Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/0e83e8-151d-4f80-b61d-17e0d24c32c1/1/Jp5IFlZ8ISJNAevpqlCSkLV3ELo.roa
File: Jp5IFlZ8ISJNAevpqlCSkLV3ELo.roa (raw, json)
Hash identifier: 8xx+BusQyEB6W+m5rFzQR/W2BCBRpC6x6GdrughdSd0=
Subject key identifier: 26:9E:48:16:56:7C:21:22:4D:01:EB:E9:AA:50:92:90:B5:77:10:BA
Certificate issuer: /CN=712d0af87b0662f31e483e01efefc02a74326355
Certificate serial: 018CC8025329965B6FFA74E84D1742898DA1
Authority key identifier: 71:2D:0A:F8:7B:06:62:F3:1E:48:3E:01:EF:EF:C0:2A:74:32:63:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS0K-HsGYvMeSD4B7-_AKnQyY1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/0e83e8-151d-4f80-b61d-17e0d24c32c1/1/Jp5IFlZ8ISJNAevpqlCSkLV3ELo.roa
Signing time: Tue 02 Jan 2024 02:30:44 +0000
ROA not before: Tue 02 Jan 2024 02:30:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43451
IP address blocks: 176.106.188.0/22 maxlen: 22
193.93.74.0/23 maxlen: 23
193.93.72.0/22 maxlen: 22
193.93.72.0/23 maxlen: 23
176.106.184.0/22 maxlen: 22
176.106.184.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 27 Aug 2024 09:55:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:53:29:96:5b:6f:fa:74:e8:4d:17:42:89:8d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712d0af87b0662f31e483e01efefc02a74326355
Validity
Not Before: Jan 2 02:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=269e4816567c21224d01ebe9aa509290b57710ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0b:6c:03:d2:1e:ad:be:ae:71:90:f6:93:e1:
81:af:00:58:f7:64:37:e6:26:3f:f6:a6:b3:25:59:
60:c6:ad:ce:6a:9a:c7:e8:48:90:45:cd:66:77:6d:
89:66:7f:de:01:59:b5:33:5b:09:0d:78:64:af:fe:
2a:d7:1c:f2:34:e6:9f:33:3f:d8:6c:23:ae:78:bd:
02:bb:b3:37:6c:53:f7:eb:af:b4:66:8d:ae:ae:db:
fa:89:f2:45:07:ba:66:8d:aa:68:a7:31:0c:df:8d:
b5:3e:6a:c8:64:0b:a5:02:be:19:a7:b4:73:dc:69:
da:19:e1:e0:7f:2a:b2:26:5f:a4:37:5e:c4:47:20:
b8:6f:8b:cd:08:b2:88:dd:65:d3:ca:28:de:e3:0c:
ab:ba:76:60:1b:cf:4e:be:95:5e:48:45:3e:11:7d:
9e:31:a7:db:b1:d8:47:75:ad:56:0c:8a:20:39:2a:
14:bf:58:54:7e:72:61:c5:57:68:f9:ad:9a:44:f2:
89:f1:5a:2c:c6:1c:a2:e8:ed:80:e5:f3:6c:96:41:
c3:15:8d:ee:c9:89:2d:25:c2:e5:c4:29:9e:0a:9b:
33:56:cd:15:84:cd:06:d4:0e:e4:5f:81:aa:71:6c:
5d:2e:e4:a8:f4:8c:fa:73:07:56:42:40:44:3f:92:
15:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:9E:48:16:56:7C:21:22:4D:01:EB:E9:AA:50:92:90:B5:77:10:BA
X509v3 Authority Key Identifier:
keyid:71:2D:0A:F8:7B:06:62:F3:1E:48:3E:01:EF:EF:C0:2A:74:32:63:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS0K-HsGYvMeSD4B7-_AKnQyY1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/0e83e8-151d-4f80-b61d-17e0d24c32c1/1/Jp5IFlZ8ISJNAevpqlCSkLV3ELo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/0e83e8-151d-4f80-b61d-17e0d24c32c1/1/cS0K-HsGYvMeSD4B7-_AKnQyY1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.106.184.0/21
193.93.72.0/22
Signature Algorithm: sha256WithRSAEncryption
af:c1:03:09:a5:90:ca:07:ae:a1:49:7a:4f:48:1b:ec:b1:53:
c7:73:ad:25:51:1a:4e:5f:17:3c:26:df:3e:6a:c5:69:f8:2d:
c8:a8:a1:30:a4:0a:29:8f:b9:8b:bc:92:02:98:0a:1c:54:20:
3e:4b:9b:23:ed:5f:a7:01:7a:62:3b:1a:d8:3d:66:4c:bf:81:
32:f4:78:35:2c:ae:75:f3:f9:ca:a1:65:2e:8a:c4:64:7f:cf:
61:5f:70:8a:70:15:ce:6b:7b:07:b2:42:da:62:da:15:45:f5:
1d:1e:f9:40:00:5a:f3:f4:47:94:3f:3a:f6:d7:10:7a:50:5c:
36:e3:9c:3d:68:95:1c:57:b7:11:59:f3:1c:7c:53:fc:0e:91:
42:80:ad:69:41:2b:35:87:0c:c4:0c:bf:d9:42:c2:79:35:a2:
30:37:0b:3f:ed:ef:bf:0a:c5:05:c4:e7:75:94:60:b6:b6:c1:
12:70:b3:4c:11:e2:ae:39:b2:2a:9f:66:20:da:b5:eb:af:d7:
8c:2a:43:04:4c:90:a5:25:c8:a7:f8:8a:32:50:61:dd:51:03:
e3:55:c7:83:98:b5:cf:7b:0c:4f:0d:78:c0:f0:53:7a:14:2a:
0a:3f:2c:92:8c:af:0a:60:89:14:5a:17:34:c6:42:b3:9b:d7:
dd:3d:1b:8e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzIAlMplltv+nToTRdCiY2hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMmQwYWY4N2IwNjYyZjMxZTQ4M2UwMWVmZWZjMDJhNzQz
MjYzNTUwHhcNMjQwMTAyMDIzMDQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjllNDgxNjU2N2MyMTIyNGQwMWViZTlhYTUwOTI5MGI1NzcxMGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngtsA9Ierb6ucZD2k+GBrwBY92Q3
5iY/9qazJVlgxq3OaprH6EiQRc1md22JZn/eAVm1M1sJDXhkr/4q1xzyNOafMz/Y
bCOueL0Cu7M3bFP366+0Zo2urtv6ifJFB7pmjapopzEM3421PmrIZAulAr4Zp7Rz
3GnaGeHgfyqyJl+kN17ERyC4b4vNCLKI3WXTyije4wyrunZgG89OvpVeSEU+EX2e
MafbsdhHda1WDIogOSoUv1hUfnJhxVdo+a2aRPKJ8Vosxhyi6O2A5fNslkHDFY3u
yYktJcLlxCmeCpszVs0VhM0G1A7kX4GqcWxdLuSo9Iz6cwdWQkBEP5IVCQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCaeSBZWfCEiTQHr6apQkpC1dxC6MB8GA1UdIwQY
MBaAFHEtCvh7BmLzHkg+Ae/vwCp0MmNVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1MwSy1Ic0dZdk1lU0Q0QjctX0FLblF5WTFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8wZTgzZTgtMTUxZC00ZjgwLWI2MWQt
MTdlMGQyNGMzMmMxLzEvSnA1SUZsWjhJU0pOQWV2cHFsQ1NrTFYzRUxvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8wZTgzZTgtMTUxZC00ZjgwLWI2MWQtMTdlMGQyNGMzMmMx
LzEvY1MwSy1Ic0dZdk1lU0Q0QjctX0FLblF5WTFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDsGq4AwQC
wV1IMA0GCSqGSIb3DQEBCwUAA4IBAQCvwQMJpZDKB66hSXpPSBvssVPHc60lURpO
Xxc8Jt8+asVp+C3IqKEwpAopj7mLvJICmAocVCA+S5sj7V+nAXpiOxrYPWZMv4Ey
9Hg1LK518/nKoWUuisRkf89hX3CKcBXOa3sHskLaYtoVRfUdHvlAAFrz9EeUPzr2
1xB6UFw245w9aJUcV7cRWfMcfFP8DpFCgK1pQSs1hwzEDL/ZQsJ5NaIwNws/7e+/
CsUFxOd1lGC2tsEScLNMEeKuObIqn2Yg2rXrr9eMKkMETJClJcin+IoyUGHdUQPj
VceDmLXPewxPDXjA8FN6FCoKPyySjK8KYIkUWhc0xkKzm9fdPRuO
-----END CERTIFICATE-----
Generated at Tue Aug 27 13:22:43 2024 by rpki-client on console-ams.rpki-client.org