Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/JgiRvlVbe65DdoJOqCFbwZbyJMk.roa
File: JgiRvlVbe65DdoJOqCFbwZbyJMk.roa (raw, json)
Hash identifier: jBoXyVWznjXHd7nHxvOXQ3u/ip84q0EsNFxkd2q2t4M=
Subject key identifier: 26:08:91:BE:55:5B:7B:AE:43:76:82:4E:A8:21:5B:C1:96:F2:24:C9
Certificate issuer: /CN=631aca5f9a1dcfa19704d1f0377f1b9fe9145e08
Certificate serial: 018746C6F25721C04395C7E8E3DA7C655526
Authority key identifier: 63:1A:CA:5F:9A:1D:CF:A1:97:04:D1:F0:37:7F:1B:9F:E9:14:5E:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/JgiRvlVbe65DdoJOqCFbwZbyJMk.roa
Signing time: Mon 03 Apr 2023 11:00:55 +0000
ROA not before: Mon 03 Apr 2023 11:00:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199081
IP address blocks: 178.239.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:46:c6:f2:57:21:c0:43:95:c7:e8:e3:da:7c:65:55:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=631aca5f9a1dcfa19704d1f0377f1b9fe9145e08
Validity
Not Before: Apr 3 11:00:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=260891be555b7bae4376824ea8215bc196f224c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ec:dd:3b:b8:45:a4:f2:35:c7:f3:22:c0:b3:
2d:20:7a:c6:f4:e8:84:2e:f0:b7:06:de:18:10:02:
7b:3a:45:35:18:2b:d9:9c:ab:8b:27:23:ca:6c:77:
90:b9:bb:35:d6:6b:f2:3e:3f:41:c6:db:20:8f:14:
a8:c6:17:10:c3:77:a4:a4:98:52:fd:a6:3e:43:90:
8c:0a:bd:a2:e7:27:fe:c6:3b:5c:04:9b:d9:81:46:
c0:80:73:39:95:3d:5d:6c:41:c6:70:e8:ec:50:19:
04:fd:db:27:05:f0:a3:6d:df:1e:e0:53:09:a9:56:
22:77:33:fd:29:f7:4e:13:0a:57:98:36:16:d1:47:
3d:41:1f:ef:d7:47:3c:98:20:ad:c2:5c:b8:0b:65:
83:00:45:6a:6b:5e:6b:a1:86:ef:bf:39:45:4a:c7:
4f:cc:da:64:6d:5e:19:d6:fc:d8:5b:2f:42:d6:0a:
25:df:76:bb:ce:4e:1c:dd:23:ea:87:74:2b:3e:52:
f8:23:d2:36:90:04:78:48:8e:e9:f4:98:cd:c2:ed:
60:89:65:5b:34:f8:db:ac:70:08:a8:21:e8:8f:9d:
36:4e:af:3f:f1:56:3b:b6:8e:ea:f1:bd:d5:88:fe:
f4:51:4f:20:40:d0:58:a7:f7:7d:87:13:e8:a4:85:
b2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:08:91:BE:55:5B:7B:AE:43:76:82:4E:A8:21:5B:C1:96:F2:24:C9
X509v3 Authority Key Identifier:
keyid:63:1A:CA:5F:9A:1D:CF:A1:97:04:D1:F0:37:7F:1B:9F:E9:14:5E:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/JgiRvlVbe65DdoJOqCFbwZbyJMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.25.0/24
Signature Algorithm: sha256WithRSAEncryption
56:6f:52:a1:8d:c1:c4:7a:43:17:bc:72:c5:86:22:eb:58:ef:
0a:97:33:59:a4:13:75:e3:a6:37:9f:ea:ea:6d:b2:00:eb:71:
90:a8:e3:8a:66:60:c8:a1:fd:7a:bd:11:13:39:11:15:20:2e:
ff:c9:c3:1e:a2:d6:7e:23:a4:6c:ff:b0:c9:a3:da:c1:35:8e:
37:a2:dc:14:47:e2:1a:d9:0f:33:dc:2a:49:92:1a:95:07:b7:
24:36:27:a7:4b:0f:d2:8e:9c:ce:d7:bc:8e:00:2a:d1:fe:c8:
2e:f6:cd:59:78:3b:b2:01:65:41:6a:a1:c0:71:85:89:aa:5e:
35:c6:be:0d:10:6d:78:53:f0:59:a9:2e:0e:5d:33:1f:f6:b0:
18:41:4f:69:a4:24:df:eb:8c:bf:ac:ca:07:14:30:7a:1d:69:
c8:2a:66:85:c4:63:86:24:46:ca:88:47:f9:dd:b4:c8:65:ef:
0e:f1:d8:40:e9:cb:6f:c9:f0:cd:69:b8:8a:f8:2b:ea:81:b7:
62:06:77:96:9d:06:4a:ae:13:00:bf:b4:b1:cb:fa:89:77:18:
f3:4a:a1:39:0b:b5:c2:b5:62:03:be:0f:af:63:d2:cf:87:b4:
d6:01:f1:ce:d7:81:a5:90:fc:58:fb:60:96:c7:ce:c2:2e:ce:
70:9a:b8:42
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYdGxvJXIcBDlcfo49p8ZVUmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMWFjYTVmOWExZGNmYTE5NzA0ZDFmMDM3N2YxYjlmZTkx
NDVlMDgwHhcNMjMwNDAzMTEwMDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjA4OTFiZTU1NWI3YmFlNDM3NjgyNGVhODIxNWJjMTk2ZjIyNGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArezdO7hFpPI1x/MiwLMtIHrG9OiE
LvC3Bt4YEAJ7OkU1GCvZnKuLJyPKbHeQubs11mvyPj9BxtsgjxSoxhcQw3ekpJhS
/aY+Q5CMCr2i5yf+xjtcBJvZgUbAgHM5lT1dbEHGcOjsUBkE/dsnBfCjbd8e4FMJ
qVYidzP9KfdOEwpXmDYW0Uc9QR/v10c8mCCtwly4C2WDAEVqa15roYbvvzlFSsdP
zNpkbV4Z1vzYWy9C1gol33a7zk4c3SPqh3QrPlL4I9I2kAR4SI7p9JjNwu1giWVb
NPjbrHAIqCHoj502Tq8/8VY7to7q8b3ViP70UU8gQNBYp/d9hxPopIWyVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCYIkb5VW3uuQ3aCTqghW8GW8iTJMB8GA1UdIwQY
MBaAFGMayl+aHc+hlwTR8Dd/G5/pFF4IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXhyS1g1b2R6NkdYQk5Id04zOGJuLWtVWGdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mMDc3NWMtZGEyZS00ZDdkLTgwMTkt
ZDJiMDJhNDAzYzdiLzEvSmdpUnZsVmJlNjVEZG9KT3FDRmJ3WmJ5Sk1rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9mMDc3NWMtZGEyZS00ZDdkLTgwMTktZDJiMDJhNDAzYzdi
LzEvWXhyS1g1b2R6NkdYQk5Id04zOGJuLWtVWGdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsu8ZMA0G
CSqGSIb3DQEBCwUAA4IBAQBWb1KhjcHEekMXvHLFhiLrWO8KlzNZpBN146Y3n+rq
bbIA63GQqOOKZmDIof16vRETOREVIC7/ycMeotZ+I6Rs/7DJo9rBNY43otwUR+Ia
2Q8z3CpJkhqVB7ckNienSw/SjpzO17yOACrR/sgu9s1ZeDuyAWVBaqHAcYWJql41
xr4NEG14U/BZqS4OXTMf9rAYQU9ppCTf64y/rMoHFDB6HWnIKmaFxGOGJEbKiEf5
3bTIZe8O8dhA6ctvyfDNabiK+CvqgbdiBneWnQZKrhMAv7Sxy/qJdxjzSqE5C7XC
tWIDvg+vY9LPh7TWAfHO14GlkPxY+2CWx87CLs5wmrhC
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:57 2024 by rpki-client on console-fra.rpki-client.org