Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/jet6jwuXLfNghlbXPcyJDFpAS0o.roa
File: jet6jwuXLfNghlbXPcyJDFpAS0o.roa (raw, json)
Hash identifier: guVTHiB++k7+ZlO6pK2HIpZQrPi0uz7SD612Ytxrg9c=
Subject key identifier: 8D:EB:7A:8F:0B:97:2D:F3:60:86:56:D7:3D:CC:89:0C:5A:40:4B:4A
Certificate issuer: /CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Certificate serial: 01857295CA6C4D4586CB4622B0EF1510DA39
Authority key identifier: 50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/jet6jwuXLfNghlbXPcyJDFpAS0o.roa
Signing time: Mon 02 Jan 2023 13:04:57 +0000
ROA not before: Mon 02 Jan 2023 13:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 140403
IP address blocks: 81.199.96.0/23 maxlen: 24
81.199.98.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 20 Oct 2023 05:10:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:95:ca:6c:4d:45:86:cb:46:22:b0:ef:15:10:da:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Validity
Not Before: Jan 2 13:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8deb7a8f0b972df3608656d73dcc890c5a404b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:58:72:2d:5e:6f:9f:60:61:ee:aa:40:80:df:
70:23:e1:83:e8:37:4d:a9:13:5d:b4:08:0f:16:cc:
29:aa:0b:fe:06:d0:b4:43:72:73:2a:98:44:b4:8b:
9b:02:a9:a6:10:6a:b5:1d:d9:f4:89:ae:26:86:f6:
1b:be:2c:7a:0a:ff:44:59:cb:c9:d5:32:38:e3:a5:
84:15:70:f2:f0:11:2c:e4:73:55:ea:b1:6f:7d:21:
87:f5:7f:44:93:db:d4:c2:22:56:ae:1a:51:76:68:
7e:33:a4:9d:f6:87:22:19:82:98:86:84:41:51:fa:
db:08:b5:64:f6:6d:01:82:0d:01:58:85:f2:9a:f9:
43:01:6d:15:06:2c:3e:ec:76:7b:ff:e5:54:87:ac:
01:01:69:5d:31:a9:8a:ce:23:d8:53:a1:6b:18:2a:
1e:d0:68:5f:ba:a6:cf:ed:a6:5c:d3:8d:be:e7:7c:
4c:7a:13:d8:44:91:13:54:85:b9:35:e4:3f:05:fc:
a3:99:29:72:e4:32:5f:09:94:e2:60:78:d1:45:d6:
bd:60:9a:b8:ff:b3:d2:88:ac:5b:0e:a9:85:36:0c:
5c:a1:3d:69:1f:18:74:56:36:5e:05:af:3b:f2:8a:
31:98:04:64:29:6d:15:b6:f8:d3:49:65:d0:91:fe:
28:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:EB:7A:8F:0B:97:2D:F3:60:86:56:D7:3D:CC:89:0C:5A:40:4B:4A
X509v3 Authority Key Identifier:
keyid:50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/jet6jwuXLfNghlbXPcyJDFpAS0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.199.96.0/22
Signature Algorithm: sha256WithRSAEncryption
19:a7:f6:56:de:40:1e:3b:80:45:86:3a:e4:5b:6c:1a:60:4a:
f6:69:7f:a3:bf:f7:74:1b:32:77:44:fe:2e:88:70:34:ae:20:
3e:55:35:87:16:eb:1a:ae:93:69:f1:bf:a4:48:7c:25:de:43:
30:67:e5:14:79:7d:93:c5:1d:7d:93:08:e9:d2:a2:89:e4:c4:
96:fd:b4:7b:c0:d1:40:27:e5:bf:68:0f:69:c9:d3:7c:9d:fd:
03:aa:82:a2:3d:f2:bc:87:e3:ea:5c:bb:cf:ac:48:01:13:59:
9e:be:93:f8:f6:46:61:97:85:38:ea:cb:be:95:a9:35:18:d8:
5f:a4:3e:62:75:8d:a5:c4:af:97:c8:18:f6:46:36:da:9d:a7:
07:24:dd:a9:2b:4d:de:9e:aa:22:a5:25:12:e3:79:2b:dc:41:
1e:fd:a4:95:30:5f:87:c2:5a:20:49:a2:90:22:5c:c1:59:79:
a9:72:6d:c5:7e:8e:53:04:b5:ff:b5:41:aa:7c:94:55:a8:98:
13:81:43:ab:dd:60:08:46:14:4c:69:7c:a5:b4:1a:5c:7f:65:
87:93:e0:8e:28:a2:78:7e:5b:f3:84:b3:72:f7:9d:a9:e1:c4:
0e:1c:20:66:de:ed:54:f8:c8:ea:68:80:e5:e9:3b:6b:d3:d2:
67:1c:ef:63
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVylcpsTUWGy0YisO8VENo5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwMTgyYmVlOWFhMDEwYzFmZmQyZDgwNGY2YWE3YjE0YmRk
YjkxZjcwHhcNMjMwMTAyMTMwNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZGViN2E4ZjBiOTcyZGYzNjA4NjU2ZDczZGNjODkwYzVhNDA0YjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFhyLV5vn2Bh7qpAgN9wI+GD6DdN
qRNdtAgPFswpqgv+BtC0Q3JzKphEtIubAqmmEGq1Hdn0ia4mhvYbvix6Cv9EWcvJ
1TI446WEFXDy8BEs5HNV6rFvfSGH9X9Ek9vUwiJWrhpRdmh+M6Sd9ociGYKYhoRB
UfrbCLVk9m0Bgg0BWIXymvlDAW0VBiw+7HZ7/+VUh6wBAWldMamKziPYU6FrGCoe
0GhfuqbP7aZc042+53xMehPYRJETVIW5NeQ/BfyjmSly5DJfCZTiYHjRRda9YJq4
/7PSiKxbDqmFNgxcoT1pHxh0VjZeBa878ooxmARkKW0VtvjTSWXQkf4oeQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI3reo8Lly3zYIZW1z3MiQxaQEtKMB8GA1UdIwQY
MBaAFFAYK+6aoBDB/9LYBPaqexS925H3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9iZDQ1NjYtYWMyNy00NmY4LTk0Zjkt
MTlkMWJiNjFkOWE3LzEvamV0Nmp3dVhMZk5naGxiWFBjeUpERnBBUzBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9iZDQ1NjYtYWMyNy00NmY4LTk0ZjktMTlkMWJiNjFkOWE3
LzEvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCUcdgMA0G
CSqGSIb3DQEBCwUAA4IBAQAZp/ZW3kAeO4BFhjrkW2waYEr2aX+jv/d0GzJ3RP4u
iHA0riA+VTWHFusarpNp8b+kSHwl3kMwZ+UUeX2TxR19kwjp0qKJ5MSW/bR7wNFA
J+W/aA9pydN8nf0DqoKiPfK8h+PqXLvPrEgBE1mevpP49kZhl4U46su+lak1GNhf
pD5idY2lxK+XyBj2RjbanacHJN2pK03enqoipSUS43kr3EEe/aSVMF+HwlogSaKQ
IlzBWXmpcm3Ffo5TBLX/tUGqfJRVqJgTgUOr3WAIRhRMaXyltBpcf2WHk+COKKJ4
flvzhLNy952p4cQOHCBm3u1U+MjqaIDl6Ttr09JnHO9j
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:50 2024 by rpki-client on console-ams.rpki-client.org