Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/TiL1CEfZXBRlbhq1RH7YpSp1hbY.roa
File: TiL1CEfZXBRlbhq1RH7YpSp1hbY.roa (raw, json)
Hash identifier: MfSTbD5hSHlDviQ7vhPtAqCOLhyy12cIbmNn2/Ihuj8=
Subject key identifier: 4E:22:F5:08:47:D9:5C:14:65:6E:1A:B5:44:7E:D8:A5:2A:75:85:B6
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 0189B1D2C23001D49FD4948DA1E20A9E6BD3
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/TiL1CEfZXBRlbhq1RH7YpSp1hbY.roa
Signing time: Tue 01 Aug 2023 15:58:46 +0000
ROA not before: Tue 01 Aug 2023 15:58:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 86.106.104.0/24 maxlen: 24
93.114.171.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b1:d2:c2:30:01:d4:9f:d4:94:8d:a1:e2:0a:9e:6b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Aug 1 15:58:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e22f50847d95c14656e1ab5447ed8a52a7585b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:58:a9:09:38:b7:45:4d:b8:08:c7:71:da:37:
d1:d0:fd:69:95:47:2f:06:1b:08:a1:49:ea:ee:f1:
ee:30:05:fb:73:96:b1:85:da:d3:1f:06:da:b4:34:
cf:13:f9:80:cc:e4:43:7d:09:63:dc:6e:20:7f:1d:
1b:e8:3a:69:7c:7d:9d:42:e9:81:6a:83:ef:d8:14:
99:a2:be:4d:54:b6:70:86:bd:48:00:58:a5:b3:f7:
f8:19:63:75:b9:88:f2:c3:7c:65:84:46:00:7c:5c:
b5:18:0e:e4:76:86:6e:05:a5:28:dc:8c:7d:7f:72:
fd:5e:e3:9f:89:ff:f3:1f:ce:89:87:61:a8:e1:08:
2b:9f:ed:41:49:0f:44:eb:b9:1b:7b:4f:e7:87:57:
e7:bb:1f:c6:41:58:3e:1b:e3:2f:b7:cc:35:c6:13:
a9:67:44:ff:c8:31:30:4b:4d:d4:79:4f:67:66:5f:
33:07:5d:a9:76:22:9f:b1:e8:ca:d0:13:a7:0c:7c:
44:92:f3:d3:4c:8c:bd:03:25:4a:18:b1:ee:12:df:
d5:f8:20:96:bc:cb:fe:00:75:49:4f:f4:d1:cf:78:
dd:94:f3:1d:9f:14:f6:a2:9e:75:2b:f4:02:dd:07:
05:bd:17:2d:66:7a:27:6b:8e:80:0e:e2:ec:5f:ec:
8d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:22:F5:08:47:D9:5C:14:65:6E:1A:B5:44:7E:D8:A5:2A:75:85:B6
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/TiL1CEfZXBRlbhq1RH7YpSp1hbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.104.0/24
93.114.171.0/24
Signature Algorithm: sha256WithRSAEncryption
89:f5:4f:ff:51:d4:f1:8a:ba:c0:54:47:e4:00:23:7a:93:35:
8e:65:ce:e5:8b:5d:bd:75:57:e7:20:7f:46:f0:ca:05:60:53:
7a:9a:fa:cc:3a:7a:58:cf:72:d2:6a:56:43:52:c4:b2:7d:09:
8e:0a:1f:a0:7d:75:7c:b1:6a:4f:54:f1:99:3f:b8:17:26:a5:
88:8c:fa:8f:28:18:99:c2:05:4c:3d:17:d0:89:a2:7a:20:81:
62:f2:8d:94:dc:31:88:40:7e:6e:d6:7e:af:ff:28:d1:48:d7:
b5:4e:ce:63:74:01:2f:67:15:3d:a9:1e:2f:6d:d8:d6:54:8b:
19:d7:8e:08:ef:65:05:56:56:9f:b4:1e:3f:e2:a6:d7:08:08:
36:51:c8:c5:49:43:cb:4b:bc:20:d6:9a:ca:68:1b:ee:49:1e:
08:f2:9d:ea:45:4f:ca:26:b7:ba:74:11:16:5a:6e:f6:43:de:
ff:8d:71:31:54:6b:91:bc:ae:c5:a0:e6:f4:97:12:85:a7:bc:
92:1d:26:63:62:57:c1:e2:f4:1b:33:9b:44:da:a2:a7:97:03:
91:b2:3a:e8:ab:47:99:6e:f7:79:95:dd:2c:6a:70:fd:cc:32:
36:fc:bb:f7:e5:1c:e1:e9:94:40:f9:17:fe:a0:f5:ec:20:7f:
9c:81:3e:f0
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYmx0sIwAdSf1JSNoeIKnmvTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNTg5NTJkMzkzOTM1ZjBkM2JjZTgxNGZkOTE3OGQwNDY5
M2FlYjkwHhcNMjMwODAxMTU1ODQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTIyZjUwODQ3ZDk1YzE0NjU2ZTFhYjU0NDdlZDhhNTJhNzU4NWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllipCTi3RU24CMdx2jfR0P1plUcv
BhsIoUnq7vHuMAX7c5axhdrTHwbatDTPE/mAzORDfQlj3G4gfx0b6DppfH2dQumB
aoPv2BSZor5NVLZwhr1IAFils/f4GWN1uYjyw3xlhEYAfFy1GA7kdoZuBaUo3Ix9
f3L9XuOfif/zH86Jh2Go4Qgrn+1BSQ9E67kbe0/nh1fnux/GQVg+G+Mvt8w1xhOp
Z0T/yDEwS03UeU9nZl8zB12pdiKfsejK0BOnDHxEkvPTTIy9AyVKGLHuEt/V+CCW
vMv+AHVJT/TRz3jdlPMdnxT2op51K/QC3QcFvRctZnona46ADuLsX+yNOQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFE4i9QhH2VwUZW4atUR+2KUqdYW2MB8GA1UdIwQY
MBaAFP5YlS05OTXw07zoFP2ReNBGk665MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUt
NWQ0OGI2NWNlNTczLzEvVGlMMUNFZlpYQlJsYmhxMVJIN1lwU3AxaGJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUtNWQ0OGI2NWNlNTcz
LzEvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVmpoAwQA
XXKrMA0GCSqGSIb3DQEBCwUAA4IBAQCJ9U//UdTxirrAVEfkACN6kzWOZc7li129
dVfnIH9G8MoFYFN6mvrMOnpYz3LSalZDUsSyfQmOCh+gfXV8sWpPVPGZP7gXJqWI
jPqPKBiZwgVMPRfQiaJ6IIFi8o2U3DGIQH5u1n6v/yjRSNe1Ts5jdAEvZxU9qR4v
bdjWVIsZ144I72UFVlaftB4/4qbXCAg2UcjFSUPLS7wg1prKaBvuSR4I8p3qRU/K
Jre6dBEWWm72Q97/jXExVGuRvK7FoOb0lxKFp7ySHSZjYlfB4vQbM5tE2qKnlwOR
sjroq0eZbvd5ld0sanD9zDI2/Lv35Rzh6ZRA+Rf+oPXsIH+cgT7w
-----END CERTIFICATE-----
Generated at Tue Aug 8 15:43:52 2023 by rpki-client on console-fra.rpki-client.org