Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/jms0WlMgxxpYOOr75_ymZ8zvs-8.roa
File: jms0WlMgxxpYOOr75_ymZ8zvs-8.roa (raw, json)
Hash identifier: 4DAppCmE4RH4MnPBTZ1viYgOnoSfDKDuOoJCNXWqz8c=
Subject key identifier: 8E:6B:34:5A:53:20:C7:1A:58:38:EA:FB:E7:FC:A6:67:CC:EF:B3:EF
Certificate issuer: /CN=df798581e73704ee38c9be15e72370f176c60311
Certificate serial: 0185724C786F9DF1D9A794C93408EB976B61
Authority key identifier: DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/jms0WlMgxxpYOOr75_ymZ8zvs-8.roa
Signing time: Mon 02 Jan 2023 11:44:52 +0000
ROA not before: Mon 02 Jan 2023 11:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24631
IP address blocks: 185.128.83.0/24 maxlen: 24
185.128.81.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:4c:78:6f:9d:f1:d9:a7:94:c9:34:08:eb:97:6b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df798581e73704ee38c9be15e72370f176c60311
Validity
Not Before: Jan 2 11:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e6b345a5320c71a5838eafbe7fca667ccefb3ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a2:87:21:a6:fa:54:a1:c6:a8:5a:80:8b:ee:
63:11:00:ce:96:7a:75:43:36:40:b1:9d:0c:99:f1:
b2:12:84:f5:d7:e0:e6:3c:83:c0:39:8d:2c:1f:40:
20:0b:89:73:02:97:00:81:35:d9:31:ef:36:a0:ca:
24:ec:43:3f:0d:99:a5:eb:e8:5c:93:7e:97:3b:15:
ee:27:75:04:f3:02:ea:76:84:3d:c5:dd:29:1d:8e:
33:9f:21:59:37:0f:ca:b4:ac:6d:2b:85:0c:64:a6:
09:4d:ed:b8:f5:31:21:c7:60:bb:ab:b0:99:19:ae:
01:28:c0:3a:a1:07:d6:f9:7d:e5:de:75:78:6f:a8:
e7:87:94:f4:30:c2:4a:2d:ad:d1:15:24:6c:b8:1b:
d0:65:84:20:0e:cd:c3:4d:52:77:e9:e7:d1:1e:20:
ba:eb:79:c4:52:21:b3:4d:86:df:25:9f:38:80:49:
8e:7b:f7:62:6d:2c:0b:7b:cd:fe:05:0e:56:d5:d2:
23:2f:a1:5c:43:c6:c6:f1:f1:73:d3:93:7c:5f:8c:
e1:4c:de:e8:96:3d:26:3e:e4:3a:37:c3:aa:c8:40:
da:a5:e7:fa:4d:5e:67:86:d3:8f:0d:ac:e2:0a:10:
0c:aa:84:9a:28:ab:b9:92:46:e6:36:72:e0:a2:39:
0f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:6B:34:5A:53:20:C7:1A:58:38:EA:FB:E7:FC:A6:67:CC:EF:B3:EF
X509v3 Authority Key Identifier:
keyid:DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/jms0WlMgxxpYOOr75_ymZ8zvs-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.81.0/24
185.128.83.0/24
Signature Algorithm: sha256WithRSAEncryption
79:1b:fc:29:c7:81:93:3d:3d:ba:cd:06:a8:53:d1:fe:08:51:
4c:a3:a4:17:bb:62:0f:38:18:96:02:4c:d2:da:10:23:85:8d:
fa:09:f5:eb:b1:13:8d:89:2b:cb:bb:cf:a0:b9:cf:c7:8a:83:
72:be:69:aa:51:84:43:d5:4a:ae:db:28:64:59:23:c7:5a:b5:
68:bf:d7:73:f6:d0:52:6c:2d:26:8c:d3:1b:55:03:b3:45:b3:
29:eb:a6:d1:f3:56:5e:2d:2e:51:ed:35:46:cc:d7:dd:3d:03:
6f:a5:f8:0f:f2:90:68:a7:4e:c3:ec:6c:0a:92:21:c6:8a:30:
ce:4a:c4:7b:a4:0d:c2:8c:77:ff:2d:c3:6c:bc:64:3f:4f:3c:
03:c0:c9:f7:b0:01:73:02:58:4d:de:d2:57:5a:b1:9e:90:88:
91:b7:ec:53:2a:3a:ef:ef:8b:9d:2c:64:10:aa:7b:2b:76:3a:
80:9f:ed:31:d0:94:64:ef:85:a4:a1:be:4e:75:30:45:4d:fb:
53:85:d8:06:44:d0:29:14:af:ae:fd:58:9c:c1:5d:c6:b8:21:
19:1c:fd:d7:56:45:c4:72:3a:8d:63:dc:2b:4f:e2:97:fa:6d:
8d:7e:55:80:2c:82:9b:c2:73:ba:d6:81:b7:af:77:f9:53:d4:
68:f5:c3:cd
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVyTHhvnfHZp5TJNAjrl2thMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmNzk4NTgxZTczNzA0ZWUzOGM5YmUxNWU3MjM3MGYxNzZj
NjAzMTEwHhcNMjMwMTAyMTE0NDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTZiMzQ1YTUzMjBjNzFhNTgzOGVhZmJlN2ZjYTY2N2NjZWZiM2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKKHIab6VKHGqFqAi+5jEQDOlnp1
QzZAsZ0MmfGyEoT11+DmPIPAOY0sH0AgC4lzApcAgTXZMe82oMok7EM/DZml6+hc
k36XOxXuJ3UE8wLqdoQ9xd0pHY4znyFZNw/KtKxtK4UMZKYJTe249TEhx2C7q7CZ
Ga4BKMA6oQfW+X3l3nV4b6jnh5T0MMJKLa3RFSRsuBvQZYQgDs3DTVJ36efRHiC6
63nEUiGzTYbfJZ84gEmOe/dibSwLe83+BQ5W1dIjL6FcQ8bG8fFz05N8X4zhTN7o
lj0mPuQ6N8OqyEDapef6TV5nhtOPDaziChAMqoSaKKu5kkbmNnLgojkP5wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFI5rNFpTIMcaWDjq++f8pmfM77PvMB8GA1UdIwQY
MBaAFN95hYHnNwTuOMm+FecjcPF2xgMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzNtRmdlYzNCTzQ0eWI0VjV5Tnc4WGJHQXhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9hODAwN2ItMDhjZS00YWY0LWEzODMt
YzRhNTJkY2VlMjNkLzEvam1zMFdsTWd4eHBZT09yNzVfeW1aOHp2cy04LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9hODAwN2ItMDhjZS00YWY0LWEzODMtYzRhNTJkY2VlMjNk
LzEvMzNtRmdlYzNCTzQ0eWI0VjV5Tnc4WGJHQXhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuYBRAwQA
uYBTMA0GCSqGSIb3DQEBCwUAA4IBAQB5G/wpx4GTPT26zQaoU9H+CFFMo6QXu2IP
OBiWAkzS2hAjhY36CfXrsRONiSvLu8+guc/HioNyvmmqUYRD1Uqu2yhkWSPHWrVo
v9dz9tBSbC0mjNMbVQOzRbMp66bR81ZeLS5R7TVGzNfdPQNvpfgP8pBop07D7GwK
kiHGijDOSsR7pA3CjHf/LcNsvGQ/TzwDwMn3sAFzAlhN3tJXWrGekIiRt+xTKjrv
74udLGQQqnsrdjqAn+0x0JRk74Wkob5OdTBFTftThdgGRNApFK+u/VicwV3GuCEZ
HP3XVkXEcjqNY9wrT+KX+m2NflWALIKbwnO61oG3r3f5U9Ro9cPN
-----END CERTIFICATE-----
Generated at Mon Jan 1 02:53:57 2024 by rpki-client on console-ams.rpki-client.org