Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/JraIXR08mxoAAZSFlE3X_AqnxKY.roa
File: JraIXR08mxoAAZSFlE3X_AqnxKY.roa (raw, json)
Hash identifier: gHHvPvU9QAtKFv2m/+cGeCx1B3dpx3USfq/NdJKlCsY=
Subject key identifier: 26:B6:88:5D:1D:3C:9B:1A:00:01:94:85:94:4D:D7:FC:0A:A7:C4:A6
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018CC4934035BFA1BE4F3FDFA4AE304E20E7
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/JraIXR08mxoAAZSFlE3X_AqnxKY.roa
Signing time: Mon 01 Jan 2024 10:30:33 +0000
ROA not before: Mon 01 Jan 2024 10:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211014
IP address blocks: 94.176.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Jan 2024 19:39:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:40:35:bf:a1:be:4f:3f:df:a4:ae:30:4e:20:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 1 10:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26b6885d1d3c9b1a00019485944dd7fc0aa7c4a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:94:92:68:96:7f:f1:e5:eb:92:8d:f2:c7:e2:
1c:1f:03:a1:56:eb:8f:83:b7:9a:e8:20:7d:32:11:
df:ec:da:cc:79:0b:93:39:79:20:2a:04:33:fa:24:
74:e5:17:d7:e4:4a:a1:ba:b4:53:19:7c:8f:31:26:
d8:49:41:9a:d2:fb:ba:0b:43:28:00:4c:e9:91:0f:
3f:22:af:26:35:51:df:92:0d:97:33:4f:29:16:e1:
46:e0:83:cb:ff:ea:47:72:d1:79:13:3b:7a:23:ed:
df:4e:a9:a5:bc:0a:0d:c9:a4:20:f2:3d:cd:8f:6c:
55:e5:3b:e0:65:53:50:4f:c4:98:48:d7:78:64:fc:
39:be:77:0c:24:ea:07:a5:66:ab:da:7d:bb:55:0a:
ed:e9:7e:3c:c5:86:01:e1:d1:14:51:05:2d:ea:c0:
e6:4c:40:64:7b:09:a8:81:fe:b4:cf:1c:51:d4:90:
4f:ef:8a:76:e9:d4:65:1e:63:5a:ee:c1:e3:94:8f:
ab:35:8b:44:c5:dd:91:d4:72:19:15:83:91:bf:93:
83:5e:90:19:ac:4e:17:f6:e5:dd:9c:dd:57:51:6c:
c5:a7:0f:95:b2:b2:c0:8b:f4:c9:cc:de:52:7a:94:
b2:e4:e9:05:d5:90:b8:50:b2:02:1d:1d:04:ca:60:
43:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B6:88:5D:1D:3C:9B:1A:00:01:94:85:94:4D:D7:FC:0A:A7:C4:A6
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/JraIXR08mxoAAZSFlE3X_AqnxKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.176.215.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:d0:4d:ae:b7:91:33:02:df:b0:2b:7a:bf:e8:9a:c9:33:6a:
6e:51:6c:ba:16:e2:e9:cf:2b:e3:cc:e2:1d:a3:59:04:54:6a:
c1:74:f9:9b:e3:4f:a4:55:3c:6f:bc:02:45:cb:e5:b2:48:f5:
dd:ef:23:f0:88:ea:40:06:45:b8:65:2d:de:b5:ed:55:9f:0d:
84:a6:51:7e:0f:69:9f:b0:99:04:fa:41:19:2b:39:ad:58:7e:
99:e5:0b:04:ba:ad:9b:2a:ac:86:68:15:ca:48:45:66:09:e6:
17:95:f3:38:06:b3:ae:9a:15:bd:04:08:23:78:d3:73:7d:67:
09:8e:e3:5d:a3:66:e9:05:e3:60:3a:4e:3b:19:23:71:b2:a0:
7b:d6:38:29:67:be:2a:a8:f3:b2:96:c9:82:63:e2:2f:fa:d5:
59:6a:26:ba:4a:81:58:de:52:17:70:8f:78:16:01:f0:c8:76:
8d:3f:a9:f5:8c:65:a4:39:5b:ee:06:94:18:08:01:68:6c:fc:
e3:53:35:66:65:b3:0b:74:b9:66:29:44:27:58:94:74:a1:c6:
63:63:4a:fa:e0:9b:87:80:3c:c4:e0:92:95:38:7f:4e:ad:e5:
a2:4f:71:ac:29:c0:2e:b3:1e:8e:b4:5b:ec:46:82:f7:ae:8f:
bb:a8:fb:04
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEk0A1v6G+Tz/fpK4wTiDnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjQwMTAxMTAzMDMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNmI2ODg1ZDFkM2M5YjFhMDAwMTk0ODU5NDRkZDdmYzBhYTdjNGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpSSaJZ/8eXrko3yx+IcHwOhVuuP
g7ea6CB9MhHf7NrMeQuTOXkgKgQz+iR05RfX5EqhurRTGXyPMSbYSUGa0vu6C0Mo
AEzpkQ8/Iq8mNVHfkg2XM08pFuFG4IPL/+pHctF5Ezt6I+3fTqmlvAoNyaQg8j3N
j2xV5TvgZVNQT8SYSNd4ZPw5vncMJOoHpWar2n27VQrt6X48xYYB4dEUUQUt6sDm
TEBkewmogf60zxxR1JBP74p26dRlHmNa7sHjlI+rNYtExd2R1HIZFYORv5ODXpAZ
rE4X9uXdnN1XUWzFpw+VsrLAi/TJzN5SepSy5OkF1ZC4ULICHR0EymBDmQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCa2iF0dPJsaAAGUhZRN1/wKp8SmMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvSnJhSVhSMDhteG9BQVpTRmxFM1hfQXFueEtZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXrDXMA0G
CSqGSIb3DQEBCwUAA4IBAQA60E2ut5EzAt+wK3q/6JrJM2puUWy6FuLpzyvjzOId
o1kEVGrBdPmb40+kVTxvvAJFy+WySPXd7yPwiOpABkW4ZS3ete1Vnw2EplF+D2mf
sJkE+kEZKzmtWH6Z5QsEuq2bKqyGaBXKSEVmCeYXlfM4BrOumhW9BAgjeNNzfWcJ
juNdo2bpBeNgOk47GSNxsqB71jgpZ74qqPOylsmCY+Iv+tVZaia6SoFY3lIXcI94
FgHwyHaNP6n1jGWkOVvuBpQYCAFobPzjUzVmZbMLdLlmKUQnWJR0ocZjY0r64JuH
gDzE4JKVOH9OreWiT3GsKcAusx6OtFvsRoL3ro+7qPsE
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:12 2024 by rpki-client on console-ams.rpki-client.org