Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/JcnxxgmKt4QxCn31eRxKvyb5HXg.roa
File: JcnxxgmKt4QxCn31eRxKvyb5HXg.roa (raw, json)
Hash identifier: 8gtBHXubBj9g4c7A2GiRl2K3sVGEqpPUFG7Oc2GKBXM=
Subject key identifier: 25:C9:F1:C6:09:8A:B7:84:31:0A:7D:F5:79:1C:4A:BF:26:F9:1D:78
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CC80282C6FC55C486191536C69E1174E9
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/JcnxxgmKt4QxCn31eRxKvyb5HXg.roa
Signing time: Tue 02 Jan 2024 02:30:56 +0000
ROA not before: Tue 02 Jan 2024 02:30:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61135
IP address blocks: 185.225.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 21 Jan 2024 10:30:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:82:c6:fc:55:c4:86:19:15:36:c6:9e:11:74:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 02:30:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25c9f1c6098ab784310a7df5791c4abf26f91d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:82:83:35:9c:d4:7e:09:66:10:8b:c7:6e:00:
c9:f1:be:ca:80:bf:ef:64:7a:f5:63:db:c2:1c:0d:
71:d5:76:61:47:40:d9:0e:95:0d:c7:42:a8:63:37:
f4:11:64:ac:66:e6:5d:14:07:e9:d1:9e:dd:ce:2e:
e3:91:89:0c:1c:56:a7:d1:94:99:c8:2b:a4:f2:b5:
8c:37:64:08:0b:6e:1b:3a:59:10:62:cd:65:94:b7:
f8:e7:85:bb:a5:77:7c:89:9e:54:29:55:c6:b5:05:
3c:1c:61:a2:f5:0e:aa:8f:e6:d6:e6:48:68:4e:a6:
e7:57:7d:e7:a5:ed:74:5d:11:c3:f4:e4:f6:34:d2:
bc:1a:1a:a5:c5:5d:df:e5:45:be:ff:e1:6d:5d:1e:
8c:15:3b:99:71:85:f1:ae:99:bf:2a:52:a0:5a:d1:
7e:75:f4:69:3b:a0:53:09:08:76:70:bc:03:e8:33:
0b:8a:ae:d3:d1:9e:74:81:6e:ca:61:ba:d0:51:f3:
0e:81:d5:eb:93:3e:0a:22:45:eb:a2:15:b0:41:01:
1e:5d:67:e9:fe:4d:75:d1:51:11:36:bb:0e:5f:db:
89:20:92:77:3e:14:00:69:45:dc:9e:d7:07:00:a9:
f0:ca:11:d3:11:fa:f2:ba:e9:12:93:6f:95:8d:d4:
50:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C9:F1:C6:09:8A:B7:84:31:0A:7D:F5:79:1C:4A:BF:26:F9:1D:78
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/JcnxxgmKt4QxCn31eRxKvyb5HXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.22.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:02:b2:f9:a4:86:bb:7b:4e:96:af:27:81:ba:7f:65:7a:9d:
7d:ee:7a:c9:82:4b:8c:5a:fc:e8:04:7a:68:58:a0:9b:cf:4f:
21:8f:8c:34:be:fd:84:a6:57:18:da:6a:3b:fc:fd:88:20:05:
02:f1:01:57:de:65:4f:8d:e6:94:47:f7:37:31:5b:ba:97:32:
30:5d:a4:df:1a:d0:f9:61:fd:42:99:e1:b4:8c:9e:c8:bc:23:
00:cf:6b:89:3c:6a:d4:f6:fb:6f:b4:ef:e4:54:28:7c:49:91:
57:2b:8d:03:12:eb:d4:a4:a2:8e:12:66:c5:35:29:73:46:dc:
46:2b:c1:ee:dd:8e:16:d6:b6:dd:4d:f5:2c:6d:13:7d:c1:60:
57:4d:55:8a:26:61:1a:ad:ac:c9:ff:24:06:4f:e4:63:55:6c:
a7:70:fe:7b:87:07:36:46:26:a7:29:a1:55:eb:e7:67:27:c2:
32:55:76:49:9f:18:ff:14:75:f6:38:30:3d:c5:dd:7b:b2:dc:
5e:19:a0:2d:86:cc:8e:2b:38:df:98:8a:57:bd:23:4c:f0:ec:
34:01:87:31:3a:d0:2d:d2:f0:cf:a7:dc:79:97:57:c8:1a:bb:
57:91:2b:80:04:20:09:97:72:a2:95:84:e1:d6:e6:97:1d:da:
90:5f:37:a7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIAoLG/FXEhhkVNsaeEXTpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjQwMTAyMDIzMDU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNWM5ZjFjNjA5OGFiNzg0MzEwYTdkZjU3OTFjNGFiZjI2ZjkxZDc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4KDNZzUfglmEIvHbgDJ8b7KgL/v
ZHr1Y9vCHA1x1XZhR0DZDpUNx0KoYzf0EWSsZuZdFAfp0Z7dzi7jkYkMHFan0ZSZ
yCuk8rWMN2QIC24bOlkQYs1llLf454W7pXd8iZ5UKVXGtQU8HGGi9Q6qj+bW5kho
TqbnV33npe10XRHD9OT2NNK8GhqlxV3f5UW+/+FtXR6MFTuZcYXxrpm/KlKgWtF+
dfRpO6BTCQh2cLwD6DMLiq7T0Z50gW7KYbrQUfMOgdXrkz4KIkXrohWwQQEeXWfp
/k110VERNrsOX9uJIJJ3PhQAaUXcntcHAKnwyhHTEfryuukSk2+VjdRQ6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCXJ8cYJireEMQp99XkcSr8m+R14MB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvSmNueHhnbUt0NFF4Q24zMWVSeEt2eWI1SFhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueEWMA0G
CSqGSIb3DQEBCwUAA4IBAQBvArL5pIa7e06WryeBun9lep197nrJgkuMWvzoBHpo
WKCbz08hj4w0vv2EplcY2mo7/P2IIAUC8QFX3mVPjeaUR/c3MVu6lzIwXaTfGtD5
Yf1CmeG0jJ7IvCMAz2uJPGrU9vtvtO/kVCh8SZFXK40DEuvUpKKOEmbFNSlzRtxG
K8Hu3Y4W1rbdTfUsbRN9wWBXTVWKJmEarazJ/yQGT+RjVWyncP57hwc2RianKaFV
6+dnJ8IyVXZJnxj/FHX2ODA9xd17stxeGaAthsyOKzjfmIpXvSNM8Ow0AYcxOtAt
0vDPp9x5l1fIGrtXkSuABCAJl3KilYTh1uaXHdqQXzen
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:41 2024 by rpki-client on console-fra.rpki-client.org