Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/jmBEgjPdf7xHIsI3UwXLwoqxIeQ.roa
File: jmBEgjPdf7xHIsI3UwXLwoqxIeQ.roa (raw, json)
Hash identifier: XJ/T7rO+whYzBwTN5L2bilCKJjP6EBqcNK41+YQPyqA=
Subject key identifier: 8E:60:44:82:33:DD:7F:BC:47:22:C2:37:53:05:CB:C2:8A:B1:21:E4
Certificate issuer: /CN=869ab33046862ab58405e5e927ddf41272dfc714
Certificate serial: 0190BFE2DD2CA8E3BF80A3FBBF71D60E5F9B
Authority key identifier: 86:9A:B3:30:46:86:2A:B5:84:05:E5:E9:27:DD:F4:12:72:DF:C7:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpqzMEaGKrWEBeXpJ930EnLfxxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/jmBEgjPdf7xHIsI3UwXLwoqxIeQ.roa
Signing time: Wed 17 Jul 2024 08:50:34 +0000
ROA not before: Wed 17 Jul 2024 08:50:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42274
IP address blocks: 91.192.12.0/22 maxlen: 22
193.111.44.0/24 maxlen: 24
193.111.56.0/22 maxlen: 22
193.111.56.0/24 maxlen: 24
2001:67c:36c::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 17 Jul 2024 09:55:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:bf:e2:dd:2c:a8:e3:bf:80:a3:fb:bf:71:d6:0e:5f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869ab33046862ab58405e5e927ddf41272dfc714
Validity
Not Before: Jul 17 08:50:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e60448233dd7fbc4722c2375305cbc28ab121e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:30:a9:18:cb:03:62:8b:7d:a3:5c:77:6f:61:
4b:05:39:49:89:b3:60:e8:8a:84:60:61:e8:27:54:
25:a2:88:41:33:2e:f7:8d:e2:7e:e8:b6:1e:be:0e:
42:05:ca:a1:bf:57:a0:c6:fe:72:e9:02:d0:a6:fc:
17:a7:4c:8f:6b:9b:1f:47:04:4d:b3:88:66:ae:09:
45:51:8d:07:0a:c6:45:b7:b7:02:c3:91:aa:ff:e1:
87:d2:a1:6a:ab:0e:1a:fb:c7:b3:40:57:6d:6c:a1:
ff:db:45:fe:36:6e:7f:21:1b:8c:89:a3:62:9c:dd:
5d:50:19:e4:34:8f:c3:f9:e3:2d:3f:b8:de:33:78:
f3:7a:6f:7d:7b:96:88:53:ac:cc:76:9a:e9:96:ca:
a4:58:76:65:28:35:13:02:7a:24:48:a5:fb:15:58:
4e:90:9d:91:f4:b8:37:57:cf:fb:6e:3a:4f:67:cd:
53:57:7a:d5:3b:98:1a:e5:e1:ce:26:d1:70:3a:a7:
03:df:d3:f7:b0:e3:88:f7:58:6c:55:93:e2:bb:9a:
c0:b1:13:07:76:00:d2:8d:e3:cc:d2:a7:45:96:a6:
85:6f:6a:ca:43:47:97:e4:2e:f6:da:f0:26:6a:39:
b8:99:99:ca:79:34:0c:22:97:45:c9:73:46:50:a3:
3d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:60:44:82:33:DD:7F:BC:47:22:C2:37:53:05:CB:C2:8A:B1:21:E4
X509v3 Authority Key Identifier:
keyid:86:9A:B3:30:46:86:2A:B5:84:05:E5:E9:27:DD:F4:12:72:DF:C7:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpqzMEaGKrWEBeXpJ930EnLfxxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/jmBEgjPdf7xHIsI3UwXLwoqxIeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/hpqzMEaGKrWEBeXpJ930EnLfxxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.12.0/22
193.111.44.0/24
193.111.56.0/22
IPv6:
2001:67c:36c::/48
Signature Algorithm: sha256WithRSAEncryption
c9:54:10:e6:3f:ea:ec:8d:d4:19:d9:64:ee:3e:fb:a9:05:3f:
c5:ce:31:70:b6:62:2a:43:da:15:d7:1e:cb:73:8f:17:ec:dd:
91:59:d9:ed:5a:b6:7e:93:97:48:61:81:93:0d:41:b0:d9:ac:
2a:6a:22:dc:c4:75:17:14:2f:3f:3a:b9:c6:0c:88:29:d0:7d:
24:35:b0:be:75:27:18:88:52:07:cd:9c:80:ff:fa:20:3e:9d:
13:44:78:54:a8:5f:32:9d:19:a4:b9:ea:6b:b9:ea:5e:47:2e:
aa:ee:12:fd:40:76:96:30:02:f1:8c:9a:d2:76:cf:90:b4:e3:
64:a5:f6:c8:9c:dd:fb:e1:29:db:a1:3d:19:01:0c:b7:a0:9e:
5e:f3:83:f5:9b:39:1a:3f:c0:21:7a:08:43:42:90:01:9d:e2:
03:5b:ce:25:bc:1c:4c:85:62:36:af:e1:73:c2:0e:3e:97:7d:
e9:49:cc:a2:e7:c6:63:3d:bd:90:58:22:ed:fd:d0:ce:c4:f6:
31:21:42:30:4f:94:ef:e3:43:d3:a6:4b:ba:5b:68:47:89:68:
e7:f8:80:86:f2:a0:72:7c:8e:4c:2b:f6:0b:af:23:b8:91:4b:
45:79:6c:e5:d6:1b:0c:80:23:77:a2:81:98:ab:21:d8:8f:a9:
80:1b:63:19
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAZC/4t0sqOO/gKP7v3HWDl+bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2OWFiMzMwNDY4NjJhYjU4NDA1ZTVlOTI3ZGRmNDEyNzJk
ZmM3MTQwHhcNMjQwNzE3MDg1MDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTYwNDQ4MjMzZGQ3ZmJjNDcyMmMyMzc1MzA1Y2JjMjhhYjEyMWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjCpGMsDYot9o1x3b2FLBTlJibNg
6IqEYGHoJ1QloohBMy73jeJ+6LYevg5CBcqhv1egxv5y6QLQpvwXp0yPa5sfRwRN
s4hmrglFUY0HCsZFt7cCw5Gq/+GH0qFqqw4a+8ezQFdtbKH/20X+Nm5/IRuMiaNi
nN1dUBnkNI/D+eMtP7jeM3jzem99e5aIU6zMdprplsqkWHZlKDUTAnokSKX7FVhO
kJ2R9Lg3V8/7bjpPZ81TV3rVO5ga5eHOJtFwOqcD39P3sOOI91hsVZPiu5rAsRMH
dgDSjePM0qdFlqaFb2rKQ0eX5C722vAmajm4mZnKeTQMIpdFyXNGUKM9zQIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFI5gRIIz3X+8RyLCN1MFy8KKsSHkMB8GA1UdIwQY
MBaAFIaaszBGhiq1hAXl6Sfd9BJy38cUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHBxek1FYUdLcldFQmVYcEo5MzBFbkxmeHhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9mOGU4ZTUtNjkyYi00MGE5LWIzMmYt
Mzk0YzQ3ZmY0NWFlLzEvam1CRWdqUGRmN3hISXNJM1V3WEx3b3F4SWVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9mOGU4ZTUtNjkyYi00MGE5LWIzMmYtMzk0YzQ3ZmY0NWFl
LzEvaHBxek1FYUdLcldFQmVYcEo5MzBFbkxmeHhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQCW8AMAwQA
wW8sAwQCwW84MA8EAgACMAkDBwAgAQZ8A2wwDQYJKoZIhvcNAQELBQADggEBAMlU
EOY/6uyN1BnZZO4++6kFP8XOMXC2YipD2hXXHstzjxfs3ZFZ2e1atn6Tl0hhgZMN
QbDZrCpqItzEdRcULz86ucYMiCnQfSQ1sL51JxiIUgfNnID/+iA+nRNEeFSoXzKd
GaS56mu56l5HLqruEv1AdpYwAvGMmtJ2z5C042Sl9sic3fvhKduhPRkBDLegnl7z
g/WbORo/wCF6CENCkAGd4gNbziW8HEyFYjav4XPCDj6XfelJzKLnxmM9vZBYIu39
0M7E9jEhQjBPlO/jQ9OmS7pbaEeJaOf4gIbyoHJ8jkwr9guvI7iRS0V5bOXWGwyA
I3eigZirIdiPqYAbYxk=
-----END CERTIFICATE-----
Generated at Wed Jul 17 14:07:27 2024 by rpki-client on console-ams.rpki-client.org