Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/jMyLhRc8PRxJf5w7EM1kxHtc9OM.roa
File: jMyLhRc8PRxJf5w7EM1kxHtc9OM.roa (raw, json)
Hash identifier: Ln5OGIK5Zpj5QEuOi287o51T3TBNiLZwZ+9hLgVMDpg=
Subject key identifier: 8C:CC:8B:85:17:3C:3D:1C:49:7F:9C:3B:10:CD:64:C4:7B:5C:F4:E3
Certificate issuer: /CN=e6f1dedaf4dbda60da990d685650e68c888c6100
Certificate serial: 018992A2230B333309F9E8331C8D5FEBDAF0
Authority key identifier: E6:F1:DE:DA:F4:DB:DA:60:DA:99:0D:68:56:50:E6:8C:88:8C:61:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vHe2vTb2mDamQ1oVlDmjIiMYQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/jMyLhRc8PRxJf5w7EM1kxHtc9OM.roa
Signing time: Wed 26 Jul 2023 14:37:26 +0000
ROA not before: Wed 26 Jul 2023 14:37:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199967
IP address blocks: 185.230.229.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:92:a2:23:0b:33:33:09:f9:e8:33:1c:8d:5f:eb:da:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6f1dedaf4dbda60da990d685650e68c888c6100
Validity
Not Before: Jul 26 14:37:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ccc8b85173c3d1c497f9c3b10cd64c47b5cf4e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4f:b1:13:9c:98:09:a7:5c:30:f5:ff:78:aa:
e5:74:68:6f:26:63:55:c2:b2:07:27:96:a5:c5:79:
2c:1a:a7:7d:5b:bf:d4:b7:55:be:e3:d7:80:e4:0c:
84:15:63:bd:9e:f1:d2:92:c1:61:db:c1:26:b4:a7:
4b:95:cb:e0:a5:94:3b:4b:4a:ce:b2:5e:fc:3f:65:
96:55:b9:e5:4e:fd:a4:a5:be:1a:03:22:74:3c:e6:
ea:4d:10:68:8a:af:66:8d:ad:88:fb:4c:45:e0:14:
be:a4:fe:bc:69:50:94:80:a7:9c:e0:cd:a2:f8:3a:
60:0f:d0:c7:a1:0c:4a:a6:b3:01:43:1f:2b:d3:02:
a1:43:53:32:10:5b:13:15:74:1d:68:ea:30:be:ec:
b0:1f:6e:88:18:df:93:c3:da:9d:2b:8a:34:91:ec:
b7:41:06:a2:b8:9d:8e:7b:b7:90:1a:8c:86:6e:c7:
81:e7:ce:68:f6:d1:2a:c2:a0:66:47:b8:e7:07:17:
d9:29:b9:27:a2:a1:ad:5d:f4:19:14:dc:71:06:01:
45:d1:3c:39:56:ef:90:09:47:ba:ae:f2:e5:e8:89:
fd:ca:dc:b2:02:f5:d2:bd:c1:84:55:fc:02:dd:bf:
b3:84:d7:c7:82:9c:2d:c5:c1:43:98:10:48:8f:cc:
2f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CC:8B:85:17:3C:3D:1C:49:7F:9C:3B:10:CD:64:C4:7B:5C:F4:E3
X509v3 Authority Key Identifier:
keyid:E6:F1:DE:DA:F4:DB:DA:60:DA:99:0D:68:56:50:E6:8C:88:8C:61:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vHe2vTb2mDamQ1oVlDmjIiMYQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/jMyLhRc8PRxJf5w7EM1kxHtc9OM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.229.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:af:e1:f5:97:57:7f:da:d0:9a:e7:9a:be:a4:93:0f:aa:f6:
af:f2:7f:a0:5d:48:1c:c4:d8:2c:34:8d:ab:9b:bb:9f:33:50:
67:ce:f9:15:8c:e5:c7:a3:e9:c6:40:ee:61:98:60:73:ba:e6:
a6:f1:79:9e:0f:37:01:05:98:74:0c:73:8a:21:1c:04:fc:33:
2b:be:9a:18:49:90:86:47:81:fb:c1:36:ff:33:90:d7:9c:ec:
1a:cf:7c:6c:3e:36:a1:99:9d:e2:a5:a6:5c:30:ab:ea:82:9e:
09:60:9c:d8:8e:5e:67:d7:cb:8f:74:e2:73:0d:15:50:85:0d:
9e:b9:4c:9e:ba:85:e0:a0:95:c6:0d:f1:2a:06:fc:2f:f6:c0:
1f:3d:87:bf:a1:0c:5b:b4:f2:27:f6:09:eb:95:8e:eb:20:49:
1d:6f:dc:28:7c:58:e2:31:c4:3e:aa:a1:60:62:e6:81:e7:a9:
1d:49:0f:0a:c8:cb:58:6f:48:81:41:1b:3d:cb:7e:9a:08:bd:
53:1b:3b:89:69:22:b6:86:39:a9:f0:27:42:ae:d8:7d:a2:10:
38:d5:2c:17:c6:b1:23:f5:34:22:0c:30:f8:f3:f2:64:66:af:
c2:31:98:20:85:29:86:79:61:ac:e5:36:14:62:5d:98:9f:2a:
9a:a7:eb:16
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYmSoiMLMzMJ+egzHI1f69rwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2ZjFkZWRhZjRkYmRhNjBkYTk5MGQ2ODU2NTBlNjhjODg4
YzYxMDAwHhcNMjMwNzI2MTQzNzI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Y2NjOGI4NTE3M2MzZDFjNDk3ZjljM2IxMGNkNjRjNDdiNWNmNGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlU+xE5yYCadcMPX/eKrldGhvJmNV
wrIHJ5alxXksGqd9W7/Ut1W+49eA5AyEFWO9nvHSksFh28EmtKdLlcvgpZQ7S0rO
sl78P2WWVbnlTv2kpb4aAyJ0PObqTRBoiq9mja2I+0xF4BS+pP68aVCUgKec4M2i
+DpgD9DHoQxKprMBQx8r0wKhQ1MyEFsTFXQdaOowvuywH26IGN+Tw9qdK4o0key3
QQaiuJ2Oe7eQGoyGbseB585o9tEqwqBmR7jnBxfZKbknoqGtXfQZFNxxBgFF0Tw5
Vu+QCUe6rvLl6In9ytyyAvXSvcGEVfwC3b+zhNfHgpwtxcFDmBBIj8wvdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIzMi4UXPD0cSX+cOxDNZMR7XPTjMB8GA1UdIwQY
MBaAFObx3tr029pg2pkNaFZQ5oyIjGEAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXZIZTJ2VGIybURhbVExb1ZsRG1qSWlNWVFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS8yM2JhNDYtZmM3YS00Yjk3LThiNGYt
MjMxNjU3ODI5ZWY1LzEvak15TGhSYzhQUnhKZjV3N0VNMWt4SHRjOU9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS8yM2JhNDYtZmM3YS00Yjk3LThiNGYtMjMxNjU3ODI5ZWY1
LzEvNXZIZTJ2VGIybURhbVExb1ZsRG1qSWlNWVFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueblMA0G
CSqGSIb3DQEBCwUAA4IBAQDKr+H1l1d/2tCa55q+pJMPqvav8n+gXUgcxNgsNI2r
m7ufM1BnzvkVjOXHo+nGQO5hmGBzuuam8XmeDzcBBZh0DHOKIRwE/DMrvpoYSZCG
R4H7wTb/M5DXnOwaz3xsPjahmZ3ipaZcMKvqgp4JYJzYjl5n18uPdOJzDRVQhQ2e
uUyeuoXgoJXGDfEqBvwv9sAfPYe/oQxbtPIn9gnrlY7rIEkdb9wofFjiMcQ+qqFg
YuaB56kdSQ8KyMtYb0iBQRs9y36aCL1TGzuJaSK2hjmp8CdCrth9ohA41SwXxrEj
9TQiDDD48/JkZq/CMZgghSmGeWGs5TYUYl2Ynyqap+sW
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:23:06 2024 by rpki-client on console-ams.rpki-client.org