Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/jAX7l8SUL0q_R402KsjzRQy7Zas.roa
File: jAX7l8SUL0q_R402KsjzRQy7Zas.roa (raw, json)
Hash identifier: iGls+CCMaoRWvmoOcfbppUZfOxNYAPi3iQjW8PUSeNY=
Subject key identifier: 8C:05:FB:97:C4:94:2F:4A:BF:47:8D:36:2A:C8:F3:45:0C:BB:65:AB
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018CF90EBA5D40CDA4A5C7580C6B197A3E37
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/jAX7l8SUL0q_R402KsjzRQy7Zas.roa
Signing time: Thu 11 Jan 2024 15:05:41 +0000
ROA not before: Thu 11 Jan 2024 15:05:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207459
IP address blocks: 185.80.196.0/24 maxlen: 24
82.115.13.0/24 maxlen: 24
91.247.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Feb 2024 12:53:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f9:0e:ba:5d:40:cd:a4:a5:c7:58:0c:6b:19:7a:3e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 11 15:05:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c05fb97c4942f4abf478d362ac8f3450cbb65ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6a:4e:cc:f4:5c:35:a6:34:1b:7b:a6:a6:38:
24:64:98:8a:6b:4e:aa:66:8b:af:df:7c:7a:dc:8e:
76:b7:01:cd:aa:d9:82:00:c3:30:b3:2e:21:67:25:
ee:bc:72:3b:84:08:94:55:d5:da:7e:c2:70:a6:37:
44:bd:ad:62:21:51:9d:5a:f6:4d:a4:94:2a:f7:72:
d6:6f:99:c1:4a:18:82:78:d8:38:2c:70:08:b5:72:
dd:9c:4f:a0:4d:9a:39:cf:cf:89:f9:cd:eb:8e:23:
23:29:28:8e:93:70:d5:b6:a8:4f:39:d1:8c:8b:18:
46:59:27:10:64:89:e9:d8:51:39:10:29:ce:ac:88:
86:d4:f6:cb:85:d5:bc:77:ba:82:fc:5a:3e:a9:56:
f3:74:d4:f0:4e:e7:e3:b4:30:37:4e:0a:21:08:c2:
6f:5d:e5:78:0c:f3:86:c4:2c:fc:cb:77:bc:9a:47:
92:35:37:9e:71:aa:c8:a0:7d:bc:ae:77:bd:59:6f:
b9:fd:10:85:bd:99:38:ef:c9:bd:25:2a:bc:b5:2a:
42:1c:69:ef:9f:1b:45:2c:19:00:c4:98:4e:38:de:
fe:83:e5:80:65:61:45:38:35:28:eb:02:21:70:4c:
c0:87:12:ca:1e:32:3c:23:6c:9a:24:f9:07:64:7c:
94:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:05:FB:97:C4:94:2F:4A:BF:47:8D:36:2A:C8:F3:45:0C:BB:65:AB
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/jAX7l8SUL0q_R402KsjzRQy7Zas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.13.0/24
91.247.177.0/24
185.80.196.0/24
Signature Algorithm: sha256WithRSAEncryption
79:d8:66:d2:1e:4d:74:b9:6e:c8:0e:0c:b2:8a:b2:2a:2b:22:
a3:4a:59:d0:06:cb:da:a1:fb:58:bf:47:87:5e:94:bb:3a:5e:
d6:6a:6b:a2:ec:61:61:0a:e2:89:a7:bd:6b:59:eb:5c:80:54:
b6:eb:40:87:ba:22:a7:ed:e6:97:c4:6f:af:c1:eb:5b:29:63:
2a:bd:b6:71:88:e9:86:c8:a7:2e:1e:31:5b:ce:7a:9a:e7:a7:
42:e1:27:d6:ed:42:f7:44:89:0b:61:61:75:45:90:a9:e0:08:
9c:28:09:7c:92:ed:b1:7b:ab:bc:40:74:c9:ee:28:45:11:62:
e4:93:ca:75:7f:2d:9d:7c:be:05:bd:1b:23:8f:a2:50:a1:8c:
dc:ff:8d:db:c0:38:05:38:f8:2c:52:c1:c6:23:2c:16:b3:28:
b9:2c:46:9d:e5:85:85:78:6c:3f:39:b4:65:bf:70:7b:d3:bd:
b3:56:52:b7:ff:b0:9e:30:7e:52:23:f1:b9:67:7d:50:4f:ea:
54:16:0e:f7:8d:7c:a3:2b:69:27:2e:bd:c5:5b:66:f5:b0:d4:
7c:15:03:dd:c2:9f:3d:bd:95:2a:3c:71:ca:08:ae:11:63:10:
d1:70:82:c1:36:95:d9:2e:e0:25:3b:ac:5c:78:05:5f:c8:14:
28:ca:b1:4e
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYz5DrpdQM2kpcdYDGsZej43MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2
NWE0NzgwHhcNMjQwMTExMTUwNTQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzA1ZmI5N2M0OTQyZjRhYmY0NzhkMzYyYWM4ZjM0NTBjYmI2NWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWpOzPRcNaY0G3umpjgkZJiKa06q
Zouv33x63I52twHNqtmCAMMwsy4hZyXuvHI7hAiUVdXafsJwpjdEva1iIVGdWvZN
pJQq93LWb5nBShiCeNg4LHAItXLdnE+gTZo5z8+J+c3rjiMjKSiOk3DVtqhPOdGM
ixhGWScQZInp2FE5ECnOrIiG1PbLhdW8d7qC/Fo+qVbzdNTwTufjtDA3TgohCMJv
XeV4DPOGxCz8y3e8mkeSNTeecarIoH28rne9WW+5/RCFvZk478m9JSq8tSpCHGnv
nxtFLBkAxJhOON7+g+WAZWFFODUo6wIhcEzAhxLKHjI8I2yaJPkHZHyUBwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFIwF+5fElC9Kv0eNNirI80UMu2WrMB8GA1UdIwQY
MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt
ZmUwNjU5MTc2YTU2LzEvakFYN2w4U1VMMHFfUjQwMktzanpSUXk3WmFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2
LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUnMNAwQA
W/exAwQAuVDEMA0GCSqGSIb3DQEBCwUAA4IBAQB52GbSHk10uW7IDgyyirIqKyKj
SlnQBsvaoftYv0eHXpS7Ol7Wamui7GFhCuKJp71rWetcgFS260CHuiKn7eaXxG+v
wetbKWMqvbZxiOmGyKcuHjFbznqa56dC4SfW7UL3RIkLYWF1RZCp4AicKAl8ku2x
e6u8QHTJ7ihFEWLkk8p1fy2dfL4FvRsjj6JQoYzc/43bwDgFOPgsUsHGIywWsyi5
LEad5YWFeGw/ObRlv3B7072zVlK3/7CeMH5SI/G5Z31QT+pUFg73jXyjK2knLr3F
W2b1sNR8FQPdwp89vZUqPHHKCK4RYxDRcILBNpXZLuAlO6xceAVfyBQoyrFO
-----END CERTIFICATE-----
Generated at Fri Feb 16 15:29:05 2024 by rpki-client on console-ams.rpki-client.org