Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JTqFM1MyU4yht4z1784e3gJ70gc.roa
File: JTqFM1MyU4yht4z1784e3gJ70gc.roa (raw, json)
Hash identifier: J+Lglk5ZDtG8fmJ0/JulS2NMvmIR7WigiYDyhisaSSo=
Subject key identifier: 25:3A:85:33:53:32:53:8C:A1:B7:8C:F5:EF:CE:1E:DE:02:7B:D2:07
Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial: 018C307DD4468B62ED1D80D8B7D02C0DACD0
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JTqFM1MyU4yht4z1784e3gJ70gc.roa
Signing time: Sun 03 Dec 2023 16:23:21 +0000
ROA not before: Sun 03 Dec 2023 16:23:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48761
IP address blocks: 185.172.48.0/24 maxlen: 24
185.172.49.0/24 maxlen: 24
2a03:2100:45::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:30:7d:d4:46:8b:62:ed:1d:80:d8:b7:d0:2c:0d:ac:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Validity
Not Before: Dec 3 16:23:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=253a85335332538ca1b78cf5efce1ede027bd207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f5:6b:a1:54:00:44:73:d0:d9:f4:05:bd:c7:
df:2b:b2:1e:e7:6a:93:bd:99:db:fe:40:a6:34:9d:
94:94:f2:bd:74:26:12:04:5e:ee:7b:61:2b:9c:d7:
8a:44:85:a5:9f:71:3a:1b:7a:ec:f8:4d:fa:22:7c:
79:da:6d:44:b4:b6:82:4c:15:08:ad:08:70:03:26:
8a:e8:9b:f9:89:dc:89:20:5d:c4:6c:1a:2d:c6:8b:
63:31:7e:46:13:11:52:38:90:4c:52:5c:b6:48:c1:
b9:35:c5:5a:4e:b6:91:4d:22:c1:5d:ff:45:93:77:
25:0f:c9:bc:a9:5b:58:d3:64:bf:81:d6:ad:63:39:
09:de:d4:69:19:5b:29:dd:72:bf:c2:70:de:41:ee:
ff:78:ae:0d:c9:3b:8c:77:67:09:08:ad:34:8f:81:
92:83:5c:a7:91:7d:fa:ab:1f:90:f6:f3:a1:45:ae:
3b:cc:d5:5c:c7:3e:73:31:ee:61:ee:a4:54:0b:98:
57:1a:ef:21:00:64:34:4f:9a:06:35:86:dd:32:36:
64:08:31:79:81:dd:db:83:5f:82:b2:d5:01:0f:0c:
bf:d3:66:14:f6:3c:8e:2b:2c:8f:46:27:d1:09:55:
80:36:f5:e0:bd:ba:6a:7a:82:a7:e0:f7:fd:f6:a7:
cb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:3A:85:33:53:32:53:8C:A1:B7:8C:F5:EF:CE:1E:DE:02:7B:D2:07
X509v3 Authority Key Identifier:
keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JTqFM1MyU4yht4z1784e3gJ70gc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.48.0/23
IPv6:
2a03:2100:45::/48
Signature Algorithm: sha256WithRSAEncryption
22:ed:b3:3d:6b:ca:1b:18:77:5e:96:39:21:12:4c:32:ce:52:
1c:05:83:41:87:0b:3f:eb:8c:07:e0:87:30:5b:2e:f0:cb:b1:
8b:e8:e1:96:7e:e1:2e:e5:80:6e:bc:77:36:91:18:34:d8:3e:
e9:d4:4a:d9:c6:a9:17:b9:6a:a7:fa:38:ff:d2:ec:db:95:42:
70:5c:8a:8a:88:04:4f:c5:1e:3e:1e:10:a8:9a:bf:96:b2:da:
73:d4:48:6b:a3:0f:b8:b9:62:d1:f7:c9:ea:55:cc:43:5d:3e:
d3:a3:7e:99:19:4b:9c:22:53:19:5c:b9:1d:4a:a8:aa:4b:00:
d7:b4:22:fb:20:06:50:cf:62:69:a2:f0:8c:38:46:73:83:eb:
19:69:0b:67:17:61:a9:4d:ab:9d:0d:ca:7b:56:32:ef:11:ed:
a2:92:8a:97:5d:1a:e2:4b:23:48:27:e3:ac:d4:02:df:ae:2d:
5f:77:28:79:8b:e0:c7:eb:3a:ea:53:3e:24:16:8c:d4:87:66:
ea:47:35:ea:81:37:65:5e:62:b6:8b:02:b1:8f:81:e0:51:d9:
09:92:70:f3:54:5c:10:85:48:3f:1f:a5:a5:e1:6a:7a:6a:ff:
c3:9e:28:3e:fb:f4:dd:bd:75:96:f0:dc:51:9d:0d:e2:5e:99:
0b:f0:69:aa
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYwwfdRGi2LtHYDYt9AsDazQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZTRhZWQzZWY3MmJlZTMxNDE2NjBkMTE0OWUxNmQwNzky
MDVmM2MwHhcNMjMxMjAzMTYyMzIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTNhODUzMzUzMzI1MzhjYTFiNzhjZjVlZmNlMWVkZTAyN2JkMjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPVroVQARHPQ2fQFvcffK7Ie52qT
vZnb/kCmNJ2UlPK9dCYSBF7ue2ErnNeKRIWln3E6G3rs+E36Inx52m1EtLaCTBUI
rQhwAyaK6Jv5idyJIF3EbBotxotjMX5GExFSOJBMUly2SMG5NcVaTraRTSLBXf9F
k3clD8m8qVtY02S/gdatYzkJ3tRpGVsp3XK/wnDeQe7/eK4NyTuMd2cJCK00j4GS
g1ynkX36qx+Q9vOhRa47zNVcxz5zMe5h7qRUC5hXGu8hAGQ0T5oGNYbdMjZkCDF5
gd3bg1+CstUBDwy/02YU9jyOKyyPRifRCVWANvXgvbpqeoKn4Pf99qfLSQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCU6hTNTMlOMobeM9e/OHt4Ce9IHMB8GA1UdIwQY
MBaAFCXkrtPvcr7jFBZg0RSeFtB5IF88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEt
ZWQzZTM4Zjk1NzdmLzEvSlRxRk0xTXlVNHlodDR6MTc4NGUzZ0o3MGdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEtZWQzZTM4Zjk1Nzdm
LzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBuawwMA8E
AgACMAkDBwAqAyEAAEUwDQYJKoZIhvcNAQELBQADggEBACLtsz1ryhsYd16WOSES
TDLOUhwFg0GHCz/rjAfghzBbLvDLsYvo4ZZ+4S7lgG68dzaRGDTYPunUStnGqRe5
aqf6OP/S7NuVQnBcioqIBE/FHj4eEKiav5ay2nPUSGujD7i5YtH3yepVzENdPtOj
fpkZS5wiUxlcuR1KqKpLANe0IvsgBlDPYmmi8Iw4RnOD6xlpC2cXYalNq50NyntW
Mu8R7aKSipddGuJLI0gn46zUAt+uLV93KHmL4MfrOupTPiQWjNSHZupHNeqBN2Ve
YraLArGPgeBR2QmScPNUXBCFSD8fpaXhanpq/8OeKD779N29dZbw3FGdDeJemQvw
aao=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:52 2024 by rpki-client on console-fra.rpki-client.org