Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/jdjohcD-fz4JNHxkLeGPgeiNuwA.roa
File: jdjohcD-fz4JNHxkLeGPgeiNuwA.roa (raw, json)
Hash identifier: +8hAS8g4lG+NMThBuzbWzY7dVcSWlxKSvDtgyUtj39E=
Subject key identifier: 8D:D8:E8:85:C0:FE:7F:3E:09:34:7C:64:2D:E1:8F:81:E8:8D:BB:00
Certificate issuer: /CN=321ec194107843848cd36330232b5f6a43791db4
Certificate serial: 01856D8AE0BB6D26BCB3475BC57AE27912AB
Authority key identifier: 32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/jdjohcD-fz4JNHxkLeGPgeiNuwA.roa
Signing time: Sun 01 Jan 2023 13:34:56 +0000
ROA not before: Sun 01 Jan 2023 13:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8075
IP address blocks: 195.105.26.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:e0:bb:6d:26:bc:b3:47:5b:c5:7a:e2:79:12:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=321ec194107843848cd36330232b5f6a43791db4
Validity
Not Before: Jan 1 13:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8dd8e885c0fe7f3e09347c642de18f81e88dbb00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f9:92:2d:da:66:05:44:e0:8c:be:fc:ee:5a:
54:36:b8:75:73:f0:45:28:0c:34:3f:7f:81:2d:cc:
75:1a:07:4e:4c:0e:a3:29:61:fa:8a:24:b6:86:6a:
40:1d:15:fa:58:47:c6:5c:09:33:9f:ab:de:db:41:
e7:42:d2:0e:1c:70:bf:ac:fe:eb:dd:ee:23:69:9d:
18:7f:55:a1:c3:e6:2b:f2:22:04:ba:36:50:d8:4e:
a6:3e:ca:d2:bd:51:a2:6d:b8:77:be:96:18:15:60:
a1:08:25:d1:96:1e:44:69:7f:04:eb:84:c2:db:24:
a2:30:12:be:59:c6:ef:b7:57:63:e6:ab:39:03:e5:
6d:7a:ed:92:b2:b2:bd:d2:07:72:74:5a:0f:57:3d:
7d:60:0a:56:75:12:77:7b:44:31:cb:db:23:68:94:
38:a3:ad:01:1a:73:86:80:c6:3a:6a:61:71:b4:81:
7e:83:0c:80:cd:f2:dc:6a:5b:32:f3:63:99:bf:fd:
c1:22:4e:a2:3e:3b:06:5f:a7:07:98:1b:d3:f6:ab:
d1:92:bb:9f:2d:23:a4:2f:06:01:83:66:87:a2:d1:
53:27:69:e6:fd:10:a0:65:1e:11:2e:4c:33:40:ad:
83:71:c2:0f:a9:bc:04:a3:8d:4e:cf:fb:5c:54:39:
f7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D8:E8:85:C0:FE:7F:3E:09:34:7C:64:2D:E1:8F:81:E8:8D:BB:00
X509v3 Authority Key Identifier:
keyid:32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/jdjohcD-fz4JNHxkLeGPgeiNuwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.105.26.0/24
Signature Algorithm: sha256WithRSAEncryption
91:df:18:5e:40:37:a7:f6:3a:8b:cc:dd:a7:d7:f6:1e:2f:33:
62:5e:37:de:d5:39:86:c4:1c:26:19:ec:64:6d:e8:ea:e7:98:
d4:fd:a1:f7:94:a6:18:ee:d9:28:ca:ce:86:c9:f5:1e:5f:6a:
c6:08:6a:7c:ee:a0:eb:6a:15:b4:12:b0:6a:ed:e2:40:8e:b1:
83:1a:6b:5f:34:e8:a2:39:39:55:6d:a6:3b:c7:0b:bc:4b:71:
90:0d:2e:60:3c:c4:73:e8:04:c6:69:d9:9f:70:7d:d4:96:51:
6f:da:66:61:8b:20:ae:74:50:a5:3c:e2:25:d1:75:6c:0a:aa:
46:47:ab:0d:4d:ee:e9:d8:da:e0:87:c6:6a:68:c0:db:70:66:
3d:72:ab:e6:dd:87:e3:c3:3e:6a:ec:a6:01:81:38:96:be:07:
86:d4:07:14:10:44:f2:6b:62:d4:c8:a3:60:84:bb:14:9c:06:
60:e8:5f:1d:4c:c8:9b:9f:41:69:42:c5:bc:1f:00:52:f3:75:
59:72:59:47:4c:91:cf:e2:36:43:ca:5c:92:9e:a0:da:18:91:
31:93:31:21:78:bd:86:d3:fb:88:e0:91:dc:5a:d4:6b:b6:1c:
33:73:94:06:a5:56:f4:fc:15:9b:47:ec:82:95:1e:d3:4b:89:
0c:84:f8:f2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtiuC7bSa8s0dbxXrieRKrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMWVjMTk0MTA3ODQzODQ4Y2QzNjMzMDIzMmI1ZjZhNDM3
OTFkYjQwHhcNMjMwMTAxMTMzNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZGQ4ZTg4NWMwZmU3ZjNlMDkzNDdjNjQyZGUxOGY4MWU4OGRiYjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fmSLdpmBUTgjL787lpUNrh1c/BF
KAw0P3+BLcx1GgdOTA6jKWH6iiS2hmpAHRX6WEfGXAkzn6ve20HnQtIOHHC/rP7r
3e4jaZ0Yf1Whw+Yr8iIEujZQ2E6mPsrSvVGibbh3vpYYFWChCCXRlh5EaX8E64TC
2ySiMBK+Wcbvt1dj5qs5A+Vteu2SsrK90gdydFoPVz19YApWdRJ3e0Qxy9sjaJQ4
o60BGnOGgMY6amFxtIF+gwyAzfLcalsy82OZv/3BIk6iPjsGX6cHmBvT9qvRkruf
LSOkLwYBg2aHotFTJ2nm/RCgZR4RLkwzQK2DccIPqbwEo41Oz/tcVDn3aQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI3Y6IXA/n8+CTR8ZC3hj4HojbsAMB8GA1UdIwQY
MBaAFDIewZQQeEOEjNNjMCMrX2pDeR20MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWg3QmxCQjRRNFNNMDJNd0l5dGZha041SGJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9mMTQ1OGYtYmRjMy00ZTRiLTlmNjgt
M2E2MTFjMDkzYTJjLzEvamRqb2hjRC1mejRKTkh4a0xlR1BnZWlOdXdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9mMTQ1OGYtYmRjMy00ZTRiLTlmNjgtM2E2MTFjMDkzYTJj
LzEvTWg3QmxCQjRRNFNNMDJNd0l5dGZha041SGJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw2kaMA0G
CSqGSIb3DQEBCwUAA4IBAQCR3xheQDen9jqLzN2n1/YeLzNiXjfe1TmGxBwmGexk
bejq55jU/aH3lKYY7tkoys6GyfUeX2rGCGp87qDrahW0ErBq7eJAjrGDGmtfNOii
OTlVbaY7xwu8S3GQDS5gPMRz6ATGadmfcH3UllFv2mZhiyCudFClPOIl0XVsCqpG
R6sNTe7p2Nrgh8ZqaMDbcGY9cqvm3Yfjwz5q7KYBgTiWvgeG1AcUEETya2LUyKNg
hLsUnAZg6F8dTMibn0FpQsW8HwBS83VZcllHTJHP4jZDylySnqDaGJExkzEheL2G
0/uI4JHcWtRrthwzc5QGpVb0/BWbR+yClR7TS4kMhPjy
-----END CERTIFICATE-----
Generated at Mon Jan 1 11:16:06 2024 by rpki-client on console-ams.rpki-client.org