Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/3LZ0oV7fOQf6hp4y4dQBVKewiGs.roa
File: 3LZ0oV7fOQf6hp4y4dQBVKewiGs.roa (raw, json)
Hash identifier: I1J2ATTkR5s0/lleW4OpWWWPsM13xP2Pw/GTV6wNd6o=
Subject key identifier: DC:B6:74:A1:5E:DF:39:07:FA:86:9E:32:E1:D4:01:54:A7:B0:88:6B
Certificate issuer: /CN=9ed0c4ff4a90073288b97674694142721f5b8435
Certificate serial: 0187A4CBF016E55058D8FA31C6478DDE5801
Authority key identifier: 9E:D0:C4:FF:4A:90:07:32:88:B9:76:74:69:41:42:72:1F:5B:84:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/3LZ0oV7fOQf6hp4y4dQBVKewiGs.roa
Signing time: Fri 21 Apr 2023 17:10:41 +0000
ROA not before: Fri 21 Apr 2023 17:10:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 86.106.77.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a4:cb:f0:16:e5:50:58:d8:fa:31:c6:47:8d:de:58:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed0c4ff4a90073288b97674694142721f5b8435
Validity
Not Before: Apr 21 17:10:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dcb674a15edf3907fa869e32e1d40154a7b0886b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:83:6b:d0:bf:c9:b4:ef:31:ac:50:fa:90:55:
20:d4:f2:49:85:3d:49:07:a8:d9:d2:dc:2f:a4:30:
79:71:57:5f:9b:61:2b:78:b6:bf:ee:9a:34:ec:af:
9e:4a:c9:d6:6c:d9:5b:a1:8f:53:e8:6f:8c:db:41:
ca:02:bc:d1:fe:b4:ef:60:ee:c3:d5:a8:68:cd:55:
a4:12:4a:21:3a:37:90:04:ec:eb:c2:3e:5a:ca:ab:
fe:30:98:f9:0b:a3:e4:7e:c0:c6:c8:8d:12:77:1c:
b9:bc:a5:c0:26:c4:d7:14:c6:18:48:2e:ca:a1:2c:
22:f5:6c:1f:2a:9e:ef:cf:e4:ce:3a:a5:9e:3b:6e:
01:b4:3d:e4:95:50:0b:38:e9:df:f7:2b:11:6b:09:
0c:45:7a:9e:a7:20:9c:5a:c2:aa:36:67:2c:93:c3:
50:a0:22:96:26:34:04:83:80:03:33:16:58:d7:fc:
5d:e2:dd:30:3d:eb:44:a7:7e:15:63:e4:cd:da:d0:
37:58:ca:0d:57:db:ed:c1:51:ed:85:be:23:e3:14:
2c:20:4c:83:91:2a:b6:51:06:f2:94:d1:2e:43:78:
26:68:40:bd:d9:1a:e8:73:53:4b:d5:a9:fc:85:0c:
fa:30:29:8c:ac:07:93:dc:26:45:d8:c2:51:f7:66:
4c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B6:74:A1:5E:DF:39:07:FA:86:9E:32:E1:D4:01:54:A7:B0:88:6B
X509v3 Authority Key Identifier:
keyid:9E:D0:C4:FF:4A:90:07:32:88:B9:76:74:69:41:42:72:1F:5B:84:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/3LZ0oV7fOQf6hp4y4dQBVKewiGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.77.0/24
Signature Algorithm: sha256WithRSAEncryption
77:c5:6d:82:de:d1:5c:17:2a:8e:ff:9f:91:a2:b3:57:2e:1f:
c6:03:a3:20:0a:17:00:dd:1c:c5:c0:93:37:11:75:ca:56:e3:
8a:ee:1a:c0:ce:6f:38:59:31:e3:1c:cf:b8:cf:a1:4b:a8:43:
60:f7:84:19:1c:ac:58:5f:9f:31:20:35:fc:21:a8:7d:56:6f:
50:12:38:18:f8:51:80:65:08:e1:76:c6:ca:94:61:ff:91:3e:
e9:ce:7f:1c:42:86:1a:81:d5:ed:d8:2d:aa:39:74:e2:9e:1e:
dc:aa:3c:21:89:5d:04:ed:e7:3c:be:10:3e:e0:82:2e:38:43:
e4:dc:92:a3:d2:2f:58:df:75:39:ff:70:07:0c:84:42:d9:8e:
d6:80:a5:3a:17:d4:6e:6e:95:7c:0b:10:bf:aa:6e:54:8f:db:
ce:b2:e9:24:f0:53:ec:90:0d:6c:a6:7a:0b:e9:bb:7f:66:8c:
17:3e:9a:fa:97:e2:44:07:f6:a7:47:ba:1e:c1:06:fb:91:c9:
4f:05:04:89:cc:07:33:c6:95:c7:74:3d:f9:e5:45:1b:50:e4:
13:a9:0a:5e:3b:bf:6c:2d:e8:e2:1a:09:19:82:08:3e:3f:c0:
d4:3e:02:3a:3d:0a:e8:bd:22:b1:07:82:c7:fe:12:dc:0d:65:
4a:50:68:63
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYeky/AW5VBY2PoxxkeN3lgBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllZDBjNGZmNGE5MDA3MzI4OGI5NzY3NDY5NDE0MjcyMWY1
Yjg0MzUwHhcNMjMwNDIxMTcxMDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkY2I2NzRhMTVlZGYzOTA3ZmE4NjllMzJlMWQ0MDE1NGE3YjA4ODZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oNr0L/JtO8xrFD6kFUg1PJJhT1J
B6jZ0twvpDB5cVdfm2EreLa/7po07K+eSsnWbNlboY9T6G+M20HKArzR/rTvYO7D
1ahozVWkEkohOjeQBOzrwj5ayqv+MJj5C6PkfsDGyI0Sdxy5vKXAJsTXFMYYSC7K
oSwi9WwfKp7vz+TOOqWeO24BtD3klVALOOnf9ysRawkMRXqepyCcWsKqNmcsk8NQ
oCKWJjQEg4ADMxZY1/xd4t0wPetEp34VY+TN2tA3WMoNV9vtwVHthb4j4xQsIEyD
kSq2UQbylNEuQ3gmaEC92Rroc1NL1an8hQz6MCmMrAeT3CZF2MJR92ZMMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNy2dKFe3zkH+oaeMuHUAVSnsIhrMB8GA1UdIwQY
MBaAFJ7QxP9KkAcyiLl2dGlBQnIfW4Q1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnRERV8wcVFCektJdVhaMGFVRkNjaDliaERVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi85YTUwZjEtMjk0Yi00OGU0LWJlYWYt
MWRjYWQ4ZTY4ZWQ5LzEvM0xaMG9WN2ZPUWY2aHA0eTRkUUJWS2V3aUdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi85YTUwZjEtMjk0Yi00OGU0LWJlYWYtMWRjYWQ4ZTY4ZWQ5
LzEvbnRERV8wcVFCektJdVhaMGFVRkNjaDliaERVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVmpNMA0G
CSqGSIb3DQEBCwUAA4IBAQB3xW2C3tFcFyqO/5+RorNXLh/GA6MgChcA3RzFwJM3
EXXKVuOK7hrAzm84WTHjHM+4z6FLqENg94QZHKxYX58xIDX8Iah9Vm9QEjgY+FGA
ZQjhdsbKlGH/kT7pzn8cQoYagdXt2C2qOXTinh7cqjwhiV0E7ec8vhA+4IIuOEPk
3JKj0i9Y33U5/3AHDIRC2Y7WgKU6F9RubpV8CxC/qm5Uj9vOsukk8FPskA1spnoL
6bt/ZowXPpr6l+JEB/anR7oewQb7kclPBQSJzAczxpXHdD355UUbUOQTqQpeO79s
LejiGgkZggg+P8DUPgI6PQrovSKxB4LH/hLcDWVKUGhj
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:29 2024 by rpki-client on console-ams.rpki-client.org