Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/jJIBBnyc_k8yfPj1h4XEDGJv-yQ.roa
File: jJIBBnyc_k8yfPj1h4XEDGJv-yQ.roa (raw, json)
Hash identifier: mLJjhZ817TFEf4uhR5IQJMbOVaaERsgXYcmtFJdQaTc=
Subject key identifier: 8C:92:01:06:7C:9C:FE:4F:32:7C:F8:F5:87:85:C4:0C:62:6F:FB:24
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018B0505BC83529DE5D9B8C260507E74207E
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/jJIBBnyc_k8yfPj1h4XEDGJv-yQ.roa
Signing time: Fri 06 Oct 2023 12:45:43 +0000
ROA not before: Fri 06 Oct 2023 12:45:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3257
IP address blocks: 194.50.200.0/23 maxlen: 24
194.50.206.0/23 maxlen: 24
195.138.108.0/24 maxlen: 24
195.138.116.0/24 maxlen: 24
89.39.242.0/24 maxlen: 24
195.138.122.0/23 maxlen: 23
195.138.124.0/22 maxlen: 22
45.67.117.0/24 maxlen: 24
94.231.198.0/24 maxlen: 24
91.242.103.0/24 maxlen: 24
185.40.105.0/24 maxlen: 24
91.242.70.0/24 maxlen: 24
91.242.72.0/23 maxlen: 24
91.242.74.0/23 maxlen: 24
91.242.75.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 Nov 2023 18:16:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:05:05:bc:83:52:9d:e5:d9:b8:c2:60:50:7e:74:20:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Oct 6 12:45:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c9201067c9cfe4f327cf8f58785c40c626ffb24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:88:46:75:de:2d:57:40:55:2c:51:89:04:79:
32:0b:17:94:b1:da:92:82:2c:bc:13:81:56:1d:8a:
79:25:9d:19:54:47:1d:04:6c:fc:0e:de:34:69:e2:
e1:31:7c:59:ca:23:6c:6b:f8:e8:ac:28:67:91:e8:
b6:0d:be:15:5c:3f:2f:50:c6:a2:79:5d:10:18:de:
37:61:c4:5c:4c:fd:90:12:b1:a0:65:c2:0a:10:82:
01:f0:10:c4:bd:48:12:41:9a:20:10:9b:93:d8:52:
0d:0b:ff:c3:09:77:06:57:e9:fc:23:2c:62:f7:5e:
e9:f4:d1:32:5c:1a:8b:68:34:a0:95:0b:de:76:f4:
d5:0a:cf:64:64:3d:40:f7:40:66:37:cd:4e:7b:c9:
af:7e:e2:06:eb:7b:e4:5d:8e:1e:85:3a:05:78:85:
1d:63:d4:0b:2b:c7:de:07:22:3c:33:48:7c:f7:5f:
0b:ab:c5:42:10:70:99:8d:46:a6:e5:e7:a9:ec:0d:
ca:55:c2:f0:af:73:e7:8e:95:94:f8:77:ec:17:29:
cd:f3:a0:a2:82:e8:2f:03:6b:0c:cb:6a:30:7e:0b:
1a:2e:27:5c:fc:ce:fc:76:d9:e2:95:c0:de:2f:4a:
ef:ef:ce:03:11:09:dc:db:08:68:a1:6f:a0:8e:f2:
41:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:92:01:06:7C:9C:FE:4F:32:7C:F8:F5:87:85:C4:0C:62:6F:FB:24
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/jJIBBnyc_k8yfPj1h4XEDGJv-yQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.117.0/24
89.39.242.0/24
91.242.70.0/24
91.242.72.0/22
91.242.103.0/24
94.231.198.0/24
185.40.105.0/24
194.50.200.0/23
194.50.206.0/23
195.138.108.0/24
195.138.116.0/24
195.138.122.0-195.138.127.255
Signature Algorithm: sha256WithRSAEncryption
7e:7a:3f:c0:1e:49:cd:f4:ff:0c:70:26:1f:6d:16:86:30:e2:
fe:68:6c:5d:b1:3a:11:e7:dd:6c:a1:08:39:02:50:5a:ad:06:
83:42:27:c3:ba:72:39:97:3e:61:29:88:f7:64:e9:03:a3:d9:
a7:e7:6c:21:bb:c5:97:7a:02:94:0f:9c:3f:83:8c:da:47:8b:
d9:7d:fa:9c:b7:cb:73:cd:17:16:94:21:52:b9:cb:25:f3:ba:
69:fb:5e:fa:69:f2:c5:24:2f:5b:c7:a3:10:ca:f8:c5:47:c8:
ee:0b:7a:66:89:50:be:94:70:72:60:5c:17:d3:a9:89:5d:07:
3f:f0:6d:65:ba:59:70:a7:31:a4:10:7f:4a:4b:ac:cc:b8:30:
0c:e2:65:a4:2d:9e:60:34:cd:6a:7a:b0:fe:1f:d6:d3:6a:70:
bc:c0:b2:bb:73:6e:8a:03:cc:1c:e5:cb:eb:d8:5e:d1:e3:2c:
0c:21:e3:93:97:a1:1b:82:b9:be:99:9f:2d:0d:48:5b:18:34:
07:73:ca:51:dc:0f:f4:3c:99:ba:70:80:5b:ac:ad:41:0f:8e:
79:d8:02:fb:e2:35:89:80:c7:b4:90:de:79:29:b5:a3:59:76:
a5:36:83:e2:81:9d:2c:2f:63:15:c9:f8:8e:14:3a:9a:5d:e9:
dc:b0:8c:40
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgISAYsFBbyDUp3l2bjCYFB+dCB+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjMxMDA2MTI0NTQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzkyMDEwNjdjOWNmZTRmMzI3Y2Y4ZjU4Nzg1YzQwYzYyNmZmYjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoohGdd4tV0BVLFGJBHkyCxeUsdqS
giy8E4FWHYp5JZ0ZVEcdBGz8Dt40aeLhMXxZyiNsa/jorChnkei2Db4VXD8vUMai
eV0QGN43YcRcTP2QErGgZcIKEIIB8BDEvUgSQZogEJuT2FINC//DCXcGV+n8Iyxi
917p9NEyXBqLaDSglQvedvTVCs9kZD1A90BmN81Oe8mvfuIG63vkXY4ehToFeIUd
Y9QLK8feByI8M0h8918Lq8VCEHCZjUam5eep7A3KVcLwr3PnjpWU+HfsFynN86Ci
gugvA2sMy2owfgsaLidc/M78dtnilcDeL0rv784DEQnc2whooW+gjvJBfQIDAQAB
o4ICUzCCAk8wHQYDVR0OBBYEFIySAQZ8nP5PMnz49YeFxAxib/skMB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEvakpJQkJueWNfazh5ZlBqMWg0WEVER0p2LXlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGkGCCsGAQUFBwEHAQH/BFowWDBWBAIAATBQAwQALUN1AwQA
WSfyAwQAW/JGAwQCW/JIAwQAW/JnAwQAXufGAwQAuShpAwQBwjLIAwQBwjLOAwQA
w4psAwQAw4p0MAwDBAHDinoDBAfDigAwDQYJKoZIhvcNAQELBQADggEBAH56P8Ae
Sc30/wxwJh9tFoYw4v5obF2xOhHn3WyhCDkCUFqtBoNCJ8O6cjmXPmEpiPdk6QOj
2afnbCG7xZd6ApQPnD+DjNpHi9l9+py3y3PNFxaUIVK5yyXzumn7Xvpp8sUkL1vH
oxDK+MVHyO4LemaJUL6UcHJgXBfTqYldBz/wbWW6WXCnMaQQf0pLrMy4MAziZaQt
nmA0zWp6sP4f1tNqcLzAsrtzbooDzBzly+vYXtHjLAwh45OXoRuCub6Zny0NSFsY
NAdzylHcD/Q8mbpwgFusrUEPjnnYAvviNYmAx7SQ3nkptaNZdqU2g+KBnSwvYxXJ
+I4UOppd6dywjEA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:41 2024 by rpki-client on console-fra.rpki-client.org