Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/jsWYV8fHFzY0Y27ZQH8C4g3cj2A.roa
File: jsWYV8fHFzY0Y27ZQH8C4g3cj2A.roa (raw, json)
Hash identifier: vjj92hHNrOtZ1cixCuh/CT3TSgoatA1y1ytxtF5vikw=
Subject key identifier: 8E:C5:98:57:C7:C7:17:36:34:63:6E:D9:40:7F:02:E2:0D:DC:8F:60
Certificate issuer: /CN=bb8d64a0dc21996b1c99e68cc951694e293edefe
Certificate serial: 018571BA03EC1718781387EC31893E54EF0B
Authority key identifier: BB:8D:64:A0:DC:21:99:6B:1C:99:E6:8C:C9:51:69:4E:29:3E:DE:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/jsWYV8fHFzY0Y27ZQH8C4g3cj2A.roa
Signing time: Mon 02 Jan 2023 09:04:54 +0000
ROA not before: Mon 02 Jan 2023 09:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29286
IP address blocks: 185.71.116.0/24 maxlen: 24
185.71.118.0/24 maxlen: 24
185.71.117.0/24 maxlen: 24
185.71.119.0/24 maxlen: 24
212.50.35.0/24 maxlen: 24
212.50.43.0/24 maxlen: 24
212.50.42.0/24 maxlen: 24
212.50.51.0/24 maxlen: 24
212.50.50.0/24 maxlen: 24
212.50.47.0/24 maxlen: 24
212.50.46.0/24 maxlen: 24
212.50.49.0/24 maxlen: 24
212.50.48.0/24 maxlen: 24
212.50.45.0/24 maxlen: 24
212.50.52.0/24 maxlen: 24
212.50.58.0/24 maxlen: 24
212.50.57.0/24 maxlen: 24
212.50.53.0/24 maxlen: 24
212.50.56.0/24 maxlen: 24
212.50.60.0/24 maxlen: 24
212.50.63.0/24 maxlen: 24
212.50.62.0/24 maxlen: 24
212.50.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:ba:03:ec:17:18:78:13:87:ec:31:89:3e:54:ef:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8d64a0dc21996b1c99e68cc951694e293edefe
Validity
Not Before: Jan 2 09:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ec59857c7c7173634636ed9407f02e20ddc8f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:52:61:e9:49:77:88:15:33:8d:ab:4f:86:61:
a0:3b:b2:ec:47:64:8c:06:20:5f:e4:2e:ca:dd:7e:
a7:6b:20:43:b2:5d:2b:dc:9b:c3:10:39:1f:c9:f9:
51:25:9c:c6:0a:98:d9:25:5a:44:be:f4:54:70:ca:
cb:b4:bc:8d:fa:9b:49:99:a5:6a:9e:22:7b:f6:95:
e7:fb:68:03:54:a7:4b:ed:a7:a6:ae:3d:34:95:d9:
0d:cc:ad:e6:1f:9d:e0:00:e0:4f:ed:9a:14:d0:68:
73:f4:2b:f3:7b:82:87:9c:3a:8f:ec:fd:76:ff:1d:
ff:4a:6a:cb:50:1a:6a:6e:0c:61:13:c5:57:c9:95:
cc:7f:d7:9d:71:f4:1a:c1:22:97:7e:d7:4a:1f:19:
bc:36:b7:1d:89:30:e0:1b:67:d5:47:43:e0:83:f6:
38:dc:48:b5:b6:79:04:d9:04:2f:39:16:79:0f:39:
35:92:91:88:bc:7c:06:52:3a:fa:84:2a:9a:39:ca:
83:af:af:ff:21:36:e3:21:4c:4e:b8:49:1b:40:8b:
94:08:27:c4:d8:1c:7b:a3:8b:fe:ae:8a:a5:c8:24:
9c:40:73:69:e4:12:50:4d:43:01:6e:3e:46:01:65:
72:8b:bf:d8:6d:54:0c:48:55:ef:59:12:ee:a4:6b:
a2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C5:98:57:C7:C7:17:36:34:63:6E:D9:40:7F:02:E2:0D:DC:8F:60
X509v3 Authority Key Identifier:
keyid:BB:8D:64:A0:DC:21:99:6B:1C:99:E6:8C:C9:51:69:4E:29:3E:DE:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/jsWYV8fHFzY0Y27ZQH8C4g3cj2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.116.0/22
212.50.35.0/24
212.50.42.0/23
212.50.45.0-212.50.53.255
212.50.56.0-212.50.60.255
212.50.62.0/23
Signature Algorithm: sha256WithRSAEncryption
17:5b:b7:14:d2:a0:41:bd:07:c8:8c:6b:bc:08:f9:a6:1c:5d:
40:ee:ec:82:04:b0:f3:fa:b0:dd:46:4e:fd:bd:1f:a0:6c:b6:
4a:42:b1:b1:71:12:0d:d2:92:fc:e4:86:a0:ee:f3:44:0b:5a:
3a:81:93:42:7c:ff:ff:96:40:ae:2a:0e:d3:f6:ca:ef:d6:95:
0d:c9:65:e6:da:68:13:71:b8:80:16:d2:0b:cc:60:a8:26:4c:
8c:7c:0b:89:ce:35:0a:ab:d7:4c:27:39:f3:20:3c:6c:81:09:
f3:5c:0c:a7:68:81:6d:d7:41:75:ef:0e:14:6b:c5:22:13:23:
21:f8:ac:ef:02:27:73:9b:18:44:82:b8:d9:2b:ed:e6:ee:27:
22:0a:0f:69:6d:13:7e:66:a9:66:96:4a:6b:2d:35:c7:ff:6b:
63:80:2c:c9:27:9a:0e:cd:52:a4:fc:2a:a5:9d:6f:50:ca:19:
c7:05:79:17:e1:0b:85:de:fb:80:5c:5c:c8:e9:5e:ec:91:f9:
c7:91:6f:3e:23:a5:14:15:51:69:4a:09:65:88:1d:11:9f:69:
7d:7f:cc:47:05:49:f6:6f:ee:77:e1:f1:e9:a6:a4:a9:3b:8d:
bb:78:ca:8d:ee:04:e4:91:80:74:7b:25:44:6b:00:52:45:e9:
90:5d:16:ef
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgISAYVxugPsFxh4E4fsMYk+VO8LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiOGQ2NGEwZGMyMTk5NmIxYzk5ZTY4Y2M5NTE2OTRlMjkz
ZWRlZmUwHhcNMjMwMTAyMDkwNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZWM1OTg1N2M3YzcxNzM2MzQ2MzZlZDk0MDdmMDJlMjBkZGM4ZjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplJh6Ul3iBUzjatPhmGgO7LsR2SM
BiBf5C7K3X6nayBDsl0r3JvDEDkfyflRJZzGCpjZJVpEvvRUcMrLtLyN+ptJmaVq
niJ79pXn+2gDVKdL7aemrj00ldkNzK3mH53gAOBP7ZoU0Ghz9Cvze4KHnDqP7P12
/x3/SmrLUBpqbgxhE8VXyZXMf9edcfQawSKXftdKHxm8NrcdiTDgG2fVR0Pgg/Y4
3Ei1tnkE2QQvORZ5Dzk1kpGIvHwGUjr6hCqaOcqDr6//ITbjIUxOuEkbQIuUCCfE
2Bx7o4v+roqlyCScQHNp5BJQTUMBbj5GAWVyi7/YbVQMSFXvWRLupGuiCwIDAQAB
o4ICNzCCAjMwHQYDVR0OBBYEFI7FmFfHxxc2NGNu2UB/AuIN3I9gMB8GA1UdIwQY
MBaAFLuNZKDcIZlrHJnmjMlRaU4pPt7+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTQxa29Od2htV3NjbWVhTXlWRnBUaWstM3Y0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8yMjAzMTgtNDZmMS00ZWJmLWE3OTUt
ZGQ0YTIxN2Q2MDZiLzEvanNXWVY4ZkhGelkwWTI3WlFIOEM0ZzNjajJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8yMjAzMTgtNDZmMS00ZWJmLWE3OTUtZGQ0YTIxN2Q2MDZi
LzEvdTQxa29Od2htV3NjbWVhTXlWRnBUaWstM3Y0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0AwQCuUd0AwQA
1DIjAwQB1DIqMAwDBADUMi0DBAHUMjQwDAMEA9QyOAMEANQyPAMEAdQyPjANBgkq
hkiG9w0BAQsFAAOCAQEAF1u3FNKgQb0HyIxrvAj5phxdQO7sggSw8/qw3UZO/b0f
oGy2SkKxsXESDdKS/OSGoO7zRAtaOoGTQnz//5ZArioO0/bK79aVDcll5tpoE3G4
gBbSC8xgqCZMjHwLic41CqvXTCc58yA8bIEJ81wMp2iBbddBde8OFGvFIhMjIfis
7wInc5sYRIK42Svt5u4nIgoPaW0TfmapZpZKay01x/9rY4AsySeaDs1SpPwqpZ1v
UMoZxwV5F+ELhd77gFxcyOle7JH5x5FvPiOlFBVRaUoJZYgdEZ9pfX/MRwVJ9m/u
d+Hx6aakqTuNu3jKje4E5JGAdHslRGsAUkXpkF0W7w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:11 2024 by rpki-client on console-ams.rpki-client.org