Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/FW3jT9QBf4mvvl4s4cPv2uXOVW4.roa
File: FW3jT9QBf4mvvl4s4cPv2uXOVW4.roa (raw, json)
Hash identifier: 5hbCOJSB/WQE7vn9zGRppNWhTqv9foo0eA6RQtKZTKA=
Subject key identifier: 15:6D:E3:4F:D4:01:7F:89:AF:BE:5E:2C:E1:C3:EF:DA:E5:CE:55:6E
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018CC41373EC12C7529C902E66913463A257
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/FW3jT9QBf4mvvl4s4cPv2uXOVW4.roa
Signing time: Mon 01 Jan 2024 08:10:58 +0000
ROA not before: Mon 01 Jan 2024 08:10:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 86.107.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:13:73:ec:12:c7:52:9c:90:2e:66:91:34:63:a2:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 1 08:10:58 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=156de34fd4017f89afbe5e2ce1c3efdae5ce556e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:14:f5:ce:1a:90:9e:71:23:97:a1:ef:6f:81:
86:24:68:bf:68:a9:15:61:7b:7a:05:b5:10:79:3d:
3d:28:2c:da:fc:75:f3:f2:a0:d0:dd:e8:04:73:3b:
08:0e:78:5d:d1:85:8d:d2:ac:78:72:53:f4:b4:66:
f8:6d:32:70:c4:eb:6a:cc:45:36:b7:26:61:d6:bc:
4d:a1:b0:5c:92:70:08:7e:b7:a2:46:10:2f:4a:c8:
03:b1:b0:4c:87:02:54:6d:fe:d5:7e:82:eb:ea:7a:
f6:97:ca:ee:5b:f2:e5:fb:7c:88:89:9e:39:88:2a:
d4:4e:98:80:7a:2b:c1:87:e8:85:33:9a:46:aa:e8:
15:28:4b:33:0f:5e:e1:bf:f3:6f:ec:fb:d8:83:df:
74:e6:b6:ce:df:65:db:e5:f6:ed:c4:29:66:95:a5:
b7:c8:56:f8:32:16:40:6f:0b:3a:e4:66:c8:a4:c9:
30:31:f0:88:22:8e:ad:ea:d6:db:e6:6c:2b:87:2a:
92:8f:33:c7:75:68:c2:58:39:78:ba:09:61:ba:cd:
a0:8f:03:a8:80:0a:9d:c8:8f:04:49:e6:fc:98:b7:
72:9e:05:12:37:63:28:c2:9b:15:19:b7:ed:d3:01:
91:07:72:e7:b5:2a:aa:25:24:f5:f0:7f:ef:c0:85:
c8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:6D:E3:4F:D4:01:7F:89:AF:BE:5E:2C:E1:C3:EF:DA:E5:CE:55:6E
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/FW3jT9QBf4mvvl4s4cPv2uXOVW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.51.0/24
Signature Algorithm: sha256WithRSAEncryption
92:5e:3e:03:00:0d:13:24:92:13:2d:67:8c:71:45:b4:78:93:
fb:38:95:6b:4d:e0:9d:61:1f:c3:fc:31:39:2f:f9:ea:27:74:
7e:f8:5a:ec:33:6a:a0:29:c2:dc:7d:5a:d8:d0:71:bb:80:f9:
9b:06:00:e7:29:ce:b5:0d:a9:e5:45:72:70:ad:de:dd:17:03:
19:11:ae:80:1b:09:11:22:95:b8:72:78:f7:5d:e6:90:ef:5d:
df:55:93:28:6f:ce:03:3f:2c:73:7b:fc:84:dd:32:1c:15:fa:
66:92:a9:59:dc:3c:4f:5a:41:88:e6:54:a2:6c:e7:7c:38:c8:
f5:92:2c:03:af:fa:7c:19:3a:a0:ae:91:c5:e8:c7:4b:96:46:
a6:c9:44:02:fe:8d:6e:0a:17:49:41:af:41:c9:01:3b:ab:7a:
ea:d3:44:e9:4b:e4:61:67:3d:3e:4e:33:e8:3c:c4:79:f7:ec:
73:e1:37:23:df:7a:e0:c1:c8:5e:48:18:22:76:d1:b0:ea:6c:
29:f4:c0:8c:01:15:bb:36:7b:cf:21:15:bf:4d:0c:3b:75:86:
49:a5:ab:73:08:bd:08:e7:e7:8f:8e:1a:44:52:78:1e:b9:82:
89:7b:49:b1:b3:5b:d0:49:dd:70:b7:74:40:13:5b:bd:98:e3:
fb:9d:fa:9f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEE3PsEsdSnJAuZpE0Y6JXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjQwMTAxMDgxMDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTZkZTM0ZmQ0MDE3Zjg5YWZiZTVlMmNlMWMzZWZkYWU1Y2U1NTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBT1zhqQnnEjl6Hvb4GGJGi/aKkV
YXt6BbUQeT09KCza/HXz8qDQ3egEczsIDnhd0YWN0qx4clP0tGb4bTJwxOtqzEU2
tyZh1rxNobBcknAIfreiRhAvSsgDsbBMhwJUbf7VfoLr6nr2l8ruW/Ll+3yIiZ45
iCrUTpiAeivBh+iFM5pGqugVKEszD17hv/Nv7PvYg9905rbO32Xb5fbtxClmlaW3
yFb4MhZAbws65GbIpMkwMfCIIo6t6tbb5mwrhyqSjzPHdWjCWDl4uglhus2gjwOo
gAqdyI8ESeb8mLdyngUSN2MowpsVGbft0wGRB3LntSqqJST18H/vwIXI8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBVt40/UAX+Jr75eLOHD79rlzlVuMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvRlczalQ5UUJmNG12dmw0czRjUHYydVhPVlc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVmszMA0G
CSqGSIb3DQEBCwUAA4IBAQCSXj4DAA0TJJITLWeMcUW0eJP7OJVrTeCdYR/D/DE5
L/nqJ3R++FrsM2qgKcLcfVrY0HG7gPmbBgDnKc61DanlRXJwrd7dFwMZEa6AGwkR
IpW4cnj3XeaQ713fVZMob84DPyxze/yE3TIcFfpmkqlZ3DxPWkGI5lSibOd8OMj1
kiwDr/p8GTqgrpHF6MdLlkamyUQC/o1uChdJQa9ByQE7q3rq00TpS+RhZz0+TjPo
PMR59+xz4Tcj33rgwcheSBgidtGw6mwp9MCMARW7NnvPIRW/TQw7dYZJpatzCL0I
5+ePjhpEUngeuYKJe0mxs1vQSd1wt3RAE1u9mOP7nfqf
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org