Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/SGlJq7IZEm2PfR48ZwPo_tu97kM.roa
File: SGlJq7IZEm2PfR48ZwPo_tu97kM.roa (raw, json)
Hash identifier: RM3eEc/hKFrl6ikowzj0C8spEBGLaMiEoelnmfLO6H4=
Subject key identifier: 48:69:49:AB:B2:19:12:6D:8F:7D:1E:3C:67:03:E8:FE:DB:BD:EE:43
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01856FD52820334AB3DFAB9C715604E6A257
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/SGlJq7IZEm2PfR48ZwPo_tu97kM.roa
Signing time: Mon 02 Jan 2023 00:15:18 +0000
ROA not before: Mon 02 Jan 2023 00:15:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49410
IP address blocks: 86.105.231.0/24 maxlen: 24
93.115.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:28:20:33:4a:b3:df:ab:9c:71:56:04:e6:a2:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:15:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=486949abb219126d8f7d1e3c6703e8fedbbdee43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ee:cc:3c:76:ee:8b:70:c1:84:37:e5:f1:a4:
42:ba:0d:d9:3d:a3:7e:70:4f:4e:32:b4:b8:89:3c:
7a:b3:bf:16:2d:1f:58:9a:9d:b8:67:39:fb:49:f5:
3e:11:56:e3:b6:71:01:aa:e5:e1:7e:04:cb:8d:ec:
e9:df:37:9e:5b:58:30:1a:96:a6:12:33:52:80:35:
86:71:20:ef:53:cc:06:31:20:d0:51:58:f5:ef:1d:
0a:75:b2:b1:fe:74:40:55:c5:38:5f:e2:68:76:df:
5c:36:63:31:cb:c7:f0:ef:57:c8:e3:c4:7a:13:63:
ec:76:13:85:b4:94:4c:30:ca:d4:49:3d:9e:e5:4d:
01:22:ea:9b:12:09:fd:9b:e7:d6:b5:bd:70:17:14:
a4:ca:f6:ff:5c:d0:41:a4:2a:80:2d:12:c0:56:8f:
57:fd:ca:0a:0f:d1:cf:77:ad:de:80:81:75:1b:66:
f3:c8:54:36:c6:23:cf:94:9e:0f:5c:68:a2:59:3f:
79:0b:c1:5c:15:1b:94:1b:40:fc:a7:85:e9:20:18:
30:e4:fc:55:8d:87:71:75:5b:15:bd:b1:e5:8d:32:
28:1b:bc:29:79:c3:91:0c:08:c2:73:30:6c:b1:a3:
75:9e:f4:56:6c:42:ff:b2:7b:93:86:de:6f:b3:26:
6e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:69:49:AB:B2:19:12:6D:8F:7D:1E:3C:67:03:E8:FE:DB:BD:EE:43
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/SGlJq7IZEm2PfR48ZwPo_tu97kM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.231.0/24
93.115.1.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:64:75:a3:27:83:0b:56:6c:ad:39:bb:5e:22:21:bb:83:7e:
b7:5a:7c:57:a4:82:0c:b3:97:88:d1:21:ff:0a:f0:54:82:35:
a2:41:1c:33:21:4b:b9:35:4c:d3:7f:0c:ed:35:00:92:a7:28:
a0:88:2b:c9:e1:3e:ff:6c:7c:78:bd:ce:c5:cd:95:13:ae:97:
6c:e7:9c:61:e1:50:26:d7:fd:a3:ad:58:e2:d2:58:06:fc:1b:
0a:3d:b1:e0:ba:55:c6:4b:1d:7a:f4:48:ea:cf:26:78:91:f4:
c7:cb:14:cb:33:4b:1d:6d:dd:7c:2b:db:e8:c2:1a:74:28:62:
01:7a:1b:c6:c0:9c:40:eb:54:41:e3:25:b6:af:e8:1d:7d:e0:
eb:e1:08:a7:03:a5:75:3a:f9:51:0d:f0:6d:d5:d9:07:1e:de:
13:6d:a6:1e:80:86:ae:0b:dc:5c:73:d4:9e:db:81:df:f1:16:
01:a4:ed:2b:c0:fa:e2:1b:e3:8b:a6:a8:3a:76:fe:7b:75:b5:
7f:73:82:b0:bc:f6:72:17:ca:9e:b6:ff:e6:e9:9e:53:b8:4e:
62:fa:2c:1a:c1:d9:5b:b5:52:7c:af:54:3a:30:0a:c1:a8:6f:
bc:16:59:2c:3b:d3:9b:ad:c1:91:b4:3f:d9:d5:9d:59:b7:41:
f5:8c:84:00
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVv1SggM0qz36uccVYE5qJXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy
MTliNTkwHhcNMjMwMTAyMDAxNTE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODY5NDlhYmIyMTkxMjZkOGY3ZDFlM2M2NzAzZThmZWRiYmRlZTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+7MPHbui3DBhDfl8aRCug3ZPaN+
cE9OMrS4iTx6s78WLR9Ymp24Zzn7SfU+EVbjtnEBquXhfgTLjezp3zeeW1gwGpam
EjNSgDWGcSDvU8wGMSDQUVj17x0KdbKx/nRAVcU4X+Jodt9cNmMxy8fw71fI48R6
E2PsdhOFtJRMMMrUST2e5U0BIuqbEgn9m+fWtb1wFxSkyvb/XNBBpCqALRLAVo9X
/coKD9HPd63egIF1G2bzyFQ2xiPPlJ4PXGiiWT95C8FcFRuUG0D8p4XpIBgw5PxV
jYdxdVsVvbHljTIoG7wpecORDAjCczBssaN1nvRWbEL/snuTht5vsyZuHQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFEhpSauyGRJtj30ePGcD6P7bve5DMB8GA1UdIwQY
MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl
LTkyZTI1ZmUxNjMzMS8xL1NHbEpxN0laRW0yUGZSNDhad1BvX3R1OTdrTS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz
MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBABWaecD
BABdcwEwDQYJKoZIhvcNAQELBQADggEBAD1kdaMngwtWbK05u14iIbuDfrdafFek
ggyzl4jRIf8K8FSCNaJBHDMhS7k1TNN/DO01AJKnKKCIK8nhPv9sfHi9zsXNlROu
l2znnGHhUCbX/aOtWOLSWAb8Gwo9seC6VcZLHXr0SOrPJniR9MfLFMszSx1t3Xwr
2+jCGnQoYgF6G8bAnEDrVEHjJbav6B194OvhCKcDpXU6+VEN8G3V2Qce3hNtph6A
hq4L3Fxz1J7bgd/xFgGk7SvA+uIb44umqDp2/nt1tX9zgrC89nIXyp62/+bpnlO4
TmL6LBrB2Vu1UnyvVDowCsGob7wWWSw705utwZG0P9nVnVm3QfWMhAA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:52 2024 by rpki-client on console-ams.rpki-client.org