Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/jmDHd-avZzqAS1LYAN5s3URyHAs.roa
File: jmDHd-avZzqAS1LYAN5s3URyHAs.roa (raw, json)
Hash identifier: 6WW6l0AAZtsXrz3YOGBcPtaMK64IePJULLuiGT8WB3g=
Subject key identifier: 8E:60:C7:77:E6:AF:67:3A:80:4B:52:D8:00:DE:6C:DD:44:72:1C:0B
Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Certificate serial: 0187DCB41918C7EA67CFA9D7721FDABB5E30
Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/jmDHd-avZzqAS1LYAN5s3URyHAs.roa
Signing time: Tue 02 May 2023 13:43:23 +0000
ROA not before: Tue 02 May 2023 13:43:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212905
IP address blocks: 194.145.139.0/24 maxlen: 24
185.86.81.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:dc:b4:19:18:c7:ea:67:cf:a9:d7:72:1f:da:bb:5e:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Validity
Not Before: May 2 13:43:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e60c777e6af673a804b52d800de6cdd44721c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b4:16:ed:05:77:a3:e9:cd:df:98:f6:4e:a2:
2c:54:7b:08:a4:9b:3f:42:21:02:18:29:d1:09:0c:
fa:f8:f3:07:8e:d8:f8:1a:5c:6c:02:53:c7:76:d3:
b1:8f:85:3f:39:9d:83:6f:6a:57:79:ba:72:7c:d4:
3e:7c:77:b7:db:0b:2a:7a:12:d4:63:b0:33:d3:c4:
24:36:96:24:d3:c1:e6:f7:e7:fd:2a:4c:68:11:79:
9e:94:3a:78:cc:fe:a7:20:5a:a8:3c:e3:c8:e8:da:
9f:7b:45:65:7f:e6:91:ef:87:3f:79:db:c7:c4:36:
2a:28:b0:1b:0f:76:91:78:b0:46:0e:85:f1:ba:06:
5e:91:fa:3b:13:d4:f2:fc:a4:c6:20:87:87:76:24:
15:bc:06:13:86:58:0a:8a:e5:10:67:a2:9b:d1:92:
8c:0b:22:13:dc:8f:1c:2f:24:13:fa:1f:b0:1b:aa:
6e:58:bd:a9:e2:43:cb:17:53:fa:07:a7:88:fb:36:
8d:19:4f:0b:14:6d:17:5b:c4:8a:c3:0e:9c:71:e8:
66:3d:0c:24:9e:7a:34:5e:43:3b:9d:3d:80:f9:b0:
94:6a:07:e5:b1:05:74:2c:3e:e7:2e:0c:59:33:8b:
48:31:3e:bd:c2:9f:ad:25:32:01:67:ec:92:d7:73:
d5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:60:C7:77:E6:AF:67:3A:80:4B:52:D8:00:DE:6C:DD:44:72:1C:0B
X509v3 Authority Key Identifier:
keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/jmDHd-avZzqAS1LYAN5s3URyHAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.81.0/24
194.145.139.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:46:bb:a3:00:dd:b8:3d:e3:8a:51:d3:90:31:44:3f:88:63:
84:3b:c3:4a:cd:8c:22:06:90:9a:0e:a5:c5:63:e5:27:df:82:
db:ae:8b:30:58:e6:a6:14:1f:b2:4e:f7:6a:77:bd:45:2b:24:
7e:ad:00:bb:d9:6a:53:18:37:a3:31:11:8f:9f:0b:d7:36:cf:
91:1a:5a:89:50:2f:a3:18:46:8f:91:16:36:ef:c4:94:d2:e3:
8c:56:89:48:15:dc:20:e9:ae:09:56:34:cb:97:a2:6c:9b:ee:
00:26:6b:b7:62:f2:58:cf:10:a5:04:f7:e9:e1:1c:b3:4d:4c:
19:76:3f:83:74:a6:06:2b:78:c6:2f:dd:b2:66:8f:d0:d3:7d:
30:0b:0f:aa:ac:19:5e:ae:f0:fa:c2:1b:cd:df:b0:48:70:bd:
c7:1f:bd:89:9b:14:00:46:e3:ae:7c:56:4c:aa:a9:4d:82:bb:
7a:74:4a:09:f3:87:91:81:4f:d5:d9:16:68:92:bb:e1:df:8a:
6f:f4:7d:09:dd:ee:59:ec:a3:7e:fb:5a:36:24:54:52:4a:ae:
db:2e:e3:27:fa:19:14:8a:f5:6e:21:e0:97:fd:d5:67:93:02:
ce:8f:bd:fc:82:6e:e9:25:e0:6d:e9:c6:b2:46:11:55:dc:12:
a0:31:e9:d5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYfctBkYx+pnz6nXch/au14wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNTkyZTY4ODk1YzcwNjhiNDY1NTUwODkxN2FkNWJiZGRi
ZDBhNWYwHhcNMjMwNTAyMTM0MzIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTYwYzc3N2U2YWY2NzNhODA0YjUyZDgwMGRlNmNkZDQ0NzIxYzBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbQW7QV3o+nN35j2TqIsVHsIpJs/
QiECGCnRCQz6+PMHjtj4GlxsAlPHdtOxj4U/OZ2Db2pXebpyfNQ+fHe32wsqehLU
Y7Az08QkNpYk08Hm9+f9KkxoEXmelDp4zP6nIFqoPOPI6Nqfe0Vlf+aR74c/edvH
xDYqKLAbD3aReLBGDoXxugZekfo7E9Ty/KTGIIeHdiQVvAYThlgKiuUQZ6Kb0ZKM
CyIT3I8cLyQT+h+wG6puWL2p4kPLF1P6B6eI+zaNGU8LFG0XW8SKww6ccehmPQwk
nno0XkM7nT2A+bCUagflsQV0LD7nLgxZM4tIMT69wp+tJTIBZ+yS13PVEwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFI5gx3fmr2c6gEtS2ADebN1EchwLMB8GA1UdIwQY
MBaAFFBZLmiJXHBotGVVCJF61bvdvQpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yYTgxMDAtMTcyYi00OGUzLWEzMmEt
N2JiZDI4Y2U0YTc1LzEvam1ESGQtYXZaenFBUzFMWUFONXMzVVJ5SEFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8yYTgxMDAtMTcyYi00OGUzLWEzMmEtN2JiZDI4Y2U0YTc1
LzEvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuVZRAwQA
wpGLMA0GCSqGSIb3DQEBCwUAA4IBAQChRrujAN24PeOKUdOQMUQ/iGOEO8NKzYwi
BpCaDqXFY+Un34LbroswWOamFB+yTvdqd71FKyR+rQC72WpTGDejMRGPnwvXNs+R
GlqJUC+jGEaPkRY278SU0uOMVolIFdwg6a4JVjTLl6Jsm+4AJmu3YvJYzxClBPfp
4RyzTUwZdj+DdKYGK3jGL92yZo/Q030wCw+qrBlervD6whvN37BIcL3HH72JmxQA
RuOufFZMqqlNgrt6dEoJ84eRgU/V2RZokrvh34pv9H0J3e5Z7KN++1o2JFRSSq7b
LuMn+hkUivVuIeCX/dVnkwLOj738gm7pJeBt6cayRhFV3BKgMenV
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:59 2024 by rpki-client on console-fra.rpki-client.org