Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/jM658T9tW9gSdGCYk8LOEmMXIBk.roa
File: jM658T9tW9gSdGCYk8LOEmMXIBk.roa (raw, json)
Hash identifier: jZRoxIPHhNlgYoVJGoh0xq6HHPQmJeZRZHvAFSaZTnA=
Subject key identifier: 8C:CE:B9:F1:3F:6D:5B:D8:12:74:60:98:93:C2:CE:12:63:17:20:19
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0188E25F00591B13895960945F04C2EB144C
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/jM658T9tW9gSdGCYk8LOEmMXIBk.roa
Signing time: Thu 22 Jun 2023 09:10:56 +0000
ROA not before: Thu 22 Jun 2023 09:10:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 18229
IP address blocks: 46.37.97.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e2:5f:00:59:1b:13:89:59:60:94:5f:04:c2:eb:14:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jun 22 09:10:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8cceb9f13f6d5bd81274609893c2ce1263172019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:39:12:23:0f:1a:78:71:e4:d7:48:20:eb:22:
76:2a:6b:fc:ea:9f:4c:56:06:77:ef:d9:36:b4:00:
46:64:95:f5:ac:16:36:37:b4:ba:ff:d1:96:81:e0:
f6:f3:5a:2d:95:c7:b4:e7:f4:c7:00:af:ac:9f:fe:
a1:e1:5f:fc:8e:ec:af:27:00:0d:f1:52:d9:18:b7:
89:8d:d0:4a:cd:5f:4e:83:30:8b:ef:33:a4:83:ef:
17:8c:4e:5b:65:32:70:dd:f2:3e:9f:fb:5f:6f:28:
84:ba:63:79:4e:8a:e0:05:1d:2b:74:8d:83:0f:86:
c9:30:4f:28:e9:b0:9d:0f:54:04:23:a6:94:35:2f:
a9:ad:90:50:7b:7c:c3:b3:fe:c7:d6:6b:41:05:cf:
07:fe:24:8c:ae:da:4d:04:e6:85:cc:7c:b8:38:d4:
6a:47:a5:71:04:fb:22:5a:60:7c:55:b9:42:cd:8a:
90:8f:1d:7d:f3:ec:5f:cb:06:7c:a5:9a:39:40:92:
f3:53:d0:9f:f8:b2:ef:a5:42:a1:25:e8:14:eb:ec:
b8:7c:78:ce:1c:c5:25:16:f7:99:b4:9b:ef:bc:54:
8e:ce:ab:c0:5a:51:98:15:80:20:22:d7:36:d8:25:
80:d5:33:36:ef:bd:91:7d:8a:54:92:e6:6f:6d:3d:
e0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CE:B9:F1:3F:6D:5B:D8:12:74:60:98:93:C2:CE:12:63:17:20:19
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/jM658T9tW9gSdGCYk8LOEmMXIBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.97.0/24
Signature Algorithm: sha256WithRSAEncryption
12:ad:c5:2c:2b:2d:ab:6d:47:2b:b7:b9:6b:53:33:85:e1:8f:
c9:c5:b6:d9:e4:4a:ea:c0:27:9a:f8:d3:78:8a:78:f5:1f:2c:
db:55:5d:fd:7b:e9:84:13:87:2c:7c:eb:47:75:03:0e:27:47:
22:b0:e6:03:83:3c:b5:fd:17:ec:b1:ac:6f:90:9b:09:3a:9a:
32:a3:a5:ac:5a:36:76:24:26:07:68:4b:2b:0b:38:c5:76:48:
de:33:73:88:32:b3:f8:df:13:6c:50:82:01:03:c7:67:b6:60:
10:f7:92:0b:94:cd:de:f4:cc:c2:47:84:d4:c1:e4:22:ef:36:
60:76:4f:7a:3d:db:ff:03:f2:28:2f:ca:fc:a4:5e:d8:96:55:
3a:13:a2:1b:e4:14:0b:b6:6e:90:67:be:6a:46:45:72:38:89:
02:9e:da:1e:65:9e:62:aa:91:0e:3b:a1:dc:56:84:dd:b8:9a:
7d:18:4e:06:72:bc:dd:5d:e0:d7:d0:6f:0b:bf:e7:f6:2a:1b:
27:c7:a8:03:cd:47:34:50:6a:63:90:fa:b5:6e:e7:47:bb:90:
0a:94:6a:f2:8b:5c:5c:db:d8:37:d2:cc:49:84:3e:bb:ce:99:
95:3a:18:62:18:85:a7:c8:67:90:ed:b0:01:05:91:16:4b:89:
21:92:86:66
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYjiXwBZGxOJWWCUXwTC6xRMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh
ZTE5MjkwHhcNMjMwNjIyMDkxMDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Y2NlYjlmMTNmNmQ1YmQ4MTI3NDYwOTg5M2MyY2UxMjYzMTcyMDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDkSIw8aeHHk10gg6yJ2Kmv86p9M
VgZ379k2tABGZJX1rBY2N7S6/9GWgeD281otlce05/THAK+sn/6h4V/8juyvJwAN
8VLZGLeJjdBKzV9OgzCL7zOkg+8XjE5bZTJw3fI+n/tfbyiEumN5TorgBR0rdI2D
D4bJME8o6bCdD1QEI6aUNS+prZBQe3zDs/7H1mtBBc8H/iSMrtpNBOaFzHy4ONRq
R6VxBPsiWmB8VblCzYqQjx198+xfywZ8pZo5QJLzU9Cf+LLvpUKhJegU6+y4fHjO
HMUlFveZtJvvvFSOzqvAWlGYFYAgItc22CWA1TM2772RfYpUkuZvbT3gtwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIzOufE/bVvYEnRgmJPCzhJjFyAZMB8GA1UdIwQY
MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt
MjMxNTQ5NDA5NzIwLzEvak02NThUOXRXOWdTZEdDWWs4TE9FbU1YSUJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw
LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiVhMA0G
CSqGSIb3DQEBCwUAA4IBAQASrcUsKy2rbUcrt7lrUzOF4Y/JxbbZ5ErqwCea+NN4
inj1HyzbVV39e+mEE4csfOtHdQMOJ0cisOYDgzy1/RfssaxvkJsJOpoyo6WsWjZ2
JCYHaEsrCzjFdkjeM3OIMrP43xNsUIIBA8dntmAQ95ILlM3e9MzCR4TUweQi7zZg
dk96Pdv/A/IoL8r8pF7YllU6E6Ib5BQLtm6QZ75qRkVyOIkCntoeZZ5iqpEOO6Hc
VoTduJp9GE4GcrzdXeDX0G8Lv+f2Khsnx6gDzUc0UGpjkPq1budHu5AKlGryi1xc
29g30sxJhD67zpmVOhhiGIWnyGeQ7bABBZEWS4khkoZm
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:54 2024 by rpki-client on console-fra.rpki-client.org