Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/P_8abms0e0QsP38cTGHAufFhL-4.roa
File: P_8abms0e0QsP38cTGHAufFhL-4.roa (raw, json)
Hash identifier: jhIyeY8mYjmgKwLkqRTU1yf2sCVGM/zs7XfYGTqcHa8=
Subject key identifier: 3F:FF:1A:6E:6B:34:7B:44:2C:3F:7F:1C:4C:61:C0:B9:F1:61:2F:EE
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01906E98D4031BAF68C71CA3D9203A32BFBE
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/P_8abms0e0QsP38cTGHAufFhL-4.roa
Signing time: Mon 01 Jul 2024 14:00:27 +0000
ROA not before: Mon 01 Jul 2024 14:00:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56971
IP address blocks: 46.8.237.0/24 maxlen: 24
46.8.238.0/24 maxlen: 32
188.130.154.0/24 maxlen: 24
188.130.206.0/24 maxlen: 32
188.130.207.0/24 maxlen: 32
Validation: Failed, certificate revoked on Mon 08 Jul 2024 14:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6e:98:d4:03:1b:af:68:c7:1c:a3:d9:20:3a:32:bf:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jul 1 14:00:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3fff1a6e6b347b442c3f7f1c4c61c0b9f1612fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:84:40:25:ce:be:fa:21:2a:f5:fa:33:56:da:
46:22:c4:9a:e4:d0:75:8e:85:ff:99:aa:db:3f:d3:
bf:80:c8:3a:a7:b7:37:f5:b1:fe:ae:4b:7b:2f:f6:
4b:51:55:ab:62:7e:64:0a:dc:41:38:f5:5b:c2:5f:
b1:b5:29:fc:86:cf:7d:82:2c:19:7b:5b:04:01:5e:
63:d7:18:ee:28:c6:15:5d:e0:64:a0:ed:78:64:60:
c8:aa:23:6a:cb:cc:7d:da:bd:b7:8f:e4:58:ea:dd:
16:b2:6c:f3:70:64:2d:33:e0:a3:38:ac:d1:91:c1:
49:ee:31:43:49:1d:68:8b:ec:db:ae:9c:73:6a:b5:
5c:23:2e:a2:7b:e3:f7:04:be:d4:b8:92:67:67:f0:
d7:4a:19:91:7f:3e:58:45:b9:34:9a:da:8c:7c:07:
02:03:38:d6:70:fa:68:50:db:c9:15:a2:df:d6:3b:
19:85:c9:9c:2c:b5:92:61:08:dc:0e:97:eb:05:86:
00:ae:46:e1:bb:af:e9:2d:6b:e9:04:9a:c3:4a:57:
1c:a2:88:06:d2:2a:70:1f:a8:2b:8a:16:3f:e7:04:
c6:32:40:c8:d5:05:81:01:53:ad:6f:0c:57:82:4d:
df:ae:ba:3b:89:2c:a6:66:e6:7a:0a:7f:a3:01:9a:
1b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:FF:1A:6E:6B:34:7B:44:2C:3F:7F:1C:4C:61:C0:B9:F1:61:2F:EE
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/P_8abms0e0QsP38cTGHAufFhL-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.237.0-46.8.238.255
188.130.154.0/24
188.130.206.0/23
Signature Algorithm: sha256WithRSAEncryption
34:0c:b7:9b:95:05:f4:43:9d:0a:29:a8:e5:7f:11:b5:32:8b:
4c:e2:27:fd:dd:ef:f9:63:49:75:2b:66:26:7c:19:71:94:ce:
8d:59:8a:a8:87:fc:57:eb:8b:56:ba:ad:d3:2d:9b:08:f2:65:
58:e5:b1:b0:ed:78:10:8f:d5:22:8f:66:70:cf:f2:cb:df:98:
e1:8a:d4:72:5a:36:c8:4e:5f:2b:d0:06:e5:d7:04:11:4a:35:
69:03:7e:bf:78:87:f6:ac:b1:4c:a0:ce:b6:32:c5:be:82:07:
fd:9f:0a:88:21:7e:1a:e2:9a:60:8c:d0:05:2c:a9:e8:60:aa:
61:3d:6b:0e:b9:8c:75:5c:2e:a5:4f:25:c3:11:21:2a:82:f0:
3a:18:51:56:f9:26:e7:b2:39:94:dc:30:37:84:c9:03:65:86:
43:89:5f:26:c9:f2:19:91:9c:60:0c:d8:18:f2:ee:86:a2:9c:
1a:6b:85:0d:c0:7a:75:3c:09:dd:30:32:eb:b2:04:2b:63:66:
e2:0b:a6:cd:4f:0d:b0:5b:47:77:7b:34:e6:91:68:51:45:5b:
2d:00:88:7b:d3:69:ed:cd:73:80:83:e7:e2:0f:44:8f:1e:a3:
c3:8f:7c:ec:13:4e:39:df:25:ba:0c:bb:09:9d:b6:9e:17:86:
e0:8f:fd:c7
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZBumNQDG69oxxyj2SA6Mr++MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0
MjAzYjQwHhcNMjQwNzAxMTQwMDI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZmZmMWE2ZTZiMzQ3YjQ0MmMzZjdmMWM0YzYxYzBiOWYxNjEyZmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4RAJc6++iEq9fozVtpGIsSa5NB1
joX/marbP9O/gMg6p7c39bH+rkt7L/ZLUVWrYn5kCtxBOPVbwl+xtSn8hs99giwZ
e1sEAV5j1xjuKMYVXeBkoO14ZGDIqiNqy8x92r23j+RY6t0WsmzzcGQtM+CjOKzR
kcFJ7jFDSR1oi+zbrpxzarVcIy6ie+P3BL7UuJJnZ/DXShmRfz5YRbk0mtqMfAcC
AzjWcPpoUNvJFaLf1jsZhcmcLLWSYQjcDpfrBYYArkbhu6/pLWvpBJrDSlccoogG
0ipwH6grihY/5wTGMkDI1QWBAVOtbwxXgk3frro7iSymZuZ6Cn+jAZob6QIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFD//Gm5rNHtELD9/HExhwLnxYS/uMB8GA1UdIwQY
MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt
MTY2OTljOTZkZDVlLzEvUF84YWJtczBlMFFzUDM4Y1RHSEF1ZkZoTC00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl
LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAAuCO0D
BAAuCO4DBAC8gpoDBAG8gs4wDQYJKoZIhvcNAQELBQADggEBADQMt5uVBfRDnQop
qOV/EbUyi0ziJ/3d7/ljSXUrZiZ8GXGUzo1ZiqiH/Ffri1a6rdMtmwjyZVjlsbDt
eBCP1SKPZnDP8svfmOGK1HJaNshOXyvQBuXXBBFKNWkDfr94h/assUygzrYyxb6C
B/2fCoghfhrimmCM0AUsqehgqmE9aw65jHVcLqVPJcMRISqC8DoYUVb5JueyOZTc
MDeEyQNlhkOJXybJ8hmRnGAM2Bjy7oainBprhQ3AenU8Cd0wMuuyBCtjZuILps1P
DbBbR3d7NOaRaFFFWy0AiHvTae3Nc4CD5+IPRI8eo8OPfOwTTjnfJboMuwmdtp4X
huCP/cc=
-----END CERTIFICATE-----
Generated at Mon Jul 8 16:19:57 2024 by rpki-client on console-fra.rpki-client.org