Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/jX3479UEsM8mRsixlNoYgFeU8i4.roa
File: jX3479UEsM8mRsixlNoYgFeU8i4.roa (raw, json)
Hash identifier: 0qUwW0mdy6fyG3uO/4IX8TjnQz4iSmIo3SGl33TmdoE=
Subject key identifier: 8D:7D:F8:EF:D5:04:B0:CF:26:46:C8:B1:94:DA:18:80:57:94:F2:2E
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0191926F72B9465352122579989645213AC0
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/jX3479UEsM8mRsixlNoYgFeU8i4.roa
Signing time: Tue 27 Aug 2024 06:04:22 +0000
ROA not before: Tue 27 Aug 2024 06:04:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.144.226.0/24 maxlen: 24
185.121.120.0/24 maxlen: 24
185.121.121.0/24 maxlen: 24
185.121.122.0/23 maxlen: 24
185.239.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Sep 2024 05:23:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:92:6f:72:b9:46:53:52:12:25:79:98:96:45:21:3a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Aug 27 06:04:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d7df8efd504b0cf2646c8b194da18805794f22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b8:6d:73:a5:8a:f6:6e:e3:1c:c9:30:b9:c8:
f9:59:65:7f:0e:9a:66:d8:3b:c2:8d:bb:43:54:5d:
19:1f:5d:9e:2f:b9:4f:31:59:83:9e:40:d4:34:95:
03:52:c8:74:f3:8b:b1:7e:6d:a7:6b:2e:89:9a:82:
22:4f:08:0f:28:8d:b8:66:61:3b:f7:4d:ef:bf:61:
d8:77:a5:34:b7:93:0f:1f:a3:ef:07:70:b0:b3:62:
f3:0b:73:37:cf:52:0b:ca:4a:ea:a7:ec:8d:43:c3:
fe:b1:7f:46:0c:d9:f6:bc:43:f5:6e:09:75:b0:b2:
a1:ca:65:b1:97:ab:3b:58:fc:77:14:21:a6:36:ba:
b0:0a:e6:30:98:39:a8:09:5a:37:7c:09:5f:c0:3e:
3a:ee:77:56:34:7f:72:44:73:78:37:99:5d:e0:77:
35:2d:92:6d:3b:4e:21:cc:c1:4c:9b:62:86:23:62:
cf:07:c8:d9:af:2e:72:21:2a:74:88:62:6d:c1:42:
2b:2c:6c:82:94:2e:92:2e:b5:a5:46:b9:23:f4:71:
8c:da:21:7c:ee:cd:cf:b5:a6:9b:ea:09:a2:7c:8a:
b1:04:98:4c:3a:29:20:a8:70:4f:65:c2:7f:ed:17:
71:f4:02:7d:4c:d0:04:23:c0:cb:47:c9:91:fe:43:
fa:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:7D:F8:EF:D5:04:B0:CF:26:46:C8:B1:94:DA:18:80:57:94:F2:2E
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/jX3479UEsM8mRsixlNoYgFeU8i4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.226.0/24
185.121.120.0/22
185.239.243.0/24
Signature Algorithm: sha256WithRSAEncryption
47:d6:43:4c:ce:36:12:e0:6c:05:bc:4a:f5:d8:2a:ea:56:8e:
85:da:4c:55:fb:c9:f1:27:4c:09:c9:f9:ca:23:90:fe:a4:a4:
1f:ca:6c:11:d0:44:08:37:4d:e4:d0:5a:98:86:9b:4c:f9:20:
68:a7:19:cd:42:97:28:5e:82:6f:9d:27:35:81:78:ce:cb:43:
ec:66:2e:56:5d:52:06:a5:6b:ce:68:8e:23:b5:e3:3a:fe:a7:
55:a2:8f:9e:ba:88:83:12:57:6d:7c:0f:f4:9f:d5:da:f3:38:
c0:63:1f:d4:2f:17:42:10:2e:e9:4e:a6:96:98:ae:c5:34:d7:
66:b6:50:2f:6d:6d:c6:31:5f:66:75:bb:e2:a1:f5:7f:3f:0b:
4f:46:1e:a0:fd:a9:41:28:ff:e8:d2:63:1a:77:cd:2e:e3:ba:
44:0d:7a:12:a1:54:40:1e:2b:2a:48:64:a5:b3:1f:63:c1:76:
b6:78:e8:89:1b:95:99:94:45:cd:76:6d:49:54:5e:02:a4:70:
9f:98:fc:f3:10:c9:fa:e8:4b:d4:45:5d:cc:9a:03:b2:31:a1:
85:ac:c6:be:92:fe:7f:9f:30:cd:84:78:72:c2:5d:a4:d4:78:
c0:ee:b8:ca:95:c4:17:b2:ac:24:5d:6d:d7:39:75:2d:3f:a9:
8a:6b:9d:5a
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZGSb3K5RlNSEiV5mJZFITrAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjQwODI3MDYwNDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDdkZjhlZmQ1MDRiMGNmMjY0NmM4YjE5NGRhMTg4MDU3OTRmMjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7htc6WK9m7jHMkwucj5WWV/Dppm
2DvCjbtDVF0ZH12eL7lPMVmDnkDUNJUDUsh084uxfm2nay6JmoIiTwgPKI24ZmE7
903vv2HYd6U0t5MPH6PvB3Cws2LzC3M3z1ILykrqp+yNQ8P+sX9GDNn2vEP1bgl1
sLKhymWxl6s7WPx3FCGmNrqwCuYwmDmoCVo3fAlfwD467ndWNH9yRHN4N5ld4Hc1
LZJtO04hzMFMm2KGI2LPB8jZry5yISp0iGJtwUIrLGyClC6SLrWlRrkj9HGM2iF8
7s3Ptaab6gmifIqxBJhMOikgqHBPZcJ/7Rdx9AJ9TNAEI8DLR8mR/kP6OQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFI19+O/VBLDPJkbIsZTaGIBXlPIuMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvalgzNDc5VUVzTThtUnNpeGxOb1lnRmVVOGk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALZDiAwQC
uXl4AwQAue/zMA0GCSqGSIb3DQEBCwUAA4IBAQBH1kNMzjYS4GwFvEr12CrqVo6F
2kxV+8nxJ0wJyfnKI5D+pKQfymwR0EQIN03k0FqYhptM+SBopxnNQpcoXoJvnSc1
gXjOy0PsZi5WXVIGpWvOaI4jteM6/qdVoo+euoiDEldtfA/0n9Xa8zjAYx/ULxdC
EC7pTqaWmK7FNNdmtlAvbW3GMV9mdbviofV/PwtPRh6g/alBKP/o0mMad80u47pE
DXoSoVRAHisqSGSlsx9jwXa2eOiJG5WZlEXNdm1JVF4CpHCfmPzzEMn66EvURV3M
mgOyMaGFrMa+kv5/nzDNhHhywl2k1HjA7rjKlcQXsqwkXW3XOXUtP6mKa51a
-----END CERTIFICATE-----
Generated at Wed Sep 4 07:23:12 2024 by rpki-client on console-ams.rpki-client.org