Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/jasV5GhHdo7Lv5j-14UvTq9-dwg.roa
File: jasV5GhHdo7Lv5j-14UvTq9-dwg.roa (raw, json)
Hash identifier: 7YihCGXUa8GC+C0hg4WJRsGcF1jNvKn1VSFSbIhfZrY=
Subject key identifier: 8D:AB:15:E4:68:47:76:8E:CB:BF:98:FE:D7:85:2F:4E:AF:7E:77:08
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 018EC46E1765793FF5A09C73075D301AC780
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/jasV5GhHdo7Lv5j-14UvTq9-dwg.roa
Signing time: Tue 09 Apr 2024 19:55:32 +0000
ROA not before: Tue 09 Apr 2024 19:55:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62300
IP address blocks: 195.216.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Apr 2024 19:59:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c4:6e:17:65:79:3f:f5:a0:9c:73:07:5d:30:1a:c7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Apr 9 19:55:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8dab15e46847768ecbbf98fed7852f4eaf7e7708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c4:5f:d1:16:02:2c:b8:75:40:a4:80:28:20:
39:f3:6d:57:88:66:0f:b3:e6:5e:b3:73:83:cc:79:
9c:2c:5f:03:aa:be:48:59:e8:a2:6a:66:84:4d:a5:
35:97:ed:ca:c8:dc:4f:bc:47:2d:39:3f:68:5f:3a:
81:42:fa:cf:57:44:81:5c:fd:f0:25:84:2b:b2:3a:
3d:eb:b3:15:01:84:85:e1:81:8d:16:72:90:af:83:
0b:53:2b:e2:e2:62:00:db:bb:a4:47:66:94:30:18:
43:1e:f7:56:2b:eb:1d:76:85:e0:e4:ab:46:08:b1:
46:5c:b4:50:ea:e6:d2:84:12:92:49:70:73:c9:30:
00:4a:3a:bf:6b:63:cd:cd:75:b8:8e:fa:7e:2a:d2:
b0:11:c2:ad:26:49:fb:3c:fa:0a:af:a8:c6:d3:14:
13:56:1d:8b:52:1d:20:b9:a2:2d:41:bf:1f:64:d9:
6e:36:7c:76:75:40:13:74:f3:e9:79:d9:3d:5d:82:
24:28:ae:bc:90:e9:35:b2:8f:35:f9:23:95:5b:fc:
c0:55:94:59:35:0c:c2:50:84:aa:99:a7:36:f1:65:
a7:6f:cc:d0:e7:b1:b9:5e:73:bc:61:d8:58:4f:79:
4a:44:94:ff:be:17:17:a5:c5:04:34:c2:21:b4:e1:
30:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:AB:15:E4:68:47:76:8E:CB:BF:98:FE:D7:85:2F:4E:AF:7E:77:08
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/jasV5GhHdo7Lv5j-14UvTq9-dwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.154.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:09:12:82:da:40:e7:86:e9:53:0d:dc:56:42:ca:78:22:bc:
11:97:99:5c:fc:98:75:e3:c6:03:48:5e:4e:a7:2c:8c:1f:5e:
9e:cf:59:00:17:f6:95:90:07:eb:ae:c4:61:e4:d3:b2:40:bc:
21:6c:e9:72:cd:06:3c:98:d8:46:6b:dc:9e:52:86:3d:f6:38:
5d:19:7e:bb:cb:96:9b:41:98:76:41:58:bd:69:eb:0a:92:65:
16:24:8d:c9:53:18:04:54:37:50:6b:20:7f:1a:86:b7:76:3d:
e8:61:72:21:66:c8:58:ff:32:39:10:cd:39:5f:47:24:d0:d2:
ef:df:69:43:f6:cf:cb:eb:3e:57:5c:6c:61:c1:e6:84:29:74:
ca:ab:44:ae:48:f9:ea:a8:95:fc:fb:9d:d6:37:c0:c3:11:db:
b7:f0:26:9c:28:6a:93:59:e4:44:67:a5:14:27:ed:c8:74:42:
65:f4:52:6d:4a:ac:dd:1f:6d:d0:0f:c4:c1:7b:29:85:74:f7:
70:cc:71:da:ad:e8:29:d7:a0:fb:95:fc:31:f7:03:2d:7f:8d:
dd:10:e3:b0:30:1a:96:28:43:f1:2c:6f:91:4d:6b:71:5a:da:
0b:bc:e6:b6:09:53:36:f6:f7:d8:0e:b9:ae:c9:31:5c:a0:8e:
3a:25:3f:5e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY7EbhdleT/1oJxzB10wGseAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjQwNDA5MTk1NTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZGFiMTVlNDY4NDc3NjhlY2JiZjk4ZmVkNzg1MmY0ZWFmN2U3NzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncRf0RYCLLh1QKSAKCA5821XiGYP
s+Zes3ODzHmcLF8Dqr5IWeiiamaETaU1l+3KyNxPvEctOT9oXzqBQvrPV0SBXP3w
JYQrsjo967MVAYSF4YGNFnKQr4MLUyvi4mIA27ukR2aUMBhDHvdWK+sddoXg5KtG
CLFGXLRQ6ubShBKSSXBzyTAASjq/a2PNzXW4jvp+KtKwEcKtJkn7PPoKr6jG0xQT
Vh2LUh0guaItQb8fZNluNnx2dUATdPPpedk9XYIkKK68kOk1so81+SOVW/zAVZRZ
NQzCUISqmac28WWnb8zQ57G5XnO8YdhYT3lKRJT/vhcXpcUENMIhtOEw1QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI2rFeRoR3aOy7+Y/teFL06vfncIMB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEvamFzVjVHaEhkbzdMdjVqLTE0VXZUcTktZHdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx
LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw9iaMA0G
CSqGSIb3DQEBCwUAA4IBAQB9CRKC2kDnhulTDdxWQsp4IrwRl5lc/Jh148YDSF5O
pyyMH16ez1kAF/aVkAfrrsRh5NOyQLwhbOlyzQY8mNhGa9yeUoY99jhdGX67y5ab
QZh2QVi9aesKkmUWJI3JUxgEVDdQayB/Goa3dj3oYXIhZshY/zI5EM05X0ck0NLv
32lD9s/L6z5XXGxhweaEKXTKq0SuSPnqqJX8+53WN8DDEdu38CacKGqTWeREZ6UU
J+3IdEJl9FJtSqzdH23QD8TBeymFdPdwzHHaregp16D7lfwx9wMtf43dEOOwMBqW
KEPxLG+RTWtxWtoLvOa2CVM29vfYDrmuyTFcoI46JT9e
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:08 2024 by rpki-client on console-fra.rpki-client.org