Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/JL2lROtW59nAj7FW2SfUeqKOtR0.roa
File: JL2lROtW59nAj7FW2SfUeqKOtR0.roa (raw, json)
Hash identifier: pIs3LGyCeG0ZrPeZU1gGUSvcCxYyJnGfwelx7I54S4M=
Subject key identifier: 24:BD:A5:44:EB:56:E7:D9:C0:8F:B1:56:D9:27:D4:7A:A2:8E:B5:1D
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018E9AD048DEF45414C3869E70D61406611A
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/JL2lROtW59nAj7FW2SfUeqKOtR0.roa
Signing time: Mon 01 Apr 2024 17:58:45 +0000
ROA not before: Mon 01 Apr 2024 17:58:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 93.186.69.0/24 maxlen: 24
109.121.41.0/24 maxlen: 24
109.121.43.0/24 maxlen: 24
185.47.91.0/24 maxlen: 24
188.255.128.0/24 maxlen: 24
188.255.200.0/24 maxlen: 24
212.69.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Apr 2024 09:05:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9a:d0:48:de:f4:54:14:c3:86:9e:70:d6:14:06:61:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Apr 1 17:58:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24bda544eb56e7d9c08fb156d927d47aa28eb51d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2d:aa:03:f5:7a:4c:06:d7:02:1a:43:90:f4:
48:22:3e:80:d5:6d:f4:e9:11:e8:9f:86:e6:bc:2c:
05:be:7b:ce:56:aa:e6:1e:a8:a2:68:fb:0b:59:de:
1f:e0:97:9c:5e:ce:08:b8:73:dc:14:fd:df:79:0e:
1b:c2:8d:12:9c:49:5e:8f:8d:ee:ea:9d:46:2c:66:
ee:12:7e:64:ae:d0:24:40:8a:a9:a8:e3:dd:a9:f4:
73:89:51:bf:21:3f:ac:2b:6e:70:b2:8a:8e:29:22:
94:a5:1f:b0:e1:cf:39:0a:f7:7a:61:b2:36:75:2b:
85:5f:09:91:03:94:91:e0:ed:df:d4:ba:8b:a9:3e:
47:43:9a:8f:4b:94:7c:65:a0:cc:fa:40:10:86:4c:
53:da:5c:80:84:16:02:33:06:dc:08:78:38:e7:dc:
7c:c3:91:92:f5:dc:01:bb:73:d6:c9:b3:8d:29:6c:
89:ad:39:16:f6:d7:9e:79:e5:e3:17:75:35:bd:8d:
7a:7b:21:13:76:60:93:50:74:06:ca:31:61:3e:2d:
aa:60:91:d2:8e:61:d8:00:6d:c3:3c:73:b4:83:c8:
a1:a1:d0:fa:aa:61:08:c2:9d:1e:83:51:2b:d2:c9:
c6:b8:e1:e2:20:b9:c1:88:ee:fa:d0:07:7c:59:93:
11:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:BD:A5:44:EB:56:E7:D9:C0:8F:B1:56:D9:27:D4:7A:A2:8E:B5:1D
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/JL2lROtW59nAj7FW2SfUeqKOtR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.186.69.0/24
109.121.41.0/24
109.121.43.0/24
185.47.91.0/24
188.255.128.0/24
188.255.200.0/24
212.69.14.0/24
Signature Algorithm: sha256WithRSAEncryption
89:73:81:47:97:be:aa:05:39:0b:09:38:14:c2:be:49:4d:38:
3f:56:da:19:0f:64:ae:da:c2:ba:db:f5:7a:d2:79:b3:f3:a0:
d3:80:d8:e3:49:98:95:e2:17:87:94:2d:34:d1:51:d7:a1:d1:
16:14:95:e4:55:16:d5:f4:d4:a8:0e:69:a0:a5:6e:5c:91:14:
df:d0:79:36:7d:b6:a3:49:06:70:9e:f9:84:93:ad:74:83:ad:
1a:22:ed:cc:22:18:64:5d:54:9b:7b:f9:27:b7:29:90:10:6b:
60:0f:70:63:e7:9f:75:56:33:7f:7a:f7:a4:a2:3c:23:c2:7c:
41:e1:ec:00:56:65:77:a8:71:15:c0:97:a4:f8:32:e2:f5:e7:
cd:71:8e:31:5d:e5:5b:6d:6c:03:2d:87:a9:72:94:ef:b3:d1:
ba:32:23:33:16:20:ac:9f:77:a8:01:41:ac:40:61:14:95:74:
a1:95:01:3b:b9:ba:c8:bf:5e:e7:b2:76:32:21:50:5b:b9:6e:
a1:55:b8:fc:24:08:f5:d7:b2:3d:49:99:b7:c6:f0:fc:a9:20:
60:9a:c6:42:b5:08:64:e4:bf:df:d7:0f:60:cc:55:3a:14:f4:
30:21:47:8b:f2:a9:3e:a7:aa:2f:c6:7b:b7:9c:ee:d7:93:29:
e3:5b:5a:cf
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAY6a0Eje9FQUw4aecNYUBmEaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjQwNDAxMTc1ODQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNGJkYTU0NGViNTZlN2Q5YzA4ZmIxNTZkOTI3ZDQ3YWEyOGViNTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoy2qA/V6TAbXAhpDkPRIIj6A1W30
6RHon4bmvCwFvnvOVqrmHqiiaPsLWd4f4JecXs4IuHPcFP3feQ4bwo0SnElej43u
6p1GLGbuEn5krtAkQIqpqOPdqfRziVG/IT+sK25wsoqOKSKUpR+w4c85Cvd6YbI2
dSuFXwmRA5SR4O3f1LqLqT5HQ5qPS5R8ZaDM+kAQhkxT2lyAhBYCMwbcCHg459x8
w5GS9dwBu3PWybONKWyJrTkW9teeeeXjF3U1vY16eyETdmCTUHQGyjFhPi2qYJHS
jmHYAG3DPHO0g8ihodD6qmEIwp0eg1Er0snGuOHiILnBiO760Ad8WZMRcQIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFCS9pUTrVufZwI+xVtkn1HqijrUdMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvSkwybFJPdFc1OW5BajdGVzJTZlVlcUtPdFIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAXbpFAwQA
bXkpAwQAbXkrAwQAuS9bAwQAvP+AAwQAvP/IAwQA1EUOMA0GCSqGSIb3DQEBCwUA
A4IBAQCJc4FHl76qBTkLCTgUwr5JTTg/VtoZD2Su2sK62/V60nmz86DTgNjjSZiV
4heHlC000VHXodEWFJXkVRbV9NSoDmmgpW5ckRTf0Hk2fbajSQZwnvmEk610g60a
Iu3MIhhkXVSbe/kntymQEGtgD3Bj5591VjN/evekojwjwnxB4ewAVmV3qHEVwJek
+DLi9efNcY4xXeVbbWwDLYepcpTvs9G6MiMzFiCsn3eoAUGsQGEUlXShlQE7ubrI
v17nsnYyIVBbuW6hVbj8JAj117I9SZm3xvD8qSBgmsZCtQhk5L/f1w9gzFU6FPQw
IUeL8qk+p6ovxnu3nO7XkynjW1rP
-----END CERTIFICATE-----
Generated at Thu Apr 18 11:24:57 2024 by rpki-client on console-fra.rpki-client.org