Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Jwa8P9lubx8ougJSw6IsdfvBGl8.roa
File: Jwa8P9lubx8ougJSw6IsdfvBGl8.roa (raw, json)
Hash identifier: 5CerwO04eW0UmkHvkZNJGeSDZEwT6/9CeAojOp3tewg=
Subject key identifier: 27:06:BC:3F:D9:6E:6F:1F:28:BA:02:52:C3:A2:2C:75:FB:C1:1A:5F
Certificate issuer: /CN=122a2ba3cc18c998501309ecde042706af5b845a
Certificate serial: 0185719E735FE91FFBBB3C50CD4D4F84AB56
Authority key identifier: 12:2A:2B:A3:CC:18:C9:98:50:13:09:EC:DE:04:27:06:AF:5B:84:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eioro8wYyZhQEwns3gQnBq9bhFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Jwa8P9lubx8ougJSw6IsdfvBGl8.roa
Signing time: Mon 02 Jan 2023 08:34:47 +0000
ROA not before: Mon 02 Jan 2023 08:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56690
IP address blocks: 91.226.172.0/24 maxlen: 24
185.250.60.0/22 maxlen: 22
91.226.175.0/24 maxlen: 24
91.226.173.0/24 maxlen: 24
91.226.174.0/24 maxlen: 24
2a09:8880::/36 maxlen: 36
Validation: Failed, certificate revoked on Sat 12 Aug 2023 11:20:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:73:5f:e9:1f:fb:bb:3c:50:cd:4d:4f:84:ab:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=122a2ba3cc18c998501309ecde042706af5b845a
Validity
Not Before: Jan 2 08:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2706bc3fd96e6f1f28ba0252c3a22c75fbc11a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7a:b6:c3:88:e7:d4:23:42:f6:6a:8f:61:33:
37:d8:da:16:47:5d:a7:57:c2:1f:c2:d9:00:d7:c8:
09:7a:9f:75:9c:6c:87:e1:37:1d:80:87:3e:48:fc:
6c:66:23:f6:4a:b3:ce:d9:c8:e3:4d:4f:0e:99:28:
e4:01:31:46:29:e8:ca:ba:ed:4d:e5:04:81:4f:60:
ca:23:83:59:24:bd:3d:c8:7e:65:4d:4b:89:45:e4:
b0:e6:7e:bb:b0:a1:43:7a:dc:27:de:3d:7d:58:c5:
2e:3f:2f:73:71:5a:f1:39:5a:4a:3f:73:b6:bd:3b:
88:6d:64:39:d0:92:b8:6d:89:1b:27:67:50:83:ec:
30:ab:75:f3:05:03:a9:2e:6f:a8:e0:5b:2e:5d:48:
e0:9b:fc:9b:cf:40:9a:99:4e:85:09:71:6f:09:1c:
d1:1e:a6:0f:3f:a1:b3:90:88:99:31:29:57:d5:7a:
bc:24:35:23:ba:6c:f5:6a:a0:1e:91:d4:6f:b2:bf:
97:d2:60:cd:bf:63:61:b1:75:89:bc:28:59:79:0f:
31:89:76:69:28:b5:85:46:84:96:0e:55:73:38:5e:
2c:80:bb:3a:5b:70:24:4b:3f:95:ee:3b:ac:b7:18:
0e:01:12:44:3f:55:8d:32:80:1a:db:bf:a0:7d:d6:
b8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:06:BC:3F:D9:6E:6F:1F:28:BA:02:52:C3:A2:2C:75:FB:C1:1A:5F
X509v3 Authority Key Identifier:
keyid:12:2A:2B:A3:CC:18:C9:98:50:13:09:EC:DE:04:27:06:AF:5B:84:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eioro8wYyZhQEwns3gQnBq9bhFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Jwa8P9lubx8ougJSw6IsdfvBGl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.172.0/22
185.250.60.0/22
IPv6:
2a09:8880::/36
Signature Algorithm: sha256WithRSAEncryption
06:d5:51:b8:25:06:48:c6:c0:bc:db:00:a3:ee:25:99:84:b5:
0f:e2:79:49:08:e0:47:cf:8f:d1:65:bc:4e:3a:8f:4d:56:7e:
d5:77:a8:93:1a:2f:b2:34:86:89:fc:a1:6b:ea:07:f4:39:52:
80:a8:da:41:0b:49:39:4b:88:ed:b5:f7:cf:de:d9:7d:84:4c:
10:29:c5:04:18:6e:6d:3d:2d:34:67:d2:a3:ce:92:87:4f:06:
c9:35:e8:0b:0c:ab:78:fd:77:a7:db:b4:ee:5c:33:92:4f:cb:
d4:47:54:dc:39:cb:23:40:4f:b6:bc:ad:6c:af:34:84:0d:d2:
b4:c1:a4:f4:11:2d:32:80:2b:0a:b8:ca:6f:e5:36:f1:c7:ae:
b6:ff:5e:ef:36:e0:eb:d3:92:3c:93:b5:ee:08:ea:78:9a:3d:
0c:57:ba:b2:6f:30:91:5c:9c:58:66:d0:b1:fd:bd:7e:57:4a:
23:6f:f5:db:58:74:8b:6a:fe:ec:ea:e2:07:4b:8e:39:6f:50:
d8:ea:b5:01:d4:e9:f6:e6:58:7c:d4:7c:b8:b2:a3:ef:3f:10:
26:77:dd:c2:c7:65:da:b1:6c:66:7d:19:a1:a5:86:54:05:c8:
b7:83:04:fa:e5:b5:f2:8c:da:34:95:fb:59:d4:77:bd:2f:97:
ed:c5:c4:6f
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAYVxnnNf6R/7uzxQzU1PhKtWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMmEyYmEzY2MxOGM5OTg1MDEzMDllY2RlMDQyNzA2YWY1
Yjg0NWEwHhcNMjMwMTAyMDgzNDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzA2YmMzZmQ5NmU2ZjFmMjhiYTAyNTJjM2EyMmM3NWZiYzExYTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXq2w4jn1CNC9mqPYTM32NoWR12n
V8IfwtkA18gJep91nGyH4TcdgIc+SPxsZiP2SrPO2cjjTU8OmSjkATFGKejKuu1N
5QSBT2DKI4NZJL09yH5lTUuJReSw5n67sKFDetwn3j19WMUuPy9zcVrxOVpKP3O2
vTuIbWQ50JK4bYkbJ2dQg+wwq3XzBQOpLm+o4FsuXUjgm/ybz0CamU6FCXFvCRzR
HqYPP6GzkIiZMSlX1Xq8JDUjumz1aqAekdRvsr+X0mDNv2NhsXWJvChZeQ8xiXZp
KLWFRoSWDlVzOF4sgLs6W3AkSz+V7justxgOARJEP1WNMoAa27+gfda4jwIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFCcGvD/Zbm8fKLoCUsOiLHX7wRpfMB8GA1UdIwQY
MBaAFBIqK6PMGMmYUBMJ7N4EJwavW4RaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWlvcm84d1l5WmhRRXduczNnUW5CcTliaEZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mOTY0MzAtNjJkNC00MzEwLTg0OTMt
YWUxYWExNjU0Y2RlLzEvSndhOFA5bHVieDhvdWdKU3c2SXNkZnZCR2w4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9mOTY0MzAtNjJkNC00MzEwLTg0OTMtYWUxYWExNjU0Y2Rl
LzEvRWlvcm84d1l5WmhRRXduczNnUW5CcTliaEZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQCW+KsAwQC
ufo8MA4EAgACMAgDBgQqCYiAADANBgkqhkiG9w0BAQsFAAOCAQEABtVRuCUGSMbA
vNsAo+4lmYS1D+J5SQjgR8+P0WW8TjqPTVZ+1XeokxovsjSGifyha+oH9DlSgKja
QQtJOUuI7bX3z97ZfYRMECnFBBhubT0tNGfSo86Sh08GyTXoCwyreP13p9u07lwz
kk/L1EdU3DnLI0BPtrytbK80hA3StMGk9BEtMoArCrjKb+U28ceutv9e7zbg69OS
PJO17gjqeJo9DFe6sm8wkVycWGbQsf29fldKI2/121h0i2r+7OriB0uOOW9Q2Oq1
AdTp9uZYfNR8uLKj7z8QJnfdwsdl2rFsZn0ZoaWGVAXIt4ME+uW18ozaNJX7WdR3
vS+X7cXEbw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-fra.rpki-client.org