Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/JEP8RdBGKAD-H1NZ-jYuk6d8-a4.roa
File: JEP8RdBGKAD-H1NZ-jYuk6d8-a4.roa (raw, json)
Hash identifier: qyoI9vkyxrtauzEEJFd+qn+v1x+6Zb3gXL3yqIKlDjg=
Subject key identifier: 24:43:FC:45:D0:46:28:00:FE:1F:53:59:FA:36:2E:93:A7:7C:F9:AE
Certificate issuer: /CN=bc15a027b5ee4b0e8537a8f7198cfa9ea0945ae7
Certificate serial: 0185737A73AE08C712B10D3C3FFCF1CE7C95
Authority key identifier: BC:15:A0:27:B5:EE:4B:0E:85:37:A8:F7:19:8C:FA:9E:A0:94:5A:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/JEP8RdBGKAD-H1NZ-jYuk6d8-a4.roa
Signing time: Mon 02 Jan 2023 17:14:42 +0000
ROA not before: Mon 02 Jan 2023 17:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62371
IP address blocks: 176.119.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:35:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:7a:73:ae:08:c7:12:b1:0d:3c:3f:fc:f1:ce:7c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc15a027b5ee4b0e8537a8f7198cfa9ea0945ae7
Validity
Not Before: Jan 2 17:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2443fc45d0462800fe1f5359fa362e93a77cf9ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:53:9c:67:d6:46:30:e4:05:9c:fc:67:4b:96:
0b:12:1a:3e:b5:df:87:a8:ae:ce:fc:f3:e8:a2:4a:
e8:9f:be:6e:e4:ff:50:0d:51:cc:6e:c4:08:60:94:
15:0a:e0:e9:0c:b0:1b:01:31:be:c3:e0:d9:e5:83:
79:32:e9:8f:11:36:d2:7a:c4:b8:f5:e0:f5:32:6e:
a6:94:d6:79:b7:0c:d3:a3:5e:64:76:5d:ec:0b:7c:
12:48:6c:dc:77:1d:a3:90:b9:12:99:d4:93:b8:af:
8a:5e:13:87:56:72:df:a9:0a:bf:76:3f:12:20:c1:
61:df:58:75:f5:44:ff:47:59:20:2a:6b:d8:85:a6:
3d:07:75:3c:14:94:38:72:15:cd:2a:6b:9d:10:0f:
f7:bf:e5:69:69:4a:3a:4d:09:7d:58:1c:55:46:73:
ac:f0:b6:72:d4:e2:f8:b3:fb:a4:db:01:27:1c:19:
b3:9c:ed:f1:10:64:73:09:2f:66:94:ab:0d:4a:0e:
4b:ff:f7:e3:fb:af:3c:0a:16:e0:2f:22:1a:10:f1:
f7:bd:ec:11:bf:9d:58:3f:ef:23:75:93:37:89:1b:
b5:84:c5:53:bd:d0:22:ef:41:b7:4d:c7:e8:56:f2:
45:59:11:7a:4b:31:f5:22:41:4c:3b:74:d4:d2:1e:
7f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:43:FC:45:D0:46:28:00:FE:1F:53:59:FA:36:2E:93:A7:7C:F9:AE
X509v3 Authority Key Identifier:
keyid:BC:15:A0:27:B5:EE:4B:0E:85:37:A8:F7:19:8C:FA:9E:A0:94:5A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/JEP8RdBGKAD-H1NZ-jYuk6d8-a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.119.200.0/24
Signature Algorithm: sha256WithRSAEncryption
66:81:5f:f7:08:2b:83:d7:47:b9:ea:0b:24:66:b9:c3:e8:42:
a3:9b:65:3e:55:d8:b0:b9:d3:64:f1:07:d5:ab:ac:0c:21:1f:
43:7a:84:ff:cc:0a:fa:21:c9:84:8a:5a:f9:95:1c:d7:19:ca:
b4:d8:48:39:97:7b:9c:a4:9f:20:5e:50:68:88:e1:0a:b5:6f:
fa:1e:e8:0c:3f:56:06:a7:55:02:76:5d:a3:b7:a2:9c:c1:8f:
04:37:2e:23:f0:83:34:5e:0c:a9:be:92:7a:7d:3f:14:93:44:
d1:ca:d5:ba:c9:cb:15:e5:ca:b1:c2:bc:56:a0:b1:95:8d:bf:
2b:84:97:f8:b1:a6:41:dd:1c:24:e9:9d:21:79:6a:18:2c:32:
d3:eb:bb:72:7a:e0:a1:c3:fc:c7:ec:4d:06:63:e5:56:6a:86:
ba:c6:2d:8b:45:87:28:15:59:b2:2b:bf:b3:fa:c1:f7:5b:94:
6c:d2:69:61:8c:62:26:76:73:fa:55:2a:cd:97:85:e1:43:a7:
12:77:d1:1b:0b:64:7f:35:9c:61:0d:2f:02:2e:e9:db:c5:89:
02:b6:bc:31:aa:e2:86:f4:87:d1:40:ca:bc:14:eb:e3:42:a6:
e6:d5:1d:8b:b1:88:33:76:d4:15:25:e9:7e:7b:1e:7c:08:2b:
1b:30:c1:35
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVzenOuCMcSsQ08P/zxznyVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMTVhMDI3YjVlZTRiMGU4NTM3YThmNzE5OGNmYTllYTA5
NDVhZTcwHhcNMjMwMTAyMTcxNDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDQzZmM0NWQwNDYyODAwZmUxZjUzNTlmYTM2MmU5M2E3N2NmOWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1OcZ9ZGMOQFnPxnS5YLEho+td+H
qK7O/PPookron75u5P9QDVHMbsQIYJQVCuDpDLAbATG+w+DZ5YN5MumPETbSesS4
9eD1Mm6mlNZ5twzTo15kdl3sC3wSSGzcdx2jkLkSmdSTuK+KXhOHVnLfqQq/dj8S
IMFh31h19UT/R1kgKmvYhaY9B3U8FJQ4chXNKmudEA/3v+VpaUo6TQl9WBxVRnOs
8LZy1OL4s/uk2wEnHBmznO3xEGRzCS9mlKsNSg5L//fj+688ChbgLyIaEPH3vewR
v51YP+8jdZM3iRu1hMVTvdAi70G3TcfoVvJFWRF6SzH1IkFMO3TU0h5/yQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCRD/EXQRigA/h9TWfo2LpOnfPmuMB8GA1UdIwQY
MBaAFLwVoCe17ksOhTeo9xmM+p6glFrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkJXZ0o3WHVTdzZGTjZqM0dZejZucUNVV3VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8yN2NkNzEtOWRmNS00ZjVhLWE3MDEt
NmRmZTIzOWFlNTQxLzEvSkVQOFJkQkdLQUQtSDFOWi1qWXVrNmQ4LWE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8yN2NkNzEtOWRmNS00ZjVhLWE3MDEtNmRmZTIzOWFlNTQx
LzEvdkJXZ0o3WHVTdzZGTjZqM0dZejZucUNVV3VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHfIMA0G
CSqGSIb3DQEBCwUAA4IBAQBmgV/3CCuD10e56gskZrnD6EKjm2U+VdiwudNk8QfV
q6wMIR9DeoT/zAr6IcmEilr5lRzXGcq02Eg5l3ucpJ8gXlBoiOEKtW/6HugMP1YG
p1UCdl2jt6KcwY8ENy4j8IM0XgypvpJ6fT8Uk0TRytW6ycsV5cqxwrxWoLGVjb8r
hJf4saZB3Rwk6Z0heWoYLDLT67tyeuChw/zH7E0GY+VWaoa6xi2LRYcoFVmyK7+z
+sH3W5Rs0mlhjGImdnP6VSrNl4XhQ6cSd9EbC2R/NZxhDS8CLunbxYkCtrwxquKG
9IfRQMq8FOvjQqbm1R2LsYgzdtQVJel+ex58CCsbMME1
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:07 2024 by rpki-client on console-ams.rpki-client.org