Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/jynkC68viUom2i5TuVxXna9Drus.roa
File: jynkC68viUom2i5TuVxXna9Drus.roa (raw, json)
Hash identifier: 5rlbaoXiQnNOTZA0TsQniPX3L4eMjLLLH1K4uY3nUsw=
Subject key identifier: 8F:29:E4:0B:AF:2F:89:4A:26:DA:2E:53:B9:5C:57:9D:AF:43:AE:EB
Certificate issuer: /CN=f73cdc6751d7c59073e4b706402d3691af09086f
Certificate serial: 01856E82058FBE5523983756C75586AA852A
Authority key identifier: F7:3C:DC:67:51:D7:C5:90:73:E4:B7:06:40:2D:36:91:AF:09:08:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zzcZ1HXxZBz5LcGQC02ka8JCG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/jynkC68viUom2i5TuVxXna9Drus.roa
Signing time: Sun 01 Jan 2023 18:04:52 +0000
ROA not before: Sun 01 Jan 2023 18:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39699
IP address blocks: 62.121.32.0/19 maxlen: 19
86.60.128.0/17 maxlen: 17
83.148.192.0/18 maxlen: 18
185.132.104.0/22 maxlen: 22
2a03:50a0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:82:05:8f:be:55:23:98:37:56:c7:55:86:aa:85:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f73cdc6751d7c59073e4b706402d3691af09086f
Validity
Not Before: Jan 1 18:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f29e40baf2f894a26da2e53b95c579daf43aeeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:14:ac:cd:3e:5f:a4:a3:23:57:5b:ed:7d:29:
22:ad:3b:5e:03:06:9d:79:19:0a:a2:01:ec:76:27:
a7:44:c6:fe:5e:d0:d1:65:d6:96:94:99:34:dc:37:
18:12:71:f2:45:a0:cb:6d:9d:d9:05:60:68:75:c7:
4d:a2:2f:50:d4:21:63:7e:26:d8:39:6e:3e:eb:87:
fa:da:dd:04:5b:9c:10:d4:06:d0:e6:7b:b2:e2:e1:
60:8c:2d:68:ce:60:6a:bc:a7:58:79:59:15:40:46:
2d:fa:02:52:64:1b:b9:3f:07:07:3c:7e:91:2f:08:
83:48:99:14:be:41:52:1b:11:13:1d:1b:11:a3:d0:
b8:cf:da:99:46:05:12:31:5f:f5:84:f4:44:51:72:
68:dd:57:a3:b9:ae:db:e0:53:68:66:b2:8c:60:b3:
d7:0b:9e:a5:a6:4f:b5:89:65:8b:88:45:a0:67:5c:
8a:3f:dd:7c:8b:77:e6:ba:87:d7:9b:95:a6:f8:8b:
42:54:01:2b:89:df:55:f7:94:fa:c7:52:4a:62:f9:
2c:c2:b5:c7:98:a2:56:f3:21:6e:27:3d:b2:aa:1a:
72:58:72:f0:71:01:b8:a7:dc:8a:87:14:f4:30:8e:
ce:e2:c0:b9:10:ca:aa:c9:61:b4:93:c4:cd:c8:39:
ab:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:29:E4:0B:AF:2F:89:4A:26:DA:2E:53:B9:5C:57:9D:AF:43:AE:EB
X509v3 Authority Key Identifier:
keyid:F7:3C:DC:67:51:D7:C5:90:73:E4:B7:06:40:2D:36:91:AF:09:08:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zzcZ1HXxZBz5LcGQC02ka8JCG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/jynkC68viUom2i5TuVxXna9Drus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.121.32.0/19
83.148.192.0/18
86.60.128.0/17
185.132.104.0/22
IPv6:
2a03:50a0::/32
Signature Algorithm: sha256WithRSAEncryption
51:46:23:72:a0:be:7f:8f:75:e4:83:8b:1d:0d:ab:28:60:c1:
01:ad:0d:7d:8b:d8:fe:73:f4:38:25:20:19:f2:3e:4c:88:73:
43:fb:83:6f:d1:09:b5:dd:6c:2c:04:b6:8d:81:93:41:bf:04:
88:aa:3f:73:c6:55:c7:e0:42:01:10:17:b1:a2:d9:5e:25:a7:
e0:74:8e:3f:86:f5:17:96:71:2b:31:90:a8:fa:0f:74:1f:c4:
3a:8c:b4:21:19:ee:02:97:b0:ea:c6:a8:20:c2:bf:c2:d1:07:
e8:ff:db:c8:a9:a6:f6:a3:e2:00:fd:ca:67:30:ab:ea:f6:5b:
a0:2b:09:db:0f:64:b1:6d:06:d7:e6:69:fb:fb:fd:54:55:96:
6d:99:dd:fb:d6:4f:4e:74:68:bc:eb:48:4a:68:51:2d:88:82:
1e:43:38:4f:e9:b2:3b:8e:af:8c:28:7f:6a:c6:66:59:00:cd:
06:40:de:9c:9a:53:b2:7e:00:63:a5:06:76:a1:c2:44:6f:72:
ff:b3:40:26:27:8b:a9:b2:5f:11:86:96:85:8c:26:df:96:f2:
d6:b3:0c:76:bb:c2:af:35:ce:58:80:49:86:43:46:a6:5a:34:
ca:ca:32:f2:41:5c:17:c6:46:62:b0:9c:d4:06:6e:eb:54:f8:
88:c1:de:3c
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYVuggWPvlUjmDdWx1WGqoUqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3M2NkYzY3NTFkN2M1OTA3M2U0YjcwNjQwMmQzNjkxYWYw
OTA4NmYwHhcNMjMwMTAxMTgwNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjI5ZTQwYmFmMmY4OTRhMjZkYTJlNTNiOTVjNTc5ZGFmNDNhZWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBSszT5fpKMjV1vtfSkirTteAwad
eRkKogHsdienRMb+XtDRZdaWlJk03DcYEnHyRaDLbZ3ZBWBodcdNoi9Q1CFjfibY
OW4+64f62t0EW5wQ1AbQ5nuy4uFgjC1ozmBqvKdYeVkVQEYt+gJSZBu5PwcHPH6R
LwiDSJkUvkFSGxETHRsRo9C4z9qZRgUSMV/1hPREUXJo3Vejua7b4FNoZrKMYLPX
C56lpk+1iWWLiEWgZ1yKP918i3fmuofXm5Wm+ItCVAErid9V95T6x1JKYvkswrXH
mKJW8yFuJz2yqhpyWHLwcQG4p9yKhxT0MI7O4sC5EMqqyWG0k8TNyDmrrQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFI8p5AuvL4lKJtouU7lcV52vQ67rMB8GA1UdIwQY
MBaAFPc83GdR18WQc+S3BkAtNpGvCQhvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXp6Y1oxSFh4WkJ6NUxjR1FDMDJrYThKQ0c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS84NTUwMDItZDgyMy00MWZlLThmOWEt
NzE4ZmQxOTVjNWViLzEvanlua0M2OHZpVW9tMmk1VHVWeFhuYTlEcnVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS84NTUwMDItZDgyMy00MWZlLThmOWEtNzE4ZmQxOTVjNWVi
LzEvOXp6Y1oxSFh4WkJ6NUxjR1FDMDJrYThKQ0c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQFPnkgAwQG
U5TAAwQHVjyAAwQCuYRoMA0EAgACMAcDBQAqA1CgMA0GCSqGSIb3DQEBCwUAA4IB
AQBRRiNyoL5/j3Xkg4sdDasoYMEBrQ19i9j+c/Q4JSAZ8j5MiHND+4Nv0Qm13Wws
BLaNgZNBvwSIqj9zxlXH4EIBEBexotleJafgdI4/hvUXlnErMZCo+g90H8Q6jLQh
Ge4Cl7Dqxqggwr/C0Qfo/9vIqab2o+IA/cpnMKvq9lugKwnbD2SxbQbX5mn7+/1U
VZZtmd371k9OdGi860hKaFEtiIIeQzhP6bI7jq+MKH9qxmZZAM0GQN6cmlOyfgBj
pQZ2ocJEb3L/s0AmJ4upsl8RhpaFjCbflvLWswx2u8KvNc5YgEmGQ0amWjTKyjLy
QVwXxkZisJzUBm7rVPiIwd48
-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:29 2024 by rpki-client on console-ams.rpki-client.org