Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/jnowiarsz3xZ7sgZxIrWlq7iB4c.roa
File: jnowiarsz3xZ7sgZxIrWlq7iB4c.roa (raw, json)
Hash identifier: w+8bJ3IGlL+aZYCgVM3IPKwQLlzRcGvKQox34TA190g=
Subject key identifier: 8E:7A:30:89:AA:EC:CF:7C:59:EE:C8:19:C4:8A:D6:96:AE:E2:07:87
Certificate issuer: /CN=1232303d1638e0735240491aaa9e42b1887adaca
Certificate serial: 018A89E17A3326E05D00034C402CB65C451C
Authority key identifier: 12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/jnowiarsz3xZ7sgZxIrWlq7iB4c.roa
Signing time: Tue 12 Sep 2023 14:52:50 +0000
ROA not before: Tue 12 Sep 2023 14:52:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207951
IP address blocks: 185.7.121.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:89:e1:7a:33:26:e0:5d:00:03:4c:40:2c:b6:5c:45:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1232303d1638e0735240491aaa9e42b1887adaca
Validity
Not Before: Sep 12 14:52:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e7a3089aaeccf7c59eec819c48ad696aee20787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:69:5f:b4:d4:e0:62:bb:b0:8d:c9:06:37:c4:
32:37:f6:04:dd:39:b4:bc:3e:90:3f:b9:b9:99:2c:
db:cb:bc:96:8f:ae:46:71:af:3b:45:8e:e6:8c:29:
e3:f5:11:1f:2a:e0:01:fa:19:9e:29:17:47:77:4b:
0b:05:1c:c8:b3:ad:56:40:91:0a:c1:77:bc:67:4b:
2b:57:38:13:10:17:7d:fe:09:85:bf:14:e8:d6:06:
23:92:a1:05:38:ec:a6:94:8a:67:2b:23:72:08:f9:
0c:1b:d6:fb:4c:6f:11:35:f3:4d:a7:dd:ce:5c:7e:
e5:fd:28:5e:2c:ee:c3:de:45:fe:ca:5b:88:56:ec:
eb:d2:f3:c6:70:33:67:2e:4c:54:e1:3d:64:bd:de:
48:d4:2b:fe:2b:59:96:d6:3e:e1:59:7c:01:21:a2:
cd:2f:fb:66:e7:5b:d4:87:26:09:2f:cc:23:30:84:
e7:dc:f6:e0:83:52:c3:a5:12:92:27:e1:d9:23:df:
78:cd:5c:dc:7c:4b:f5:d4:9f:27:76:24:69:35:64:
fa:4e:ed:da:0e:22:3f:2a:db:e7:af:2e:09:b1:25:
d6:49:95:a5:83:82:69:6f:f6:8b:a4:a7:06:75:bd:
bf:87:6f:f4:2b:fe:5e:d3:15:70:fe:13:94:e8:7f:
4f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:7A:30:89:AA:EC:CF:7C:59:EE:C8:19:C4:8A:D6:96:AE:E2:07:87
X509v3 Authority Key Identifier:
keyid:12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/jnowiarsz3xZ7sgZxIrWlq7iB4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.121.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:2b:34:c1:cd:be:04:1f:17:31:a9:b5:8d:12:b4:b7:56:a8:
b9:74:68:b3:5e:05:08:72:54:6b:e0:d3:1e:a1:0c:a3:31:f7:
75:e6:7c:26:0d:59:b5:9c:24:63:bc:b2:e2:78:c7:ef:28:bc:
ff:1c:dc:1e:bf:b2:70:dc:3f:a6:a8:d1:6c:0a:cd:1d:85:69:
bc:23:d7:c2:76:d5:73:30:e1:d4:ea:6c:77:46:d1:9b:d5:6c:
82:8a:4a:57:08:71:9d:4d:ca:91:15:fd:ca:ae:34:ec:82:26:
c3:50:26:b3:64:2f:fc:63:95:79:5d:a1:a6:8b:b7:e8:3d:94:
74:68:d6:a8:72:e6:1a:c2:72:70:65:c5:b4:b7:c4:6e:eb:30:
2e:76:3e:ac:7d:08:3c:57:58:e1:02:75:b8:59:f5:b9:f2:30:
85:01:78:92:43:7e:49:cc:f4:3b:a4:5d:d3:ba:30:c9:70:d5:
d3:6e:99:e9:f4:06:a1:bd:a0:29:fa:9c:43:31:53:13:70:ca:
ef:20:77:e0:28:8c:d7:a3:97:b2:c7:58:dd:12:22:62:1c:45:
66:b4:31:19:28:29:18:9d:5a:48:74:a8:a1:1c:b0:de:b6:23:
5f:02:b6:50:ff:22:37:5e:22:8b:c9:33:f6:6d:2d:eb:b3:e2:
c1:88:34:43
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYqJ4XozJuBdAANMQCy2XEUcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMzIzMDNkMTYzOGUwNzM1MjQwNDkxYWFhOWU0MmIxODg3
YWRhY2EwHhcNMjMwOTEyMTQ1MjUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTdhMzA4OWFhZWNjZjdjNTllZWM4MTljNDhhZDY5NmFlZTIwNzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGlftNTgYruwjckGN8QyN/YE3Tm0
vD6QP7m5mSzby7yWj65Gca87RY7mjCnj9REfKuAB+hmeKRdHd0sLBRzIs61WQJEK
wXe8Z0srVzgTEBd9/gmFvxTo1gYjkqEFOOymlIpnKyNyCPkMG9b7TG8RNfNNp93O
XH7l/SheLO7D3kX+yluIVuzr0vPGcDNnLkxU4T1kvd5I1Cv+K1mW1j7hWXwBIaLN
L/tm51vUhyYJL8wjMITn3Pbgg1LDpRKSJ+HZI994zVzcfEv11J8ndiRpNWT6Tu3a
DiI/Ktvnry4JsSXWSZWlg4Jpb/aLpKcGdb2/h2/0K/5e0xVw/hOU6H9PFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI56MImq7M98We7IGcSK1pau4geHMB8GA1UdIwQY
MBaAFBIyMD0WOOBzUkBJGqqeQrGIetrKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWpJd1BSWTQ0SE5TUUVrYXFwNUNzWWg2MnNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8wYWIxNjctMzA5NC00MTAzLTgxMzEt
MDY0NDE0ZDAzNDBmLzEvam5vd2lhcnN6M3haN3NnWnhJcldscTdpQjRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8wYWIxNjctMzA5NC00MTAzLTgxMzEtMDY0NDE0ZDAzNDBm
LzEvRWpJd1BSWTQ0SE5TUUVrYXFwNUNzWWg2MnNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQd5MA0G
CSqGSIb3DQEBCwUAA4IBAQBrKzTBzb4EHxcxqbWNErS3Vqi5dGizXgUIclRr4NMe
oQyjMfd15nwmDVm1nCRjvLLieMfvKLz/HNwev7Jw3D+mqNFsCs0dhWm8I9fCdtVz
MOHU6mx3RtGb1WyCikpXCHGdTcqRFf3KrjTsgibDUCazZC/8Y5V5XaGmi7foPZR0
aNaocuYawnJwZcW0t8Ru6zAudj6sfQg8V1jhAnW4WfW58jCFAXiSQ35JzPQ7pF3T
ujDJcNXTbpnp9AahvaAp+pxDMVMTcMrvIHfgKIzXo5eyx1jdEiJiHEVmtDEZKCkY
nVpIdKihHLDetiNfArZQ/yI3XiKLyTP2bS3rs+LBiDRD
-----END CERTIFICATE-----
Generated at Mon Jan 1 06:16:25 2024 by rpki-client on console-ams.rpki-client.org