Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/JES4ndWnK1P0mCWuLoN2ocGs-m8.roa
File: JES4ndWnK1P0mCWuLoN2ocGs-m8.roa (raw, json)
Hash identifier: gnRTY4OpoRGdfUwDH0dRnmSnIHaT/YeyU8TOxiAatWw=
Subject key identifier: 24:44:B8:9D:D5:A7:2B:53:F4:98:25:AE:2E:83:76:A1:C1:AC:FA:6F
Certificate issuer: /CN=f724cba521c080db72a6e54a1b8cf4495cbbc7d6
Certificate serial: 018CC5DD2F2FC0BBED4619C34B19075F9573
Authority key identifier: F7:24:CB:A5:21:C0:80:DB:72:A6:E5:4A:1B:8C:F4:49:5C:BB:C7:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/JES4ndWnK1P0mCWuLoN2ocGs-m8.roa
Signing time: Mon 01 Jan 2024 16:30:56 +0000
ROA not before: Mon 01 Jan 2024 16:30:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211894
IP address blocks: 185.203.113.0/24 maxlen: 24
2a0a:5480::/29 maxlen: 48
Validation: Failed, certificate revoked on Thu 11 Jan 2024 21:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dd:2f:2f:c0:bb:ed:46:19:c3:4b:19:07:5f:95:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f724cba521c080db72a6e54a1b8cf4495cbbc7d6
Validity
Not Before: Jan 1 16:30:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2444b89dd5a72b53f49825ae2e8376a1c1acfa6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:46:52:77:a9:ba:12:30:f9:98:89:39:00:41:
0e:d3:07:0e:41:ff:b7:90:17:ba:05:46:21:04:8e:
7f:91:07:d4:46:e3:94:0f:c8:44:ba:73:20:14:35:
32:99:a8:ff:cc:91:33:09:5f:63:e9:84:cc:09:dc:
0f:46:29:91:2b:ac:54:21:ac:96:38:2b:34:0c:91:
a1:65:da:1b:fe:65:2a:6a:ea:93:05:a3:ce:44:84:
a6:bf:52:d0:49:0e:92:5d:7e:42:71:c7:e9:f1:88:
cc:a1:f3:c0:13:8f:98:20:d6:d3:93:8e:66:5c:9d:
bc:ce:9d:37:38:25:ec:20:a9:5e:58:64:42:9b:2a:
1f:10:10:90:94:78:2f:1f:ad:60:f8:75:7b:6f:4e:
15:e6:6b:06:ec:32:5b:de:22:7c:a3:80:70:e9:1d:
e2:cb:fd:62:1e:a9:11:7d:ad:9f:6f:e9:4a:05:bc:
2d:40:2f:d0:71:dd:24:7d:36:26:c6:ca:4a:5f:c4:
ee:e4:96:d4:21:c5:6a:f2:5a:f8:59:0a:b4:60:eb:
ab:9f:b5:82:60:0a:d2:8f:97:2a:a3:52:5b:ed:33:
6a:e1:48:c2:f9:93:cd:75:7b:3f:1c:ed:b9:8b:da:
59:53:0a:6e:27:21:b7:2a:d2:4a:53:61:54:cc:66:
25:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:44:B8:9D:D5:A7:2B:53:F4:98:25:AE:2E:83:76:A1:C1:AC:FA:6F
X509v3 Authority Key Identifier:
keyid:F7:24:CB:A5:21:C0:80:DB:72:A6:E5:4A:1B:8C:F4:49:5C:BB:C7:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/JES4ndWnK1P0mCWuLoN2ocGs-m8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.113.0/24
IPv6:
2a0a:5480::/29
Signature Algorithm: sha256WithRSAEncryption
78:8c:55:44:c0:c5:ba:9b:86:79:92:3c:f2:12:0e:ad:e0:7e:
13:56:f6:99:b8:17:2a:fa:54:7f:14:7a:d8:b6:9d:f4:37:77:
c0:b2:48:26:8c:a1:fd:7c:07:d4:f0:03:a9:b1:83:96:84:6b:
4c:cf:99:3a:df:53:f0:05:46:70:f1:27:5d:1f:59:70:e7:1f:
76:d5:e3:6d:1e:b8:48:f3:1b:bb:ce:e5:0e:94:d0:47:d6:d2:
69:c6:7d:0a:b8:54:f5:3f:e2:c9:e1:1f:fc:8e:8f:c2:11:6a:
44:62:f6:34:07:c0:85:c8:ea:52:d0:ed:61:eb:fd:2e:d1:27:
1f:32:cc:86:44:49:ff:63:5d:bf:cc:b8:d8:88:65:2b:1f:8e:
1a:f2:fe:89:0b:fd:b8:58:7a:17:7a:fa:af:44:6c:fb:63:6e:
68:94:8d:0e:6d:33:94:86:e8:fc:48:eb:35:68:5f:1a:54:d9:
df:3b:5c:83:ee:56:0e:26:b4:4d:e6:e5:75:91:3a:eb:34:64:
c5:03:2a:d1:44:e2:6b:d3:dc:d6:ba:45:89:13:da:33:cc:89:
4c:18:2a:c4:7b:c8:66:f5:e9:b0:7d:5e:cd:07:89:62:69:d6:
42:4b:6a:cf:ba:92:7e:3f:26:b0:44:ad:a2:78:60:d0:43:4d:
ea:88:08:4c
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzF3S8vwLvtRhnDSxkHX5VzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3MjRjYmE1MjFjMDgwZGI3MmE2ZTU0YTFiOGNmNDQ5NWNi
YmM3ZDYwHhcNMjQwMTAxMTYzMDU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDQ0Yjg5ZGQ1YTcyYjUzZjQ5ODI1YWUyZTgzNzZhMWMxYWNmYTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkZSd6m6EjD5mIk5AEEO0wcOQf+3
kBe6BUYhBI5/kQfURuOUD8hEunMgFDUymaj/zJEzCV9j6YTMCdwPRimRK6xUIayW
OCs0DJGhZdob/mUqauqTBaPORISmv1LQSQ6SXX5Cccfp8YjMofPAE4+YINbTk45m
XJ28zp03OCXsIKleWGRCmyofEBCQlHgvH61g+HV7b04V5msG7DJb3iJ8o4Bw6R3i
y/1iHqkRfa2fb+lKBbwtQC/Qcd0kfTYmxspKX8Tu5JbUIcVq8lr4WQq0YOurn7WC
YArSj5cqo1Jb7TNq4UjC+ZPNdXs/HO25i9pZUwpuJyG3KtJKU2FUzGYlowIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFCREuJ3VpytT9Jglri6DdqHBrPpvMB8GA1UdIwQY
MBaAFPcky6UhwIDbcqblShuM9Elcu8fWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXlUTHBTSEFnTnR5cHVWS0c0ejBTVnk3eDlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy80OGI1MGItYWRmZS00ZGZiLWFkODAt
MTAzYjIwNmJhMjhiLzEvSkVTNG5kV25LMVAwbUNXdUxvTjJvY0dzLW04LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy80OGI1MGItYWRmZS00ZGZiLWFkODAtMTAzYjIwNmJhMjhi
LzEvOXlUTHBTSEFnTnR5cHVWS0c0ejBTVnk3eDlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuctxMA0E
AgACMAcDBQMqClSAMA0GCSqGSIb3DQEBCwUAA4IBAQB4jFVEwMW6m4Z5kjzyEg6t
4H4TVvaZuBcq+lR/FHrYtp30N3fAskgmjKH9fAfU8AOpsYOWhGtMz5k631PwBUZw
8SddH1lw5x921eNtHrhI8xu7zuUOlNBH1tJpxn0KuFT1P+LJ4R/8jo/CEWpEYvY0
B8CFyOpS0O1h6/0u0ScfMsyGREn/Y12/zLjYiGUrH44a8v6JC/24WHoXevqvRGz7
Y25olI0ObTOUhuj8SOs1aF8aVNnfO1yD7lYOJrRN5uV1kTrrNGTFAyrRROJr09zW
ukWJE9ozzIlMGCrEe8hm9emwfV7NB4liadZCS2rPupJ+PyawRK2ieGDQQ03qiAhM
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:34 2024 by rpki-client on console-ams.rpki-client.org