Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/TD56fKkE67CS2ZvjaeYgqYddKSc.roa
File: TD56fKkE67CS2ZvjaeYgqYddKSc.roa (raw, json)
Hash identifier: wmMfqVsEnv5t+XUW9RrXpPWErhFPp0BLzh0iiuX4EnA=
Subject key identifier: 4C:3E:7A:7C:A9:04:EB:B0:92:D9:9B:E3:69:E6:20:A9:87:5D:29:27
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018A197F9065B778E917F4ECF9770AF4F5C3
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/TD56fKkE67CS2ZvjaeYgqYddKSc.roa
Signing time: Mon 21 Aug 2023 19:08:25 +0000
ROA not before: Mon 21 Aug 2023 19:08:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206068
IP address blocks: 86.104.192.0/24 maxlen: 24
86.104.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Sep 2023 13:53:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:19:7f:90:65:b7:78:e9:17:f4:ec:f9:77:0a:f4:f5:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Aug 21 19:08:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c3e7a7ca904ebb092d99be369e620a9875d2927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:45:14:48:28:dd:a4:e9:5b:d4:28:2f:47:03:
0c:44:f5:bf:b0:05:28:c5:14:1c:79:53:f8:8f:3a:
0a:4b:01:44:be:6e:4c:4c:49:6d:7f:1d:35:b1:d8:
5f:5d:8a:d6:3a:b2:c8:15:57:c2:ee:a6:2a:e7:11:
29:6c:2b:62:d8:fd:10:6e:32:99:56:e5:7b:65:1c:
e7:17:cb:8d:9d:51:aa:8e:46:30:44:94:58:45:40:
32:03:b1:1d:e2:0a:22:f8:bb:0d:65:2c:90:3e:d7:
c4:8b:33:24:8e:8a:a6:30:de:2b:55:f5:97:55:17:
ad:d0:dd:06:af:1b:49:c0:24:bf:e8:bb:d4:41:64:
2f:01:6f:4f:fe:83:5f:ed:41:a3:1d:d9:f0:15:6c:
df:55:ce:68:70:17:30:dc:93:4c:9b:2a:ba:5d:47:
df:87:7d:17:4a:56:9e:bd:16:a2:58:e4:98:88:80:
8b:08:79:b9:d2:30:97:ef:10:ed:68:a5:ad:e6:9a:
3c:9d:a1:15:f7:90:fd:87:40:9a:8e:be:09:7f:a0:
89:87:1e:81:67:b9:b9:f3:b8:fc:62:d0:d3:0e:4b:
58:52:79:0b:19:dc:5e:12:8c:71:6e:39:ed:ba:26:
e3:e5:c4:4f:5b:2a:ea:5f:a7:1b:33:ca:41:b5:88:
63:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:3E:7A:7C:A9:04:EB:B0:92:D9:9B:E3:69:E6:20:A9:87:5D:29:27
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/TD56fKkE67CS2ZvjaeYgqYddKSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.104.192.0/24
86.104.195.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:5b:2f:20:f4:20:cd:a2:be:7e:00:da:f6:e9:ff:6f:94:3c:
b3:d3:8b:ff:4a:32:42:d3:44:bb:60:f4:ec:ec:c1:94:d4:e8:
76:10:83:6d:85:d5:36:cb:a3:77:ce:9f:f5:f8:f1:00:39:f8:
cb:9b:e5:98:e6:17:ab:c3:a4:84:c6:9b:0b:e9:9d:1d:ad:0e:
83:26:23:64:23:bf:2a:f4:f2:1a:73:f3:d2:8f:16:6d:73:66:
97:9e:f4:0c:77:02:9c:8a:71:7a:51:d8:d9:b0:7b:42:6b:ac:
e0:c9:e7:5a:78:44:97:21:93:24:4d:34:e7:b1:ce:b9:98:ef:
1e:0e:54:4d:62:de:44:d3:4a:9a:72:d8:11:94:37:7c:c6:c8:
e7:8c:5e:06:a7:52:0d:6f:4b:e9:d2:bf:e6:3e:98:8c:51:5e:
24:df:01:54:e1:36:09:58:09:e8:39:21:47:14:f2:4d:eb:9f:
2f:a1:82:c0:40:1a:0c:71:04:42:cd:92:be:7b:c4:23:2a:2e:
4c:d7:be:0d:d9:a1:19:ee:56:2c:4d:18:56:ed:7e:38:e5:17:
1e:0c:78:24:00:34:d6:af:f0:72:c5:76:95:fa:66:fb:ea:64:
65:4a:72:fc:26:7d:8d:01:e3:ab:c8:8b:78:6c:1f:5a:18:3a:
42:46:e1:2c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYoZf5Blt3jpF/Ts+XcK9PXDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjMwODIxMTkwODI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzNlN2E3Y2E5MDRlYmIwOTJkOTliZTM2OWU2MjBhOTg3NWQyOTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkUUSCjdpOlb1CgvRwMMRPW/sAUo
xRQceVP4jzoKSwFEvm5MTEltfx01sdhfXYrWOrLIFVfC7qYq5xEpbCti2P0QbjKZ
VuV7ZRznF8uNnVGqjkYwRJRYRUAyA7Ed4goi+LsNZSyQPtfEizMkjoqmMN4rVfWX
VRet0N0GrxtJwCS/6LvUQWQvAW9P/oNf7UGjHdnwFWzfVc5ocBcw3JNMmyq6XUff
h30XSlaevRaiWOSYiICLCHm50jCX7xDtaKWt5po8naEV95D9h0Cajr4Jf6CJhx6B
Z7m587j8YtDTDktYUnkLGdxeEoxxbjntuibj5cRPWyrqX6cbM8pBtYhjqwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEw+enypBOuwktmb42nmIKmHXSknMB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEvVEQ1NmZLa0U2N0NTMlp2amFlWWdxWWRkS1NjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVmjAAwQA
VmjDMA0GCSqGSIb3DQEBCwUAA4IBAQCxWy8g9CDNor5+ANr26f9vlDyz04v/SjJC
00S7YPTs7MGU1Oh2EINthdU2y6N3zp/1+PEAOfjLm+WY5herw6SExpsL6Z0drQ6D
JiNkI78q9PIac/PSjxZtc2aXnvQMdwKcinF6UdjZsHtCa6zgyedaeESXIZMkTTTn
sc65mO8eDlRNYt5E00qactgRlDd8xsjnjF4Gp1INb0vp0r/mPpiMUV4k3wFU4TYJ
WAnoOSFHFPJN658voYLAQBoMcQRCzZK+e8QjKi5M174N2aEZ7lYsTRhW7X445Rce
DHgkADTWr/ByxXaV+mb76mRlSnL8Jn2NAeOryIt4bB9aGDpCRuEs
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:41 2024 by rpki-client on console-fra.rpki-client.org