Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/J3fgYC3jJiGuBspP9UjvgWRj5PA.roa
File: J3fgYC3jJiGuBspP9UjvgWRj5PA.roa (raw, json)
Hash identifier: R/OaYSVT5h3IRq4sBq3C4OBMpLviiI2jOaHZzUfgXFQ=
Subject key identifier: 27:77:E0:60:2D:E3:26:21:AE:06:CA:4F:F5:48:EF:81:64:63:E4:F0
Certificate issuer: /CN=c818be19c10980f15bcdee076690078491a8aa21
Certificate serial: 01856F0234B95DD4A98E801E8B0B6B7E9288
Authority key identifier: C8:18:BE:19:C1:09:80:F1:5B:CD:EE:07:66:90:07:84:91:A8:AA:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBi-GcEJgPFbze4HZpAHhJGoqiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/J3fgYC3jJiGuBspP9UjvgWRj5PA.roa
Signing time: Sun 01 Jan 2023 20:24:53 +0000
ROA not before: Sun 01 Jan 2023 20:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49911
IP address blocks: 185.76.49.0/24 maxlen: 24
185.76.48.0/22 maxlen: 22
185.76.48.0/24 maxlen: 24
185.76.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Jan 2023 15:38:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:34:b9:5d:d4:a9:8e:80:1e:8b:0b:6b:7e:92:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c818be19c10980f15bcdee076690078491a8aa21
Validity
Not Before: Jan 1 20:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2777e0602de32621ae06ca4ff548ef816463e4f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:68:3a:77:45:1d:1e:84:27:23:82:ae:4c:67:
6d:6c:fb:75:b5:2d:10:6f:69:b3:e9:4f:44:33:60:
03:6f:7a:25:26:ae:ef:9b:24:f5:63:3d:0f:62:bd:
a1:3f:d5:78:1b:ff:77:92:ed:59:45:9b:f6:7d:db:
16:47:41:e5:70:e7:fc:61:5b:19:eb:01:4c:be:0c:
cd:f2:66:15:9e:36:ae:a9:06:8f:54:88:7b:24:78:
93:90:70:46:e7:1d:fc:78:42:e1:45:47:90:f7:f4:
67:53:cd:6e:e7:a5:c2:78:64:0d:be:70:18:bb:d5:
ad:63:13:08:d6:b4:de:90:17:ee:20:c8:b1:1a:9b:
6f:42:c6:2a:06:dc:09:6e:67:4c:c1:69:63:93:8f:
34:43:d7:3f:64:91:aa:1c:1b:59:81:d7:b5:39:3c:
26:54:e5:fc:b9:cf:7f:35:31:a8:46:5a:4d:e2:4a:
9e:4d:51:af:f1:ec:3d:92:45:2f:6b:e3:06:f6:16:
84:0f:72:77:c6:2c:f3:49:68:f2:2e:42:d9:69:ec:
9c:38:bc:fd:ca:24:b5:27:d8:b6:3e:53:a4:62:c9:
1a:4c:ed:07:fc:7a:82:02:fe:60:a8:91:60:25:b1:
02:c5:75:00:69:26:b0:7f:d6:ea:c6:c0:8e:2e:d7:
9c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:77:E0:60:2D:E3:26:21:AE:06:CA:4F:F5:48:EF:81:64:63:E4:F0
X509v3 Authority Key Identifier:
keyid:C8:18:BE:19:C1:09:80:F1:5B:CD:EE:07:66:90:07:84:91:A8:AA:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBi-GcEJgPFbze4HZpAHhJGoqiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/J3fgYC3jJiGuBspP9UjvgWRj5PA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.48.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:5c:3a:39:fb:97:f6:f4:1c:2c:72:5e:06:c1:cc:e8:40:68:
69:18:be:64:85:07:73:e3:94:66:96:f9:60:e1:8a:0c:28:0b:
09:1d:5f:6f:25:9c:c8:f5:81:25:61:c8:10:58:47:92:97:5a:
fc:88:b9:55:b4:88:9f:2c:eb:e5:eb:01:1f:d2:b0:3a:f3:1f:
6c:a5:5b:25:23:33:4b:1f:04:45:5d:cf:e0:38:d1:3b:3c:13:
92:7a:c3:95:cf:ca:b1:8f:47:f3:45:bb:7f:52:65:71:94:ca:
f2:85:d6:04:4d:d9:74:a3:b5:2c:b8:a8:e9:e8:73:d4:6e:0c:
7c:3b:ec:e8:5e:0e:14:fa:24:60:47:18:6e:89:2f:84:b1:61:
7e:c7:e5:e6:55:a0:6d:55:4c:1a:ce:9c:9a:80:49:c5:9b:7e:
41:1f:25:50:00:a2:c2:a9:ea:5d:ca:48:16:3c:73:df:9a:4d:
99:7d:b1:76:e5:42:6d:3d:6a:9c:47:bc:5f:34:8d:cf:34:d6:
c3:7c:7e:11:73:e1:46:e1:e6:f5:65:e5:c7:e6:1d:71:c1:5f:
cf:ae:f7:32:f8:c3:ae:d0:74:02:ea:63:a3:67:b5:64:c8:c6:
20:f8:49:da:a6:7f:46:c1:7e:11:a0:97:de:6b:04:c2:c7:45:
35:07:a2:2b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvAjS5XdSpjoAeiwtrfpKIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4MThiZTE5YzEwOTgwZjE1YmNkZWUwNzY2OTAwNzg0OTFh
OGFhMjEwHhcNMjMwMTAxMjAyNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzc3ZTA2MDJkZTMyNjIxYWUwNmNhNGZmNTQ4ZWY4MTY0NjNlNGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWg6d0UdHoQnI4KuTGdtbPt1tS0Q
b2mz6U9EM2ADb3olJq7vmyT1Yz0PYr2hP9V4G/93ku1ZRZv2fdsWR0HlcOf8YVsZ
6wFMvgzN8mYVnjauqQaPVIh7JHiTkHBG5x38eELhRUeQ9/RnU81u56XCeGQNvnAY
u9WtYxMI1rTekBfuIMixGptvQsYqBtwJbmdMwWljk480Q9c/ZJGqHBtZgde1OTwm
VOX8uc9/NTGoRlpN4kqeTVGv8ew9kkUva+MG9haED3J3xizzSWjyLkLZaeycOLz9
yiS1J9i2PlOkYskaTO0H/HqCAv5gqJFgJbECxXUAaSawf9bqxsCOLtec8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCd34GAt4yYhrgbKT/VI74FkY+TwMB8GA1UdIwQY
MBaAFMgYvhnBCYDxW83uB2aQB4SRqKohMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUJpLUdjRUpnUEZiemU0SFpwQUhoSkdvcWlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi84ODQwZjAtMjcxZS00NTI3LWE0MTMt
NmM0NzE5YmNmOWVlLzEvSjNmZ1lDM2pKaUd1QnNwUDlVanZnV1JqNVBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi84ODQwZjAtMjcxZS00NTI3LWE0MTMtNmM0NzE5YmNmOWVl
LzEveUJpLUdjRUpnUEZiemU0SFpwQUhoSkdvcWlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUwwMA0G
CSqGSIb3DQEBCwUAA4IBAQCOXDo5+5f29Bwscl4GwczoQGhpGL5khQdz45Rmlvlg
4YoMKAsJHV9vJZzI9YElYcgQWEeSl1r8iLlVtIifLOvl6wEf0rA68x9spVslIzNL
HwRFXc/gONE7PBOSesOVz8qxj0fzRbt/UmVxlMryhdYETdl0o7UsuKjp6HPUbgx8
O+zoXg4U+iRgRxhuiS+EsWF+x+XmVaBtVUwazpyagEnFm35BHyVQAKLCqepdykgW
PHPfmk2ZfbF25UJtPWqcR7xfNI3PNNbDfH4Rc+FG4eb1ZeXH5h1xwV/Prvcy+MOu
0HQC6mOjZ7VkyMYg+Enapn9GwX4RoJfeawTCx0U1B6Ir
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:02 2024 by rpki-client on console-fra.rpki-client.org