vq2rtbhqrGVLjfdgtZat0kQHqKajjhDYJhEC
Oao91xv4F8jVvrjGWrp8TRE8y1KQWi1iRCC3T0CEKwXPw1Y+fLUgGdyesQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCajqRkZO2Kg0WA0ikI08sdSMFGnMB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEvSnFPcEdSazdZcURSWURTS1FqVHl4MUl3VWFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwiM0MA0G
CSqGSIb3DQEBCwUAA4IBAQCdqTA28UZwTr3WPK8CCoDGrBRdDHkpzGvQVJipbwOS
zwY8V6YFpnbp0B32RQUFt509wWMnsCov5UXYT/vAy0hD8zAYqowIj0zUr2ipHSkj
IhlXhlPFh9Rq/lrZ4AsrXuDsAdtGCWQAfxfKVJeVIcZEr0qciezUJw+O8qMNqbFx
IwWka4DNMkaZI6iCqLlR7Xm8Ba59wQmEsUPhJMtIGe7XjxA0CmYBsvE58fOw81cM
uJgOnOzBBi4df/1CvXc9aeJ+PSjU8uAMyahMitUFp3Lt28GeTNHFOpYL71XhIENa
zGuWbPYrGKB9PtrtGky9Bl+M3umriSipjXi0T3fTHDlk
-----END CERTIFICATE-----
Generated at Fri Aug 11 15:14:11 2023 by rpki-client on console-ams.rpki-client.org