Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/JGCLR-aXcWD3q88kxbgcCQKaaP8.roa
File: JGCLR-aXcWD3q88kxbgcCQKaaP8.roa (raw, json)
Hash identifier: Qyv7tJ3uVyxOakYRk46JoPXK3pBzGAjcqJN9rv+2/6o=
Subject key identifier: 24:60:8B:47:E6:97:71:60:F7:AB:CF:24:C5:B8:1C:09:02:9A:68:FF
Certificate issuer: /CN=0849757e3e35aaab5d57c5186243a437173e4d36
Certificate serial: 0185732846EF032BB0888894A33593AFEC9B
Authority key identifier: 08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/JGCLR-aXcWD3q88kxbgcCQKaaP8.roa
Signing time: Mon 02 Jan 2023 15:44:57 +0000
ROA not before: Mon 02 Jan 2023 15:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49769
IP address blocks: 185.153.156.0/23 maxlen: 23
185.153.158.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:28:46:ef:03:2b:b0:88:88:94:a3:35:93:af:ec:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0849757e3e35aaab5d57c5186243a437173e4d36
Validity
Not Before: Jan 2 15:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24608b47e6977160f7abcf24c5b81c09029a68ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:80:1f:be:eb:e9:45:7e:72:3b:cd:96:a5:d9:
77:e7:16:bb:ea:2c:78:44:a1:cb:af:0d:46:c4:d9:
eb:6e:87:cd:4a:cd:20:ef:5d:e2:ae:9a:c3:8a:71:
ea:89:73:90:5b:45:44:90:96:07:62:f4:a3:bc:cb:
bb:e3:72:7a:bc:c6:c8:93:4d:fa:35:1d:81:9b:0c:
34:0b:35:f8:d1:15:00:71:c5:09:b3:71:08:f7:1c:
e3:61:35:15:27:a0:72:09:1b:3b:77:74:5c:91:ea:
2c:6c:e6:7e:25:49:64:42:d3:30:96:07:4f:67:74:
49:01:0d:85:90:6e:eb:a2:4b:66:dd:dd:89:7c:e0:
52:c0:ff:1a:49:57:57:61:8a:63:11:a6:74:ab:43:
67:5a:2d:11:8d:e0:4d:23:20:4e:3f:47:e2:4f:1f:
2c:1f:a5:66:22:d4:10:ad:4e:43:d0:6a:39:14:23:
e1:49:a2:67:3a:bb:e8:38:74:c6:eb:2f:58:04:40:
78:8b:82:7e:bd:c4:75:5a:6a:1c:df:54:59:7b:ff:
9e:3a:3a:18:ba:aa:32:fa:49:39:03:c1:aa:63:8c:
f3:6d:b6:e3:b4:f5:5b:43:16:ee:8d:0e:bd:9d:c4:
03:07:62:66:70:01:e1:1a:50:12:04:f7:f0:12:28:
67:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:60:8B:47:E6:97:71:60:F7:AB:CF:24:C5:B8:1C:09:02:9A:68:FF
X509v3 Authority Key Identifier:
keyid:08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/JGCLR-aXcWD3q88kxbgcCQKaaP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.153.156.0-185.153.158.255
Signature Algorithm: sha256WithRSAEncryption
59:18:f0:06:ce:34:43:3b:ba:56:6b:2b:e8:1c:be:f3:bc:ed:
ac:e1:91:b7:31:c4:de:f3:44:99:df:97:a5:eb:8c:95:74:81:
40:17:3e:df:2f:58:4a:25:df:76:f7:d2:c2:4c:07:fc:79:10:
4f:ac:65:09:98:2b:c0:80:c6:5d:cc:51:8c:cc:c8:9f:6b:5c:
0c:d2:9b:5e:71:3f:e9:ca:db:7d:2b:86:0a:76:90:85:4d:79:
0a:7b:74:c8:f8:30:34:51:10:d4:66:ef:0a:ce:7e:6d:af:58:
04:49:fb:15:bf:35:fc:b3:bb:97:12:7c:33:0f:fa:08:67:61:
26:70:8f:70:90:c9:27:6d:e7:89:8f:9b:84:4b:4e:c7:55:93:
e9:c3:a6:ff:32:ae:1f:cc:2c:1a:b8:cb:34:2f:af:b6:b1:9c:
ef:dd:57:3b:63:53:04:ac:38:ce:16:e0:1c:ab:7a:41:a1:d8:
e3:af:9b:84:95:88:47:b5:bb:1a:0d:8c:fd:82:33:39:6c:a3:
e4:f7:04:97:57:76:72:8a:41:5f:92:7d:6d:82:49:e2:53:c8:
6d:50:10:15:a4:a5:e7:96:c2:8a:fc:2b:9e:6c:3f:d0:93:73:
85:f1:8e:36:bd:2f:12:bf:e2:fa:5d:c5:48:8c:d5:c0:11:43:
eb:72:ca:cc
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVzKEbvAyuwiIiUozWTr+ybMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NDk3NTdlM2UzNWFhYWI1ZDU3YzUxODYyNDNhNDM3MTcz
ZTRkMzYwHhcNMjMwMTAyMTU0NDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDYwOGI0N2U2OTc3MTYwZjdhYmNmMjRjNWI4MWMwOTAyOWE2OGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIAfvuvpRX5yO82Wpdl35xa76ix4
RKHLrw1GxNnrbofNSs0g713irprDinHqiXOQW0VEkJYHYvSjvMu743J6vMbIk036
NR2Bmww0CzX40RUAccUJs3EI9xzjYTUVJ6ByCRs7d3RckeosbOZ+JUlkQtMwlgdP
Z3RJAQ2FkG7roktm3d2JfOBSwP8aSVdXYYpjEaZ0q0NnWi0RjeBNIyBOP0fiTx8s
H6VmItQQrU5D0Go5FCPhSaJnOrvoOHTG6y9YBEB4i4J+vcR1Wmoc31RZe/+eOjoY
uqoy+kk5A8GqY4zzbbbjtPVbQxbujQ69ncQDB2JmcAHhGlASBPfwEihnRQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFCRgi0fml3Fg96vPJMW4HAkCmmj/MB8GA1UdIwQY
MBaAFAhJdX4+NaqrXVfFGGJDpDcXPk02MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0VsMWZqNDFxcXRkVjhVWVlrT2tOeGMtVFRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mYjI0MDEtZTQ3MC00YzA1LTk5Yjgt
ZjhlZWNiNDI1MDg3LzEvSkdDTFItYVhjV0QzcTg4a3hiZ2NDUUthYVA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9mYjI0MDEtZTQ3MC00YzA1LTk5YjgtZjhlZWNiNDI1MDg3
LzEvQ0VsMWZqNDFxcXRkVjhVWVlrT2tOeGMtVFRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAK5mZwD
BAC5mZ4wDQYJKoZIhvcNAQELBQADggEBAFkY8AbONEM7ulZrK+gcvvO87azhkbcx
xN7zRJnfl6XrjJV0gUAXPt8vWEol33b30sJMB/x5EE+sZQmYK8CAxl3MUYzMyJ9r
XAzSm15xP+nK230rhgp2kIVNeQp7dMj4MDRRENRm7wrOfm2vWARJ+xW/Nfyzu5cS
fDMP+ghnYSZwj3CQySdt54mPm4RLTsdVk+nDpv8yrh/MLBq4yzQvr7axnO/dVztj
UwSsOM4W4ByrekGh2OOvm4SViEe1uxoNjP2CMzlso+T3BJdXdnKKQV+SfW2CSeJT
yG1QEBWkpeeWwor8K55sP9CTc4Xxjja9LxK/4vpdxUiM1cARQ+tyysw=
-----END CERTIFICATE-----
Generated at Tue Jan 2 01:01:50 2024 by rpki-client on console.sobornost.net