Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/hj9IjEYUxQ5HX5w-SyjSaMQJ-K4.roa
File: hj9IjEYUxQ5HX5w-SyjSaMQJ-K4.roa (raw, json)
Hash identifier: q0BNsVIf19lN1G1O2GBt2z99AUlwlKLhi+hRadhxSLk=
Subject key identifier: 86:3F:48:8C:46:14:C5:0E:47:5F:9C:3E:4B:28:D2:68:C4:09:F8:AE
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 018570CBEC0F964958689BD70A8BA4541C2E
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/hj9IjEYUxQ5HX5w-SyjSaMQJ-K4.roa
Signing time: Mon 02 Jan 2023 04:44:50 +0000
ROA not before: Mon 02 Jan 2023 04:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206902
IP address blocks: 84.38.140.0/24 maxlen: 24
87.99.73.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cb:ec:0f:96:49:58:68:9b:d7:0a:8b:a4:54:1c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Jan 2 04:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=863f488c4614c50e475f9c3e4b28d268c409f8ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:78:85:71:69:37:55:b0:69:36:d5:2c:5e:22:
e6:54:bd:f5:4f:ca:b2:8b:43:c4:f1:a4:00:ea:31:
c8:dc:cf:b8:6e:cf:65:db:b5:8d:3c:f2:27:7f:03:
cc:00:99:23:80:eb:ea:ee:ed:f7:8a:78:a7:e2:5a:
92:53:e5:90:35:07:29:d0:27:4b:16:6f:43:e5:32:
81:01:73:21:4c:e6:6c:1b:37:81:8c:1b:48:55:57:
b6:68:d9:5b:40:6a:b0:69:a4:62:9b:e1:4b:75:17:
e5:9f:32:78:a8:0b:e4:e8:09:5a:e4:97:b4:47:bf:
76:f4:8c:52:0f:a2:f2:e6:df:09:40:ac:2f:c1:26:
b3:b7:10:39:e3:a8:bb:df:d2:26:39:26:ec:d1:c1:
e3:b0:86:32:30:29:38:9b:cc:fb:f9:25:dd:38:02:
1b:7e:53:ea:14:73:83:91:5a:c2:74:9b:33:62:61:
64:2d:36:f2:f9:b9:84:f0:e3:cc:67:59:c0:f5:41:
57:ba:2a:ef:bf:0a:98:22:27:6b:53:14:5b:78:53:
25:c7:e4:a4:c9:f4:be:5f:c4:6b:0d:1c:fe:96:32:
15:cd:50:f6:14:f2:40:68:2d:0b:25:2f:2f:55:96:
bb:11:64:6c:7e:1c:f7:ac:c0:45:0e:69:a9:a7:63:
88:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:3F:48:8C:46:14:C5:0E:47:5F:9C:3E:4B:28:D2:68:C4:09:F8:AE
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/hj9IjEYUxQ5HX5w-SyjSaMQJ-K4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.38.140.0/24
87.99.73.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:a6:6b:22:25:d9:e7:80:58:21:62:8c:47:fc:39:f4:1d:a5:
03:6e:38:b1:82:96:ff:31:f5:88:a9:b6:9b:5a:86:a3:37:53:
02:b3:42:d0:78:21:17:5c:4c:1e:0a:2b:1e:14:84:02:b9:75:
46:58:1d:d0:fd:9e:fe:76:77:ec:e3:2e:43:a9:c2:6f:d5:93:
d5:f8:ae:7a:42:6b:e2:36:ec:b7:fe:9c:0e:94:7e:47:82:ce:
0e:3a:81:94:13:da:31:a2:a7:31:cc:81:0a:7f:dd:fb:f8:39:
16:c2:c0:80:49:39:88:1a:fa:bc:6f:e0:28:2b:4b:72:5f:a6:
f6:0e:3a:bb:f4:7e:e7:76:0f:74:e1:b0:79:e6:b4:56:62:cc:
a7:39:76:cf:6f:e1:60:cd:58:45:8a:50:90:95:0a:3d:ab:96:
1f:6c:4f:ce:fb:67:39:6d:ad:01:36:23:2c:b5:ed:f4:49:7a:
93:f4:30:17:70:69:12:1f:12:98:73:87:11:a5:51:e8:6e:07:
60:e4:b7:34:50:6b:30:e4:88:57:2c:54:97:71:96:13:94:e2:
cf:07:ea:1d:e3:25:98:2c:7b:a2:d0:b0:79:c3:0a:58:bf:98:
2c:e6:92:12:ff:3e:45:fd:98:cc:d2:76:b5:7e:47:b7:a2:35:
a0:2f:0f:0b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVwy+wPlklYaJvXCoukVBwuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4
ZjY2Y2MwHhcNMjMwMTAyMDQ0NDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NjNmNDg4YzQ2MTRjNTBlNDc1ZjljM2U0YjI4ZDI2OGM0MDlmOGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHiFcWk3VbBpNtUsXiLmVL31T8qy
i0PE8aQA6jHI3M+4bs9l27WNPPInfwPMAJkjgOvq7u33inin4lqSU+WQNQcp0CdL
Fm9D5TKBAXMhTOZsGzeBjBtIVVe2aNlbQGqwaaRim+FLdRflnzJ4qAvk6Ala5Je0
R7929IxSD6Ly5t8JQKwvwSaztxA546i739ImOSbs0cHjsIYyMCk4m8z7+SXdOAIb
flPqFHODkVrCdJszYmFkLTby+bmE8OPMZ1nA9UFXuirvvwqYIidrUxRbeFMlx+Sk
yfS+X8RrDRz+ljIVzVD2FPJAaC0LJS8vVZa7EWRsfhz3rMBFDmmpp2OImwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIY/SIxGFMUOR1+cPkso0mjECfiuMB8GA1UdIwQY
MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt
YTFiOTZiOWI3MGY4LzEvaGo5SWpFWVV4UTVIWDV3LVN5alNhTVFKLUs0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4
LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVCaMAwQA
V2NJMA0GCSqGSIb3DQEBCwUAA4IBAQBMpmsiJdnngFghYoxH/Dn0HaUDbjixgpb/
MfWIqbabWoajN1MCs0LQeCEXXEweCiseFIQCuXVGWB3Q/Z7+dnfs4y5DqcJv1ZPV
+K56QmviNuy3/pwOlH5Hgs4OOoGUE9oxoqcxzIEKf937+DkWwsCASTmIGvq8b+Ao
K0tyX6b2Djq79H7ndg904bB55rRWYsynOXbPb+FgzVhFilCQlQo9q5YfbE/O+2c5
ba0BNiMste30SXqT9DAXcGkSHxKYc4cRpVHobgdg5Lc0UGsw5IhXLFSXcZYTlOLP
B+od4yWYLHui0LB5wwpYv5gs5pIS/z5F/ZjM0na1fke3ojWgLw8L
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:49 2024 by rpki-client on console-fra.rpki-client.org