Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/jkS9kCAnl7aLxLXx9P83V4552l8.roa
File: jkS9kCAnl7aLxLXx9P83V4552l8.roa (raw, json)
Hash identifier: xSEIkJtrG8Qx0LbL+6wgKw5Qs5EpWlEWyKlm4Vwf19U=
Subject key identifier: 8E:44:BD:90:20:27:97:B6:8B:C4:B5:F1:F4:FF:37:57:8E:79:DA:5F
Certificate issuer: /CN=8aa1fe9a4c03d015aec974e2d29709a979eb82f1
Certificate serial: 0185707071D556E21D78AE37EE0CDB742D41
Authority key identifier: 8A:A1:FE:9A:4C:03:D0:15:AE:C9:74:E2:D2:97:09:A9:79:EB:82:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iqH-mkwD0BWuyXTi0pcJqXnrgvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/jkS9kCAnl7aLxLXx9P83V4552l8.roa
Signing time: Mon 02 Jan 2023 03:04:55 +0000
ROA not before: Mon 02 Jan 2023 03:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50763
IP address blocks: 185.241.44.0/22 maxlen: 22
185.241.44.0/23 maxlen: 23
185.241.46.0/24 maxlen: 24
2a0c:9880::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:71:d5:56:e2:1d:78:ae:37:ee:0c:db:74:2d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aa1fe9a4c03d015aec974e2d29709a979eb82f1
Validity
Not Before: Jan 2 03:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e44bd90202797b68bc4b5f1f4ff37578e79da5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5c:1b:3e:94:de:e7:b9:10:5e:64:9c:7c:50:
ef:74:ab:b2:40:7b:06:15:32:06:26:9f:7c:c6:41:
9d:80:ca:03:64:aa:1e:32:ec:cb:ac:97:bb:8c:80:
9b:12:22:37:4a:5c:d6:8f:f0:bd:25:43:f6:4f:8a:
79:6a:35:97:fd:2e:5b:7a:8a:40:85:ec:28:41:56:
60:bd:2b:e6:b6:01:be:df:5b:15:a3:43:6f:e8:ca:
7c:4c:5a:ff:ea:9c:88:75:78:46:88:01:09:30:6b:
73:30:cf:63:63:a4:07:bb:67:1e:71:88:f0:ad:17:
30:68:c9:3b:cc:08:a9:fa:70:ee:be:7c:dc:ce:e9:
a4:c9:e7:4c:40:0a:d6:65:5c:04:66:f8:8a:27:c9:
2e:ab:f4:4a:ff:ed:b2:2e:43:b5:c2:69:71:a8:d6:
b8:f3:e4:35:71:17:6e:7a:2a:de:e9:75:dd:07:cc:
2b:13:e3:dd:ef:f8:5a:ef:9f:75:77:f9:cc:7a:79:
e4:ac:39:af:34:9d:29:2d:28:a3:7d:8f:de:0c:3f:
1d:83:38:60:9a:98:26:f5:47:41:79:c6:52:88:5a:
74:26:5a:76:4d:ea:a7:06:a8:b2:14:c7:47:d0:8c:
c6:d6:ad:80:e1:45:39:54:9d:8f:0e:e4:1d:c9:77:
23:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:44:BD:90:20:27:97:B6:8B:C4:B5:F1:F4:FF:37:57:8E:79:DA:5F
X509v3 Authority Key Identifier:
keyid:8A:A1:FE:9A:4C:03:D0:15:AE:C9:74:E2:D2:97:09:A9:79:EB:82:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iqH-mkwD0BWuyXTi0pcJqXnrgvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/jkS9kCAnl7aLxLXx9P83V4552l8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.44.0/22
IPv6:
2a0c:9880::/29
Signature Algorithm: sha256WithRSAEncryption
54:f6:39:55:d1:59:44:a8:17:03:94:b2:f8:e2:64:24:df:b0:
15:50:4f:c6:07:e9:eb:94:f3:77:2f:1c:1f:ea:8a:9e:e4:55:
a2:9e:e8:ee:c6:e3:4d:97:b9:9d:c2:c8:02:5a:99:41:cf:e4:
2b:ec:da:37:67:9b:12:30:17:82:28:02:b8:89:0a:6b:78:69:
ab:7b:b4:78:aa:71:55:1e:ef:36:59:88:8a:6b:a0:9e:34:6d:
87:81:52:78:87:e4:a8:a2:c9:4b:c3:f0:d8:f7:b2:47:3a:da:
5a:f2:78:63:0d:34:df:8c:92:7a:fe:3e:47:39:f6:99:86:59:
ae:33:87:a1:c0:df:73:08:0f:8e:1c:ab:69:05:93:6e:e9:e1:
1b:37:16:10:41:20:41:f1:82:36:94:21:3b:ba:f9:59:ea:db:
24:31:0f:f9:1f:ca:a3:93:24:75:57:c0:ff:1d:7f:27:25:b2:
7a:33:35:8a:72:05:05:5a:aa:72:30:bb:87:dc:e9:37:00:18:
ee:11:af:42:8e:fd:4a:3b:7f:12:52:54:f0:55:fb:bf:a6:82:
02:a4:b9:a3:50:68:54:6b:4e:50:5c:67:ad:30:d5:d1:47:c3:
f9:4b:a2:8e:05:f0:c2:04:49:60:7f:8c:3e:47:2a:8b:0f:d4:
36:f0:ab:e5
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVwcHHVVuIdeK437gzbdC1BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhYTFmZTlhNGMwM2QwMTVhZWM5NzRlMmQyOTcwOWE5Nzll
YjgyZjEwHhcNMjMwMTAyMDMwNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTQ0YmQ5MDIwMjc5N2I2OGJjNGI1ZjFmNGZmMzc1NzhlNzlkYTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFwbPpTe57kQXmScfFDvdKuyQHsG
FTIGJp98xkGdgMoDZKoeMuzLrJe7jICbEiI3SlzWj/C9JUP2T4p5ajWX/S5beopA
hewoQVZgvSvmtgG+31sVo0Nv6Mp8TFr/6pyIdXhGiAEJMGtzMM9jY6QHu2cecYjw
rRcwaMk7zAip+nDuvnzczumkyedMQArWZVwEZviKJ8kuq/RK/+2yLkO1wmlxqNa4
8+Q1cRdueire6XXdB8wrE+Pd7/ha7591d/nMennkrDmvNJ0pLSijfY/eDD8dgzhg
mpgm9UdBecZSiFp0Jlp2TeqnBqiyFMdH0IzG1q2A4UU5VJ2PDuQdyXcjjQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFI5EvZAgJ5e2i8S18fT/N1eOedpfMB8GA1UdIwQY
MBaAFIqh/ppMA9AVrsl04tKXCal564LxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXFILW1rd0QwQld1eVhUaTBwY0pxWG5yZ3ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi80MWU5YjAtNjJlNy00NzE4LWI5NjYt
MWY5YWUwNTU2NDZmLzEvamtTOWtDQW5sN2FMeExYeDlQODNWNDU1Mmw4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi80MWU5YjAtNjJlNy00NzE4LWI5NjYtMWY5YWUwNTU2NDZm
LzEvaXFILW1rd0QwQld1eVhUaTBwY0pxWG5yZ3ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCufEsMA0E
AgACMAcDBQMqDJiAMA0GCSqGSIb3DQEBCwUAA4IBAQBU9jlV0VlEqBcDlLL44mQk
37AVUE/GB+nrlPN3Lxwf6oqe5FWinujuxuNNl7mdwsgCWplBz+Qr7No3Z5sSMBeC
KAK4iQpreGmre7R4qnFVHu82WYiKa6CeNG2HgVJ4h+SooslLw/DY97JHOtpa8nhj
DTTfjJJ6/j5HOfaZhlmuM4ehwN9zCA+OHKtpBZNu6eEbNxYQQSBB8YI2lCE7uvlZ
6tskMQ/5H8qjkyR1V8D/HX8nJbJ6MzWKcgUFWqpyMLuH3Ok3ABjuEa9Cjv1KO38S
UlTwVfu/poICpLmjUGhUa05QXGetMNXRR8P5S6KOBfDCBElgf4w+RyqLD9Q28Kvl
-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:40 2024 by rpki-client on console-fra.rpki-client.org