Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/KOYfXWJFkAF7AC-zdjWMDYGkUG4.roa
File: KOYfXWJFkAF7AC-zdjWMDYGkUG4.roa (raw, json)
Hash identifier: kmblAqJSrupI45vsQZDxUMPldZDTIZq/mUgFgZXUqNI=
Subject key identifier: 28:E6:1F:5D:62:45:90:01:7B:00:2F:B3:76:35:8C:0D:81:A4:50:6E
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 018AB28F8CDDD94D7F71A84D38FBB4C6B72F
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/KOYfXWJFkAF7AC-zdjWMDYGkUG4.roa
Signing time: Wed 20 Sep 2023 12:27:46 +0000
ROA not before: Wed 20 Sep 2023 12:27:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34754
IP address blocks: 79.100.144.0/20 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Oct 2023 11:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b2:8f:8c:dd:d9:4d:7f:71:a8:4d:38:fb:b4:c6:b7:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Sep 20 12:27:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=28e61f5d624590017b002fb376358c0d81a4506e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8d:6f:92:e3:a4:f5:0f:44:97:9e:fc:e2:3f:
98:c3:6d:d7:1c:99:02:a2:da:c1:5d:44:fa:2f:e5:
d9:86:a4:54:45:2e:f4:62:64:88:27:96:86:07:40:
4c:aa:64:aa:86:a7:41:f9:92:f7:17:c3:94:6a:17:
7f:ab:f5:b5:13:84:46:b5:88:02:2e:db:bf:b5:fb:
6a:e7:90:7b:46:ab:6b:5b:c1:5b:0c:af:c1:29:3f:
9e:3c:2e:f5:00:97:fd:c7:11:3b:49:c8:2b:eb:63:
2a:61:50:87:35:ef:45:6f:f6:fe:df:be:ec:2d:81:
6c:ae:52:78:88:ea:9a:b5:a4:5b:eb:77:f0:09:74:
e9:6c:22:55:7c:d2:ef:11:09:20:da:ff:9a:7e:54:
66:da:97:a6:28:2f:0f:65:7e:29:ea:ee:e3:cd:56:
7e:03:c3:e3:f8:65:57:ca:06:1d:35:fa:24:39:44:
e4:2b:c1:8e:93:66:4a:36:27:52:b9:30:e7:b4:72:
52:96:5a:2c:53:8a:d7:0d:55:66:88:8e:46:c0:d9:
05:0a:a3:b1:d5:39:8a:51:39:08:33:7c:29:34:09:
ec:40:fb:cc:bc:ce:5f:53:13:12:54:38:b0:06:20:
81:58:3a:94:54:a1:e6:e7:a6:5d:6a:41:7f:51:f3:
7c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E6:1F:5D:62:45:90:01:7B:00:2F:B3:76:35:8C:0D:81:A4:50:6E
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/KOYfXWJFkAF7AC-zdjWMDYGkUG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.100.144.0/20
Signature Algorithm: sha256WithRSAEncryption
ab:5e:d9:d9:5b:f4:4b:b8:3f:6e:fe:0b:b3:86:d4:d6:a3:ec:
1c:a1:e6:61:9a:d2:81:7a:55:f6:01:15:66:28:96:2c:19:af:
bb:28:b0:68:1b:47:ac:a1:e8:97:11:b4:8e:a7:bb:9f:a9:94:
f3:a8:38:6f:b2:94:b2:b4:4e:91:de:3d:c3:63:3e:aa:69:69:
89:fb:14:21:ba:78:39:d2:a4:51:34:81:ba:57:0e:5c:af:63:
fb:de:14:74:c8:47:51:92:d1:00:c9:e3:56:94:2b:77:ba:43:
df:fe:02:30:7d:6d:50:75:a7:26:46:0e:df:14:ea:6b:d3:13:
11:e3:3f:c1:3c:6b:05:d5:41:16:d7:7a:4a:c1:02:fd:94:55:
19:f0:4a:62:c6:f6:8a:a2:bc:2a:d7:81:73:6b:79:1c:52:c3:
2c:88:f0:74:e8:77:97:45:0f:08:ed:55:50:95:33:47:50:62:
cf:16:8b:ab:5d:6b:37:e1:0f:0f:25:17:bf:d2:c2:48:6c:0f:
5d:32:fe:d3:60:3a:28:b3:1e:59:d8:ea:32:1e:dc:c4:35:67:
a4:3a:30:8b:55:97:d6:8e:44:bc:a8:fe:63:5a:ed:1b:77:83:
7a:6a:31:ab:0e:7d:53:7e:ce:71:c2:ab:b1:d6:cd:77:06:4f:
a2:24:f7:c5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYqyj4zd2U1/cahNOPu0xrcvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4
ZmI0YzQwHhcNMjMwOTIwMTIyNzQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOGU2MWY1ZDYyNDU5MDAxN2IwMDJmYjM3NjM1OGMwZDgxYTQ1MDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu41vkuOk9Q9El5784j+Yw23XHJkC
otrBXUT6L+XZhqRURS70YmSIJ5aGB0BMqmSqhqdB+ZL3F8OUahd/q/W1E4RGtYgC
Ltu/tftq55B7RqtrW8FbDK/BKT+ePC71AJf9xxE7Scgr62MqYVCHNe9Fb/b+377s
LYFsrlJ4iOqataRb63fwCXTpbCJVfNLvEQkg2v+aflRm2pemKC8PZX4p6u7jzVZ+
A8Pj+GVXygYdNfokOUTkK8GOk2ZKNidSuTDntHJSllosU4rXDVVmiI5GwNkFCqOx
1TmKUTkIM3wpNAnsQPvMvM5fUxMSVDiwBiCBWDqUVKHm56ZdakF/UfN8ZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCjmH11iRZABewAvs3Y1jA2BpFBuMB8GA1UdIwQY
MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct
ODcyYmEyZDlmNDRjLzEvS09ZZlhXSkZrQUY3QUMtemRqV01EWUdrVUc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj
LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQET2SQMA0G
CSqGSIb3DQEBCwUAA4IBAQCrXtnZW/RLuD9u/guzhtTWo+wcoeZhmtKBelX2ARVm
KJYsGa+7KLBoG0esoeiXEbSOp7ufqZTzqDhvspSytE6R3j3DYz6qaWmJ+xQhung5
0qRRNIG6Vw5cr2P73hR0yEdRktEAyeNWlCt3ukPf/gIwfW1QdacmRg7fFOpr0xMR
4z/BPGsF1UEW13pKwQL9lFUZ8EpixvaKorwq14Fza3kcUsMsiPB06HeXRQ8I7VVQ
lTNHUGLPFourXWs34Q8PJRe/0sJIbA9dMv7TYDoosx5Z2OoyHtzENWekOjCLVZfW
jkS8qP5jWu0bd4N6ajGrDn1Tfs5xwqux1s13Bk+iJPfF
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:04 2024 by rpki-client on console-fra.rpki-client.org