Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/JKWS7bhiPeGDHkUVfQ_s8hb7YhY.roa
File: JKWS7bhiPeGDHkUVfQ_s8hb7YhY.roa (raw, json)
Hash identifier: ezkzIFw/0pypdY6sznm560ddO7/NFJBSfMMd7D1Vlf8=
Subject key identifier: 24:A5:92:ED:B8:62:3D:E1:83:1E:45:15:7D:0F:EC:F2:16:FB:62:16
Certificate issuer: /CN=7e1167886da81524431bbf2efb0572914b686ebc
Certificate serial: 0190311B5AAB54CB26841642288A7D12C38B
Authority key identifier: 7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/JKWS7bhiPeGDHkUVfQ_s8hb7YhY.roa
Signing time: Wed 19 Jun 2024 15:26:34 +0000
ROA not before: Wed 19 Jun 2024 15:26:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3356
IP address blocks: 195.160.0.0/18 maxlen: 18
195.160.96.0/19 maxlen: 19
195.160.148.0/24 maxlen: 24
195.160.149.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Aug 2024 13:41:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:31:1b:5a:ab:54:cb:26:84:16:42:28:8a:7d:12:c3:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e1167886da81524431bbf2efb0572914b686ebc
Validity
Not Before: Jun 19 15:26:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24a592edb8623de1831e45157d0fecf216fb6216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:69:41:43:d9:94:85:25:fd:46:21:69:2c:7c:
bf:db:f8:39:f4:13:56:d2:3b:3f:e7:b3:2f:32:04:
53:73:fb:d5:4f:83:fa:07:87:fd:7b:96:80:e7:bc:
83:6c:e9:a5:36:b6:ef:81:fc:e6:0f:3a:95:9f:6f:
99:a2:b3:b3:38:19:5d:5e:0b:52:fc:8f:14:d6:cf:
0d:44:d9:52:d0:ee:ae:f6:ec:d3:ab:17:28:43:c6:
41:61:76:f2:58:7d:69:6c:b2:27:fc:5c:55:c6:f9:
ec:b3:6f:c7:44:7a:9a:bc:3a:7c:b2:5d:34:e1:72:
a8:de:80:3c:58:cc:9a:8c:7e:a5:4f:d7:80:36:eb:
e9:d2:3a:8d:c8:72:af:7c:7e:fe:94:f7:26:f3:92:
91:2e:2d:47:e5:3f:ea:df:9d:bd:0d:cb:df:db:f2:
e3:eb:a2:39:9a:2a:4c:2c:43:3a:98:b3:c8:7a:39:
1d:ba:59:90:37:32:f2:ae:76:a1:70:3c:98:ee:9c:
60:73:95:ed:51:6b:b4:05:c6:c0:49:49:38:e7:31:
9b:1b:67:4b:7a:1c:25:b4:f5:7a:b0:cd:ad:5b:0f:
d6:cb:ba:1d:85:d4:ff:35:df:7b:36:45:4d:9c:5d:
a5:c5:a3:7b:11:3f:91:c4:fd:fa:18:89:e8:02:dd:
45:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A5:92:ED:B8:62:3D:E1:83:1E:45:15:7D:0F:EC:F2:16:FB:62:16
X509v3 Authority Key Identifier:
keyid:7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/JKWS7bhiPeGDHkUVfQ_s8hb7YhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.160.0.0/18
195.160.96.0/19
195.160.148.0/23
Signature Algorithm: sha256WithRSAEncryption
43:28:f3:7a:cb:fa:e1:ae:4b:50:40:44:91:c2:f8:9f:73:28:
c2:da:ba:78:4f:a9:e7:d6:fe:24:78:d7:7c:41:31:f1:04:a7:
76:3e:d0:90:c0:40:44:6e:1d:50:fd:b2:b8:bd:be:4e:6b:87:
54:96:0b:d4:4d:72:f6:a2:71:fa:f7:7e:b7:2d:30:e3:06:99:
7b:6c:30:b9:c5:b7:fb:55:d8:81:44:8a:18:38:ff:9a:07:36:
27:e7:cf:57:4b:bc:2d:06:98:5d:32:b3:30:d8:85:13:7e:ce:
15:91:3a:36:65:2c:d6:c8:d6:e4:08:c7:79:b4:86:0f:08:74:
d0:2c:e1:4d:55:66:58:3f:82:eb:59:e1:e0:32:36:ff:73:c4:
70:9a:bf:af:ea:ad:29:18:10:66:53:3d:ca:a4:23:fc:f9:4d:
0b:0c:a2:69:3b:c2:30:82:5b:a1:4d:b9:0b:3d:84:e0:78:36:
c5:24:c9:1f:bc:f8:ca:d5:bc:9c:24:22:c5:75:9f:c5:09:e8:
9e:56:24:fc:00:0b:af:b6:01:b0:26:10:61:bf:30:e3:09:fb:
1f:de:3d:53:61:d4:f0:37:48:b6:5a:09:f5:4b:15:3e:cf:fc:
3c:30:d9:f6:3d:73:fb:38:a9:54:64:7f:0f:d6:d7:ff:21:c5:
20:73:17:5b
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZAxG1qrVMsmhBZCKIp9EsOLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMTE2Nzg4NmRhODE1MjQ0MzFiYmYyZWZiMDU3MjkxNGI2
ODZlYmMwHhcNMjQwNjE5MTUyNjM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNGE1OTJlZGI4NjIzZGUxODMxZTQ1MTU3ZDBmZWNmMjE2ZmI2MjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWlBQ9mUhSX9RiFpLHy/2/g59BNW
0js/57MvMgRTc/vVT4P6B4f9e5aA57yDbOmlNrbvgfzmDzqVn2+ZorOzOBldXgtS
/I8U1s8NRNlS0O6u9uzTqxcoQ8ZBYXbyWH1pbLIn/FxVxvnss2/HRHqavDp8sl00
4XKo3oA8WMyajH6lT9eANuvp0jqNyHKvfH7+lPcm85KRLi1H5T/q3529Dcvf2/Lj
66I5mipMLEM6mLPIejkdulmQNzLyrnahcDyY7pxgc5XtUWu0BcbASUk45zGbG2dL
ehwltPV6sM2tWw/Wy7odhdT/Nd97NkVNnF2lxaN7ET+RxP36GInoAt1F1wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCSlku24Yj3hgx5FFX0P7PIW+2IWMB8GA1UdIwQY
MBaAFH4RZ4htqBUkQxu/LvsFcpFLaG68MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmhGbmlHMm9GU1JERzc4dS13VnlrVXRvYnJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9mOTJjZDctNjQ2Yy00NDFiLWFlNDYt
OWIyODJjNjQzMjU2LzEvSktXUzdiaGlQZUdESGtVVmZRX3M4aGI3WWhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9mOTJjZDctNjQ2Yy00NDFiLWFlNDYtOWIyODJjNjQzMjU2
LzEvZmhGbmlHMm9GU1JERzc4dS13VnlrVXRvYnJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQGw6AAAwQF
w6BgAwQBw6CUMA0GCSqGSIb3DQEBCwUAA4IBAQBDKPN6y/rhrktQQESRwvifcyjC
2rp4T6nn1v4keNd8QTHxBKd2PtCQwEBEbh1Q/bK4vb5Oa4dUlgvUTXL2onH69363
LTDjBpl7bDC5xbf7VdiBRIoYOP+aBzYn589XS7wtBphdMrMw2IUTfs4VkTo2ZSzW
yNbkCMd5tIYPCHTQLOFNVWZYP4LrWeHgMjb/c8Rwmr+v6q0pGBBmUz3KpCP8+U0L
DKJpO8IwgluhTbkLPYTgeDbFJMkfvPjK1bycJCLFdZ/FCeieViT8AAuvtgGwJhBh
vzDjCfsf3j1TYdTwN0i2Wgn1SxU+z/w8MNn2PXP7OKlUZH8P1tf/IcUgcxdb
-----END CERTIFICATE-----
Generated at Fri Aug 23 20:10:36 2024 by rpki-client on console-ams.rpki-client.org