Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/JvCCcyxf3qXthtlXWwTclbiE1pQ.roa
File: JvCCcyxf3qXthtlXWwTclbiE1pQ.roa (raw, json)
Hash identifier: uWbyrImKlWZAe4kOvzGd6MEqgLEWSq/1Tf8jHoYlu00=
Subject key identifier: 26:F0:82:73:2C:5F:DE:A5:ED:86:D9:57:5B:04:DC:95:B8:84:D6:94
Certificate issuer: /CN=3a6e2e7ff2c702c8ab5149feea7175991c73409c
Certificate serial: 018C8CAA452372033C41C22F413ACE4CE839
Authority key identifier: 3A:6E:2E:7F:F2:C7:02:C8:AB:51:49:FE:EA:71:75:99:1C:73:40:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Om4uf_LHAsirUUn-6nF1mRxzQJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/JvCCcyxf3qXthtlXWwTclbiE1pQ.roa
Signing time: Thu 21 Dec 2023 13:56:58 +0000
ROA not before: Thu 21 Dec 2023 13:56:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8400
IP address blocks: 185.125.176.0/23 maxlen: 23
212.57.44.0/22 maxlen: 22
212.57.42.0/23 maxlen: 23
212.57.40.0/21 maxlen: 21
93.92.248.0/21 maxlen: 21
37.35.8.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8c:aa:45:23:72:03:3c:41:c2:2f:41:3a:ce:4c:e8:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a6e2e7ff2c702c8ab5149feea7175991c73409c
Validity
Not Before: Dec 21 13:56:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26f082732c5fdea5ed86d9575b04dc95b884d694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4c:5e:e0:6f:4d:03:4a:5d:7d:5d:b8:e4:6f:
c2:91:0d:9a:04:4e:f9:2d:70:78:80:27:58:d3:a1:
8f:40:63:49:81:a9:b9:94:80:9b:6b:c3:ce:2d:e5:
b7:4a:b0:a4:68:66:bf:bc:88:0a:83:6a:6f:a7:6c:
7d:11:4e:c2:6b:78:4f:eb:b6:17:58:f4:7b:e1:66:
67:a5:df:c2:3f:38:4f:80:8a:15:60:48:14:6c:70:
58:fa:2e:17:4b:fa:07:db:dd:3b:27:e6:a2:06:5b:
0a:20:53:69:5c:df:b0:8d:94:d1:cc:23:a9:1e:ba:
a6:0e:1a:f9:d0:49:83:6a:7a:41:0c:19:bc:c0:d4:
fd:45:93:f6:78:72:8d:ae:d3:03:5a:15:51:8f:99:
23:60:aa:e5:cc:1d:d9:dc:1e:67:cd:79:02:1b:1a:
d7:bb:37:74:c9:b5:9f:f5:a8:9a:42:96:0d:0a:83:
f9:99:e0:e3:6b:1d:36:80:2a:bc:f3:15:f7:0e:61:
89:4c:e3:17:7d:f3:19:a9:9e:3d:84:70:e2:04:ff:
c7:d7:b0:19:13:ee:2b:a1:31:05:b2:27:bb:b6:46:
2d:22:0f:35:11:34:d0:7c:1e:cf:98:32:a5:94:67:
2d:e0:5c:c0:4c:c8:d6:c4:d3:9e:81:a7:fc:a8:a1:
bd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F0:82:73:2C:5F:DE:A5:ED:86:D9:57:5B:04:DC:95:B8:84:D6:94
X509v3 Authority Key Identifier:
keyid:3A:6E:2E:7F:F2:C7:02:C8:AB:51:49:FE:EA:71:75:99:1C:73:40:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Om4uf_LHAsirUUn-6nF1mRxzQJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/JvCCcyxf3qXthtlXWwTclbiE1pQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.35.8.0/21
93.92.248.0/21
185.125.176.0/23
212.57.40.0/21
Signature Algorithm: sha256WithRSAEncryption
a8:37:bf:a0:ee:fa:62:e8:55:df:59:da:ba:43:69:06:41:53:
94:a2:72:f6:cf:44:f0:6b:0d:ff:8a:1c:92:19:43:a9:7c:ad:
d8:67:7a:81:bb:d8:1f:44:4b:de:aa:4a:3a:4b:9a:81:f3:a7:
0d:d4:3d:3b:07:d7:5d:a7:04:94:a2:cf:c7:2a:e5:37:48:4f:
9e:d7:e8:27:91:20:9b:3c:a9:8e:18:2d:e4:7f:45:8c:76:60:
e9:f7:3b:6f:1a:4f:f1:76:45:88:91:90:25:a0:d6:4d:ab:a8:
31:35:c1:79:87:73:91:a0:a7:f0:49:80:88:5c:72:d5:d8:f2:
4b:d2:13:7c:d1:f9:52:c4:5b:bd:fd:68:f0:fc:6d:2e:72:08:
48:f8:bf:22:c7:42:87:a5:81:cb:9e:8f:32:bd:69:33:fe:ec:
ae:8d:20:71:90:53:73:ac:e4:2f:d4:8e:da:d8:8a:66:8d:1a:
e7:bd:d7:7f:b0:2a:b0:e1:13:f3:d1:e9:65:a2:aa:57:f1:2c:
20:69:b7:c4:cf:e3:40:26:94:46:82:20:b4:66:61:9a:24:79:
82:63:f8:99:c1:44:e5:84:dd:7b:f7:8b:4d:ee:fd:a8:d1:1d:
77:9b:de:79:1b:78:e5:14:27:6a:6d:b5:b5:71:1d:7d:15:32:
46:ac:53:98
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYyMqkUjcgM8QcIvQTrOTOg5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNmUyZTdmZjJjNzAyYzhhYjUxNDlmZWVhNzE3NTk5MWM3
MzQwOWMwHhcNMjMxMjIxMTM1NjU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNmYwODI3MzJjNWZkZWE1ZWQ4NmQ5NTc1YjA0ZGM5NWI4ODRkNjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUxe4G9NA0pdfV245G/CkQ2aBE75
LXB4gCdY06GPQGNJgam5lICba8POLeW3SrCkaGa/vIgKg2pvp2x9EU7Ca3hP67YX
WPR74WZnpd/CPzhPgIoVYEgUbHBY+i4XS/oH2907J+aiBlsKIFNpXN+wjZTRzCOp
HrqmDhr50EmDanpBDBm8wNT9RZP2eHKNrtMDWhVRj5kjYKrlzB3Z3B5nzXkCGxrX
uzd0ybWf9aiaQpYNCoP5meDjax02gCq88xX3DmGJTOMXffMZqZ49hHDiBP/H17AZ
E+4roTEFsie7tkYtIg81ETTQfB7PmDKllGct4FzATMjWxNOegaf8qKG9kwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFCbwgnMsX96l7YbZV1sE3JW4hNaUMB8GA1UdIwQY
MBaAFDpuLn/yxwLIq1FJ/upxdZkcc0CcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT200dWZfTEhBc2lyVVVuLTZuRjFtUnh6UUp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8xODg1NDItZDRmNy00YWEyLWFkYzct
Nzc1YTA1Nzg4Y2Y1LzEvSnZDQ2N5eGYzcVh0aHRsWFd3VGNsYmlFMXBRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8xODg1NDItZDRmNy00YWEyLWFkYzctNzc1YTA1Nzg4Y2Y1
LzEvT200dWZfTEhBc2lyVVVuLTZuRjFtUnh6UUp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDJSMIAwQD
XVz4AwQBuX2wAwQD1DkoMA0GCSqGSIb3DQEBCwUAA4IBAQCoN7+g7vpi6FXfWdq6
Q2kGQVOUonL2z0Twaw3/ihySGUOpfK3YZ3qBu9gfREveqko6S5qB86cN1D07B9dd
pwSUos/HKuU3SE+e1+gnkSCbPKmOGC3kf0WMdmDp9ztvGk/xdkWIkZAloNZNq6gx
NcF5h3ORoKfwSYCIXHLV2PJL0hN80flSxFu9/Wjw/G0ucghI+L8ix0KHpYHLno8y
vWkz/uyujSBxkFNzrOQv1I7a2IpmjRrnvdd/sCqw4RPz0elloqpX8SwgabfEz+NA
JpRGgiC0ZmGaJHmCY/iZwUTlhN1794tN7v2o0R13m955G3jlFCdqbbW1cR19FTJG
rFOY
-----END CERTIFICATE-----
Generated at Mon Jan 1 14:10:52 2024 by rpki-client on console.sobornost.net