Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/JS5s_3HOk0JkWeQkjeAIXu3I9fI.roa
File: JS5s_3HOk0JkWeQkjeAIXu3I9fI.roa (raw, json)
Hash identifier: 33RZqdyHCrgwRfwHmVhR7YzfEz3JW17VHUgP3zTefsU=
Subject key identifier: 25:2E:6C:FF:71:CE:93:42:64:59:E4:24:8D:E0:08:5E:ED:C8:F5:F2
Certificate issuer: /CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7
Certificate serial: 01856F4B5ED7B8D0F7FC291FB2AE5E0D56C9
Authority key identifier: F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/JS5s_3HOk0JkWeQkjeAIXu3I9fI.roa
Signing time: Sun 01 Jan 2023 21:44:48 +0000
ROA not before: Sun 01 Jan 2023 21:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212582
IP address blocks: 45.88.228.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:5e:d7:b8:d0:f7:fc:29:1f:b2:ae:5e:0d:56:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7
Validity
Not Before: Jan 1 21:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=252e6cff71ce93426459e4248de0085eedc8f5f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:92:b2:6d:49:e0:24:4f:c3:f4:fc:24:a9:dd:
73:8a:04:42:47:7e:1f:69:ed:03:71:0a:65:fa:9f:
e6:37:bd:57:f5:f3:67:50:04:05:9a:ff:70:48:7e:
00:33:07:61:87:cf:25:48:33:27:2b:c6:4b:ee:78:
3c:45:51:be:f6:a0:cb:51:18:c2:9f:fd:4a:bf:fd:
0d:2d:db:fc:d9:31:04:81:0e:b2:7d:a7:26:18:cd:
a1:87:c5:84:4e:0b:c5:8a:cc:ed:da:21:90:36:cc:
2e:6d:96:af:80:14:45:07:66:dd:ba:66:7a:ea:d1:
a1:b4:65:a8:f4:98:4f:a6:32:07:be:10:03:29:c4:
28:7a:3a:b1:8f:c6:94:5a:bc:a6:e1:2a:5f:ad:a7:
ad:28:30:4a:3f:99:be:a4:db:32:ce:06:0d:ea:95:
0a:e1:21:bf:93:44:ad:07:b6:f3:0a:c3:ad:2f:d1:
d7:69:21:5a:b0:e3:df:7a:b8:82:8a:4d:24:ad:8c:
33:17:8f:c5:9c:04:1a:f1:b5:c0:88:80:59:16:89:
e9:a0:4d:9b:a7:35:40:6e:22:0b:7b:0b:bc:4c:0a:
41:01:c9:9a:45:d5:c8:0e:ab:c5:b5:5f:29:85:1e:
80:0a:41:7c:b7:5b:40:69:20:1f:9b:80:0e:ee:e0:
af:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:2E:6C:FF:71:CE:93:42:64:59:E4:24:8D:E0:08:5E:ED:C8:F5:F2
X509v3 Authority Key Identifier:
keyid:F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/JS5s_3HOk0JkWeQkjeAIXu3I9fI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.228.0/22
Signature Algorithm: sha256WithRSAEncryption
36:b3:de:e8:e0:6e:96:01:fb:e6:95:fc:f1:db:22:ba:c7:db:
c4:02:7a:27:d6:d1:0b:0e:c0:78:13:42:a1:de:1a:da:16:39:
c6:cc:41:9f:af:bb:03:68:6f:b6:82:92:70:66:49:18:c6:b4:
be:c3:08:e9:8d:8e:ac:8d:f0:5e:57:e1:44:ae:3f:b6:ed:71:
ae:94:f1:c0:57:1e:ca:20:f8:dc:52:c8:0b:cb:e2:ab:52:d9:
c9:c0:d7:98:a8:19:06:ca:b8:04:4c:f2:19:39:1b:a4:24:99:
e6:08:35:e6:55:54:7f:0c:17:cc:60:8a:0c:fe:a5:9c:ce:ec:
57:65:70:96:3c:1f:e2:5b:69:c5:0b:fb:b6:8b:c6:b5:c1:fa:
2a:f0:8b:ed:ca:0e:16:7b:ca:a1:ac:a4:f1:e2:c4:7a:44:76:
5f:e8:b2:c4:e1:31:5d:c3:c4:f2:09:64:a4:57:5d:87:d7:1a:
56:4c:f2:84:b5:d6:a3:0a:e0:10:cd:91:56:73:ed:2e:1f:95:
c6:27:aa:ff:58:f8:ad:0a:e0:42:92:f5:13:3f:ad:86:5c:9c:
42:50:1c:5d:ed:a2:8c:c3:b5:09:02:e1:e7:27:e7:21:29:62:
c4:0f:1c:c1:3c:be:92:0b:72:66:e6:8b:64:51:4f:7c:6e:2e:
08:7e:05:5c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvS17XuND3/Ckfsq5eDVbJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyYTI1M2NkZjUwN2EwM2UxZjU3OWQyMDJkOGRmMTFkNjhm
NWMzZDcwHhcNMjMwMTAxMjE0NDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTJlNmNmZjcxY2U5MzQyNjQ1OWU0MjQ4ZGUwMDg1ZWVkYzhmNWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZKybUngJE/D9Pwkqd1zigRCR34f
ae0DcQpl+p/mN71X9fNnUAQFmv9wSH4AMwdhh88lSDMnK8ZL7ng8RVG+9qDLURjC
n/1Kv/0NLdv82TEEgQ6yfacmGM2hh8WETgvFiszt2iGQNswubZavgBRFB2bdumZ6
6tGhtGWo9JhPpjIHvhADKcQoejqxj8aUWrym4SpfraetKDBKP5m+pNsyzgYN6pUK
4SG/k0StB7bzCsOtL9HXaSFasOPferiCik0krYwzF4/FnAQa8bXAiIBZFonpoE2b
pzVAbiILewu8TApBAcmaRdXIDqvFtV8phR6ACkF8t1tAaSAfm4AO7uCvewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCUubP9xzpNCZFnkJI3gCF7tyPXyMB8GA1UdIwQY
MBaAFPKiU831B6A+H1edIC2N8R1o9cPXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHFKVHpmVUhvRDRmVjUwZ0xZM3hIV2oxdzljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xMGViZWMtMjc4NC00ZGFhLThkZjct
YmU0ZDVkMDlkNzEwLzEvSlM1c18zSE9rMEprV2VRa2plQUlYdTNJOWZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8xMGViZWMtMjc4NC00ZGFhLThkZjctYmU0ZDVkMDlkNzEw
LzEvOHFKVHpmVUhvRDRmVjUwZ0xZM3hIV2oxdzljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVjkMA0G
CSqGSIb3DQEBCwUAA4IBAQA2s97o4G6WAfvmlfzx2yK6x9vEAnon1tELDsB4E0Kh
3hraFjnGzEGfr7sDaG+2gpJwZkkYxrS+wwjpjY6sjfBeV+FErj+27XGulPHAVx7K
IPjcUsgLy+KrUtnJwNeYqBkGyrgETPIZORukJJnmCDXmVVR/DBfMYIoM/qWczuxX
ZXCWPB/iW2nFC/u2i8a1wfoq8Ivtyg4We8qhrKTx4sR6RHZf6LLE4TFdw8TyCWSk
V12H1xpWTPKEtdajCuAQzZFWc+0uH5XGJ6r/WPitCuBCkvUTP62GXJxCUBxd7aKM
w7UJAuHnJ+chKWLEDxzBPL6SC3Jm5otkUU98bi4IfgVc
-----END CERTIFICATE-----
Generated at Tue Jan 2 11:34:53 2024 by rpki-client on console-ams.rpki-client.org