Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/JiQtu-g56oKnpoU7XgXkMCR8TsM.roa
File: JiQtu-g56oKnpoU7XgXkMCR8TsM.roa (raw, json)
Hash identifier: OG9rdSXoj1MTbNXVDUZ6f7VRhji32+wJEEvt2Wj0+5A=
Subject key identifier: 26:24:2D:BB:E8:39:EA:82:A7:A6:85:3B:5E:05:E4:30:24:7C:4E:C3
Certificate issuer: /CN=9be60d4ae70f6f559984c76b521ce377cc1ee721
Certificate serial: 018AB30EA9B904247AB0448BB5140B2CCE2A
Authority key identifier: 9B:E6:0D:4A:E7:0F:6F:55:99:84:C7:6B:52:1C:E3:77:CC:1E:E7:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-YNSucPb1WZhMdrUhzjd8we5yE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/JiQtu-g56oKnpoU7XgXkMCR8TsM.roa
Signing time: Wed 20 Sep 2023 14:46:37 +0000
ROA not before: Wed 20 Sep 2023 14:46:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204409
IP address blocks: 185.249.112.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:32:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b3:0e:a9:b9:04:24:7a:b0:44:8b:b5:14:0b:2c:ce:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be60d4ae70f6f559984c76b521ce377cc1ee721
Validity
Not Before: Sep 20 14:46:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26242dbbe839ea82a7a6853b5e05e430247c4ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:dc:a8:08:23:37:92:d4:8e:65:2e:0f:53:f0:
9c:b4:0e:fd:f8:91:fc:e3:e2:eb:c4:e3:8f:35:27:
4d:4d:06:6e:a9:07:e7:f7:88:c4:32:eb:d5:0e:7b:
fb:12:0f:3c:fc:5c:18:ff:af:75:b2:0f:de:13:25:
d5:f4:49:eb:ff:04:80:af:9c:f3:94:a3:90:70:78:
0e:d9:ee:b7:01:c3:03:52:a8:88:4d:81:98:3f:02:
0e:24:1a:55:bb:8c:6a:68:ac:8f:c2:50:40:4e:5d:
5e:db:80:c9:cf:66:af:92:5c:e9:39:05:28:03:bc:
ed:19:c7:77:47:81:d2:63:23:f2:32:7c:c1:3a:7a:
ee:46:4c:ea:e1:47:42:a1:43:46:09:ec:1d:e7:77:
a3:0d:d7:0a:e4:2d:41:98:d2:c4:2c:39:e3:c3:aa:
bc:fa:19:a3:fb:b3:a6:12:b2:05:2d:00:5f:39:7d:
f0:e5:68:f4:04:99:6d:a0:bc:c5:87:95:11:87:ee:
1d:54:2e:a8:e1:48:62:75:1e:bf:24:8b:33:5a:56:
93:aa:57:75:d3:7c:45:37:17:a3:d1:97:33:a0:fd:
dd:50:99:0a:43:f3:49:41:28:0d:bd:5b:2a:99:c3:
05:3b:42:6f:83:a0:89:90:75:f3:54:a9:c9:8c:b2:
43:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:24:2D:BB:E8:39:EA:82:A7:A6:85:3B:5E:05:E4:30:24:7C:4E:C3
X509v3 Authority Key Identifier:
keyid:9B:E6:0D:4A:E7:0F:6F:55:99:84:C7:6B:52:1C:E3:77:CC:1E:E7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-YNSucPb1WZhMdrUhzjd8we5yE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/JiQtu-g56oKnpoU7XgXkMCR8TsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.112.0/22
Signature Algorithm: sha256WithRSAEncryption
09:9e:73:4a:de:0a:63:2a:40:5c:c9:92:bd:91:b2:3d:3e:57:
b3:d5:fb:a2:11:34:08:87:89:3b:1c:3e:8a:a2:bf:65:21:23:
2f:0e:56:02:8c:07:43:af:d5:c9:a4:af:9f:7b:9a:19:50:8b:
a1:cd:d8:05:b2:95:35:c0:3e:a6:ff:4a:d3:2a:bd:43:99:fd:
7f:36:ef:e9:f5:d3:b0:ff:7b:e1:ec:d2:83:4e:fc:c2:1f:63:
de:04:35:58:a4:60:eb:f2:c4:f2:f7:f7:f6:25:20:91:81:94:
b6:a4:91:38:e4:0c:7e:bf:21:c7:fb:f8:56:12:6f:04:9e:3b:
84:1d:f5:db:48:df:d4:f5:02:ad:a0:8f:74:33:00:17:5a:39:
79:8b:9c:f7:63:f0:25:18:38:26:a5:09:74:f7:33:ed:4a:aa:
f4:9b:f8:3e:f6:26:0d:c8:2e:3a:bc:70:28:a2:c6:fb:c7:83:
00:b0:25:fb:93:fb:27:ea:d1:bf:b1:6b:d5:84:b0:48:01:f8:
1b:f8:0b:ad:d1:0a:5a:1c:5e:7d:eb:b8:8c:a2:37:75:b5:0b:
d6:ca:fe:dd:dd:5a:d0:3c:f8:2c:f8:8a:f9:ab:2b:65:4a:31:
f6:44:2c:ee:8b:2a:8d:94:06:10:ca:62:7a:89:9b:8c:a7:bb:
8b:82:b8:5e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYqzDqm5BCR6sESLtRQLLM4qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliZTYwZDRhZTcwZjZmNTU5OTg0Yzc2YjUyMWNlMzc3Y2Mx
ZWU3MjEwHhcNMjMwOTIwMTQ0NjM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjI0MmRiYmU4MzllYTgyYTdhNjg1M2I1ZTA1ZTQzMDI0N2M0ZWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9yoCCM3ktSOZS4PU/CctA79+JH8
4+LrxOOPNSdNTQZuqQfn94jEMuvVDnv7Eg88/FwY/691sg/eEyXV9Enr/wSAr5zz
lKOQcHgO2e63AcMDUqiITYGYPwIOJBpVu4xqaKyPwlBATl1e24DJz2avklzpOQUo
A7ztGcd3R4HSYyPyMnzBOnruRkzq4UdCoUNGCewd53ejDdcK5C1BmNLELDnjw6q8
+hmj+7OmErIFLQBfOX3w5Wj0BJltoLzFh5URh+4dVC6o4UhidR6/JIszWlaTqld1
03xFNxej0ZczoP3dUJkKQ/NJQSgNvVsqmcMFO0Jvg6CJkHXzVKnJjLJDjQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCYkLbvoOeqCp6aFO14F5DAkfE7DMB8GA1UdIwQY
MBaAFJvmDUrnD29VmYTHa1Ic43fMHuchMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbS1ZTlN1Y1BiMVdaaE1kclVoempkOHdlNXlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9jMDI4MjAtZmI2Ni00NzkyLTlkOGQt
Y2M4ODU4NTdmYWYyLzEvSmlRdHUtZzU2b0tucG9VN1hnWGtNQ1I4VHNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9jMDI4MjAtZmI2Ni00NzkyLTlkOGQtY2M4ODU4NTdmYWYy
LzEvbS1ZTlN1Y1BiMVdaaE1kclVoempkOHdlNXlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuflwMA0G
CSqGSIb3DQEBCwUAA4IBAQAJnnNK3gpjKkBcyZK9kbI9Plez1fuiETQIh4k7HD6K
or9lISMvDlYCjAdDr9XJpK+fe5oZUIuhzdgFspU1wD6m/0rTKr1Dmf1/Nu/p9dOw
/3vh7NKDTvzCH2PeBDVYpGDr8sTy9/f2JSCRgZS2pJE45Ax+vyHH+/hWEm8EnjuE
HfXbSN/U9QKtoI90MwAXWjl5i5z3Y/AlGDgmpQl09zPtSqr0m/g+9iYNyC46vHAo
osb7x4MAsCX7k/sn6tG/sWvVhLBIAfgb+Aut0QpaHF5967iMojd1tQvWyv7d3VrQ
PPgs+Ir5qytlSjH2RCzuiyqNlAYQymJ6iZuMp7uLgrhe
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:12 2024 by rpki-client on console-ams.rpki-client.org