Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/jtv5ZZjsu72OscmTms0tbzEWQ-8.roa
File: jtv5ZZjsu72OscmTms0tbzEWQ-8.roa (raw, json)
Hash identifier: VuBEk+qPZCaHp7KuraFsU39lyO2rz+LDgN2ZgWLrZqY=
Subject key identifier: 8E:DB:F9:65:98:EC:BB:BD:8E:B1:C9:93:9A:CD:2D:6F:31:16:43:EF
Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial: 01874AE59DD420A656F3FC89FBD5C3C7A026
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/jtv5ZZjsu72OscmTms0tbzEWQ-8.roa
Signing time: Tue 04 Apr 2023 06:12:54 +0000
ROA not before: Tue 04 Apr 2023 06:12:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43782
IP address blocks: 109.74.208.0/20 maxlen: 32
185.43.84.0/23 maxlen: 32
164.177.176.0/21 maxlen: 32
79.132.96.0/19 maxlen: 32
2a00:1138::/32 maxlen: 128
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4a:e5:9d:d4:20:a6:56:f3:fc:89:fb:d5:c3:c7:a0:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
Validity
Not Before: Apr 4 06:12:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8edbf96598ecbbbd8eb1c9939acd2d6f311643ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0c:8a:d1:bc:3b:2d:5a:46:42:19:2f:ea:d7:
cc:df:21:61:45:87:28:fa:0d:9b:36:68:9c:a6:47:
8a:2d:17:00:7b:9c:66:a9:a2:3a:30:af:78:2c:dc:
50:90:4c:65:ba:f0:4e:a7:0a:35:e4:02:96:54:80:
20:2f:00:05:5d:2f:24:6a:4e:58:77:28:8b:dc:51:
60:6b:91:fd:2b:86:e3:74:b8:88:97:1d:bb:97:df:
3c:a8:10:52:70:4b:8d:54:4d:70:3c:4e:20:a6:3f:
3b:18:19:04:84:77:0a:c4:15:f5:77:d4:6f:07:73:
da:31:2a:74:6a:d3:75:40:7e:73:05:a0:44:a7:83:
7b:22:b2:e8:8d:62:5c:41:4a:d1:31:01:77:a0:be:
c0:d4:46:5f:4a:85:4a:a7:45:88:7b:c8:9e:86:bb:
17:4d:ee:a4:61:cd:1a:84:af:11:71:df:df:34:f1:
90:f6:72:49:6e:9f:c7:b7:ae:ce:fc:a7:6c:28:c6:
07:23:48:b4:6d:e5:3a:99:14:72:6b:bb:3f:64:cf:
09:06:f2:b2:04:54:0b:93:cf:b6:26:74:dc:f9:2e:
5f:68:54:6e:cb:b6:ad:fb:ac:a8:d6:bc:61:36:3c:
ed:5a:24:54:bc:69:06:f7:69:d3:29:aa:72:df:f0:
15:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:DB:F9:65:98:EC:BB:BD:8E:B1:C9:93:9A:CD:2D:6F:31:16:43:EF
X509v3 Authority Key Identifier:
keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/jtv5ZZjsu72OscmTms0tbzEWQ-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.132.96.0/19
109.74.208.0/20
164.177.176.0/21
185.43.84.0/23
IPv6:
2a00:1138::/32
Signature Algorithm: sha256WithRSAEncryption
72:6a:04:b8:ea:26:a7:b5:55:eb:2f:61:e9:6a:f2:28:4b:db:
23:c1:13:3a:ca:9f:3a:45:64:78:6d:47:4e:95:b8:92:b8:7e:
17:a3:80:b6:8b:74:7d:48:17:57:4f:44:32:5a:51:36:b9:bf:
1d:5f:75:11:99:dd:4c:8e:62:03:98:f9:4e:c7:12:6c:a9:d6:
de:60:5d:b2:8e:fd:b7:30:12:10:57:53:78:44:ca:af:df:6e:
52:6b:17:e4:c8:da:74:6b:2e:fe:2b:53:d2:c3:45:43:23:c1:
80:b6:7f:ce:08:d3:ac:e6:f6:f2:00:48:f6:bd:3b:a1:2c:93:
83:f4:62:b1:44:61:84:96:80:57:24:35:1f:c4:1b:2f:0b:86:
01:48:85:81:2d:fd:39:1d:47:c3:47:53:13:89:39:d7:bf:56:
4b:83:b1:3b:dd:ef:a6:a5:ed:62:31:fa:a6:63:4f:ce:5d:9a:
38:3e:7b:8f:2f:4b:55:5c:89:17:64:5b:09:32:c7:af:ff:73:
64:b0:3c:f7:f4:c9:59:2c:a4:01:a0:3a:29:61:9c:4b:2b:33:
3b:71:b6:bf:e4:5b:c1:8e:b0:6f:6b:61:e4:9e:09:28:62:2e:
6b:db:36:f8:98:6c:d8:db:9b:4e:c2:2e:ee:15:41:ba:b2:8a:
70:bc:5a:5a
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYdK5Z3UIKZW8/yJ+9XDx6AmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkYWM4MzBjY2FhNzQ3ODNkZDk2MWZhYjI0MWEyMjhkN2Nj
NmY4MDgwHhcNMjMwNDA0MDYxMjU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZWRiZjk2NTk4ZWNiYmJkOGViMWM5OTM5YWNkMmQ2ZjMxMTY0M2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAyK0bw7LVpGQhkv6tfM3yFhRYco
+g2bNmicpkeKLRcAe5xmqaI6MK94LNxQkExluvBOpwo15AKWVIAgLwAFXS8kak5Y
dyiL3FFga5H9K4bjdLiIlx27l988qBBScEuNVE1wPE4gpj87GBkEhHcKxBX1d9Rv
B3PaMSp0atN1QH5zBaBEp4N7IrLojWJcQUrRMQF3oL7A1EZfSoVKp0WIe8iehrsX
Te6kYc0ahK8Rcd/fNPGQ9nJJbp/Ht67O/KdsKMYHI0i0beU6mRRya7s/ZM8JBvKy
BFQLk8+2JnTc+S5faFRuy7at+6yo1rxhNjztWiRUvGkG92nTKapy3/AVowIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFI7b+WWY7Lu9jrHJk5rNLW8xFkPvMB8GA1UdIwQY
MBaAFK2sgwzKp0eD3ZYfqyQaIo18xvgIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zMjVjOGQtZDM2OC00ZWVlLTljYTgt
OTI5ZjdkNjM1ZjRiLzEvanR2NVpaanN1NzJPc2NtVG1zMHRiekVXUS04LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8zMjVjOGQtZDM2OC00ZWVlLTljYTgtOTI5ZjdkNjM1ZjRi
LzEvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQFT4RgAwQE
bUrQAwQDpLGwAwQBuStUMA0EAgACMAcDBQAqABE4MA0GCSqGSIb3DQEBCwUAA4IB
AQByagS46iantVXrL2HpavIoS9sjwRM6yp86RWR4bUdOlbiSuH4Xo4C2i3R9SBdX
T0QyWlE2ub8dX3URmd1MjmIDmPlOxxJsqdbeYF2yjv23MBIQV1N4RMqv325Saxfk
yNp0ay7+K1PSw0VDI8GAtn/OCNOs5vbyAEj2vTuhLJOD9GKxRGGEloBXJDUfxBsv
C4YBSIWBLf05HUfDR1MTiTnXv1ZLg7E73e+mpe1iMfqmY0/OXZo4PnuPL0tVXIkX
ZFsJMsev/3NksDz39MlZLKQBoDopYZxLKzM7cba/5FvBjrBva2HkngkoYi5r2zb4
mGzY25tOwi7uFUG6sopwvFpa
-----END CERTIFICATE-----
Generated at Mon Jan 1 08:09:56 2024 by rpki-client on console-fra.rpki-client.org