Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/JtmUF5AvzE0XJHej-1UTZaBKUD4.roa
File: JtmUF5AvzE0XJHej-1UTZaBKUD4.roa (raw, json)
Hash identifier: gDCOlZX/52kHWkEJ/rk/2sZKuhBYzeS5Ven/eOWO3io=
Subject key identifier: 26:D9:94:17:90:2F:CC:4D:17:24:77:A3:FB:55:13:65:A0:4A:50:3E
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 018B5D84C0EBB197CCB3885BBD4B77C7FC68
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/JtmUF5AvzE0XJHej-1UTZaBKUD4.roa
Signing time: Mon 23 Oct 2023 17:11:03 +0000
ROA not before: Mon 23 Oct 2023 17:11:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203363
IP address blocks: 193.176.28.0/24 maxlen: 24
178.239.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5d:84:c0:eb:b1:97:cc:b3:88:5b:bd:4b:77:c7:fc:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Oct 23 17:11:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26d99417902fcc4d172477a3fb551365a04a503e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f2:0f:e9:10:7d:79:66:99:49:e1:ed:72:e7:
61:b3:81:3a:cc:9e:50:4d:62:d3:52:a4:2e:2b:30:
21:f9:82:82:24:70:9e:41:79:62:61:d6:38:08:53:
9d:4d:88:90:b0:de:53:97:4b:8a:89:02:98:c3:6c:
e6:63:b3:b7:08:72:8e:43:9d:4d:df:0f:c1:e2:b1:
02:25:c0:0c:52:f4:8a:54:b5:55:39:56:1b:94:e0:
5f:16:3c:b8:ab:30:94:e0:ba:1f:e6:59:47:40:77:
7d:79:76:f3:10:e6:75:3f:51:4e:74:a3:91:f8:7d:
fc:5e:fe:f5:8b:2b:7f:ac:5a:0f:86:b3:7c:4d:43:
b7:b8:11:56:20:21:90:5a:2e:2e:fd:c1:fa:e2:2b:
6d:e9:1f:3d:51:49:ab:26:cb:b6:8a:8c:21:93:29:
c4:ec:ba:96:9a:87:c2:7c:cd:82:42:32:1f:b4:31:
f4:da:98:62:8f:82:7e:76:f1:75:92:ce:9d:9d:f4:
9d:c0:3b:90:df:97:ce:a7:8f:3a:11:31:10:b3:c9:
6c:22:81:2a:65:d5:f5:33:2a:16:92:af:16:74:0f:
9c:0d:01:7e:69:af:ce:8f:67:aa:65:ad:c7:4d:36:
f3:c6:de:1c:6d:0d:83:14:38:46:e8:3c:b2:ed:5b:
04:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D9:94:17:90:2F:CC:4D:17:24:77:A3:FB:55:13:65:A0:4A:50:3E
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/JtmUF5AvzE0XJHej-1UTZaBKUD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.174.0/24
193.176.28.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:39:38:a3:e1:e4:01:08:6f:a6:40:90:7e:4f:a5:5d:5e:dc:
bd:6d:9a:1a:aa:cd:6f:f6:21:90:89:2d:4a:4d:7c:8c:67:aa:
f6:f1:7e:79:f5:57:83:a0:e9:ee:ed:fd:bf:fc:15:3d:8e:46:
d1:49:69:6a:b9:51:0e:57:cf:8e:af:26:08:8b:9a:5e:2d:74:
06:a3:cd:a6:1d:cc:35:d9:34:9c:4a:ba:06:2b:3c:73:d1:5e:
14:1c:a2:90:5a:99:b9:5f:d5:e8:98:36:73:76:2b:8f:5c:11:
9c:69:71:09:f1:29:31:1c:6e:f1:b7:1e:4c:85:cd:68:0c:e3:
0e:29:c5:2a:a4:f6:44:a5:c7:fc:b3:f7:75:c4:37:5d:45:6a:
c2:2d:62:c1:0a:d2:42:7c:0b:1c:22:64:89:30:1e:27:1e:4d:
22:63:73:09:d6:40:25:84:97:44:15:d6:13:3c:5a:2f:e1:c4:
b6:23:01:bd:af:34:41:bc:2d:4d:46:f9:6e:2c:5c:ba:d6:de:
98:64:f1:17:fb:67:fd:87:1f:9a:37:ce:d1:dc:b4:87:03:2b:
87:2b:e7:97:f8:c8:0a:fe:4b:f3:fe:31:db:79:7a:23:11:b3:
90:5f:47:f5:f5:11:b0:92:b8:fb:a6:e6:49:fe:16:c8:64:3e:
7c:28:8c:47
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYtdhMDrsZfMs4hbvUt3x/xoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMzdjYzhmMTZiM2M2Y2JkMzM0NmFhM2VkNjE3NzFmM2U4
M2FjOTcwHhcNMjMxMDIzMTcxMTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNmQ5OTQxNzkwMmZjYzRkMTcyNDc3YTNmYjU1MTM2NWEwNGE1MDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/IP6RB9eWaZSeHtcudhs4E6zJ5Q
TWLTUqQuKzAh+YKCJHCeQXliYdY4CFOdTYiQsN5Tl0uKiQKYw2zmY7O3CHKOQ51N
3w/B4rECJcAMUvSKVLVVOVYblOBfFjy4qzCU4Lof5llHQHd9eXbzEOZ1P1FOdKOR
+H38Xv71iyt/rFoPhrN8TUO3uBFWICGQWi4u/cH64itt6R89UUmrJsu2iowhkynE
7LqWmofCfM2CQjIftDH02phij4J+dvF1ks6dnfSdwDuQ35fOp486ETEQs8lsIoEq
ZdX1MyoWkq8WdA+cDQF+aa/Oj2eqZa3HTTbzxt4cbQ2DFDhG6Dyy7VsEkwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCbZlBeQL8xNFyR3o/tVE2WgSlA+MB8GA1UdIwQY
MBaAFP03zI8Ws8bL0zRqo+1hdx8+g6yXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMt
N2UwNWFiNDFiNmU0LzEvSnRtVUY1QXZ6RTBYSkhlai0xVVRaYUJLVUQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMtN2UwNWFiNDFiNmU0
LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAsu+uAwQA
wbAcMA0GCSqGSIb3DQEBCwUAA4IBAQCrOTij4eQBCG+mQJB+T6VdXty9bZoaqs1v
9iGQiS1KTXyMZ6r28X559VeDoOnu7f2//BU9jkbRSWlquVEOV8+OryYIi5peLXQG
o82mHcw12TScSroGKzxz0V4UHKKQWpm5X9XomDZzdiuPXBGcaXEJ8SkxHG7xtx5M
hc1oDOMOKcUqpPZEpcf8s/d1xDddRWrCLWLBCtJCfAscImSJMB4nHk0iY3MJ1kAl
hJdEFdYTPFov4cS2IwG9rzRBvC1NRvluLFy61t6YZPEX+2f9hx+aN87R3LSHAyuH
K+eX+MgK/kvz/jHbeXojEbOQX0f19RGwkrj7puZJ/hbIZD58KIxH
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:32 2024 by rpki-client on console-ams.rpki-client.org