Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/aiIkU722vOYYtnDCfR80WmC55V0.roa
File: aiIkU722vOYYtnDCfR80WmC55V0.roa (raw, json)
Hash identifier: /0PeoHsw3VMc67KAhae0XHaeyYtKr7f6CXiG3NiMp10=
Subject key identifier: 6A:22:24:53:BD:B6:BC:E6:18:B6:70:C2:7D:1F:34:5A:60:B9:E5:5D
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0189EE10193DAB1A68F5E72988463DB8D314
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/aiIkU722vOYYtnDCfR80WmC55V0.roa
Signing time: Sun 13 Aug 2023 08:42:59 +0000
ROA not before: Sun 13 Aug 2023 08:42:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398343
IP address blocks: 86.107.50.0/24 maxlen: 24
2.57.241.0/24 maxlen: 24
176.126.174.0/24 maxlen: 24
93.115.203.0/24 maxlen: 24
45.88.12.0/24 maxlen: 24
94.177.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Aug 2023 11:53:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ee:10:19:3d:ab:1a:68:f5:e7:29:88:46:3d:b8:d3:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 13 08:42:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a222453bdb6bce618b670c27d1f345a60b9e55d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3c:9a:43:a9:3c:01:8d:03:c9:4e:09:de:d8:
71:b0:15:a2:f1:4d:36:20:ba:62:f2:cb:b9:77:65:
82:96:c6:3b:96:59:16:1d:38:39:11:26:15:7c:b2:
0f:ab:d2:53:c2:43:61:1a:03:7d:7d:59:ce:46:89:
85:6b:3a:0c:9a:0c:f8:75:53:54:23:dc:c1:5d:4c:
f7:f1:24:28:3f:2c:98:dd:9d:11:06:dd:73:46:41:
7b:8b:52:77:51:e8:a5:30:47:e0:cc:24:6f:33:7f:
07:03:b5:92:20:7d:81:50:be:53:d1:29:3f:8c:10:
9a:e8:6a:30:74:e3:dc:05:53:cd:9e:41:42:f4:e2:
db:5c:7e:42:e2:4d:8b:20:e0:59:f1:f7:39:44:cb:
2a:7b:3b:77:c3:4e:0a:2c:bc:ab:87:62:05:19:e2:
87:cd:d2:8d:ff:da:9d:bb:7a:a2:ec:48:37:43:a0:
6d:a0:5a:20:37:d2:60:e5:6d:ab:86:62:71:0d:03:
07:74:5d:3b:0a:e4:95:9f:98:6b:bf:12:71:5d:f7:
0e:3d:ff:1c:64:12:57:f0:9b:eb:b1:ff:b2:99:0c:
38:9a:58:44:bd:05:42:d5:4c:48:08:6d:7e:89:61:
c9:81:75:b9:64:9d:54:c5:31:2d:2f:b5:a2:22:e3:
ee:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:22:24:53:BD:B6:BC:E6:18:B6:70:C2:7D:1F:34:5A:60:B9:E5:5D
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/aiIkU722vOYYtnDCfR80WmC55V0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.241.0/24
45.88.12.0/24
86.107.50.0/24
93.115.203.0/24
94.177.106.0/24
176.126.174.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:6e:16:5e:c4:ba:51:bd:8f:22:77:b8:38:64:ff:a6:de:6b:
73:db:98:45:97:7b:d9:60:6a:ce:3f:ee:57:ec:2f:cf:97:27:
24:ca:83:de:c7:2c:fb:08:59:6e:ed:61:b0:61:e9:4c:21:fc:
67:07:1c:2a:5e:08:63:9e:28:93:64:4f:1f:d8:a5:bf:6d:f3:
76:04:9c:84:39:98:07:1e:2c:21:52:15:d8:df:74:c9:db:0a:
2d:08:56:06:75:3d:37:73:51:c2:23:77:4f:5a:06:87:5c:b0:
de:74:4a:9d:93:f5:6c:98:2b:42:29:ca:42:0d:79:ea:95:df:
32:ad:72:a1:d8:7b:60:8c:44:e8:59:ca:f7:6a:fe:ef:3b:33:
c5:a3:5a:0c:de:fe:1c:6c:d7:72:c6:46:99:e8:01:83:31:89:
fd:85:4e:c1:b5:4c:60:07:00:f2:25:c8:84:c4:ff:69:7a:1e:
76:51:61:50:59:7e:d9:15:79:25:19:38:d6:f0:03:f9:bd:89:
07:3e:de:d6:af:ab:a2:9b:01:21:5d:35:1d:43:1d:f3:d1:a6:
56:39:73:5a:bc:b3:a3:26:53:1f:be:4e:7a:34:2b:53:c8:47:
97:60:95:85:55:ca:e4:3b:70:df:53:df:e8:74:e5:bb:37:2b:
7a:eb:06:18
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYnuEBk9qxpo9ecpiEY9uNMUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjMwODEzMDg0MjU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTIyMjQ1M2JkYjZiY2U2MThiNjcwYzI3ZDFmMzQ1YTYwYjllNTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzyaQ6k8AY0DyU4J3thxsBWi8U02
ILpi8su5d2WClsY7llkWHTg5ESYVfLIPq9JTwkNhGgN9fVnORomFazoMmgz4dVNU
I9zBXUz38SQoPyyY3Z0RBt1zRkF7i1J3UeilMEfgzCRvM38HA7WSIH2BUL5T0Sk/
jBCa6GowdOPcBVPNnkFC9OLbXH5C4k2LIOBZ8fc5RMsqezt3w04KLLyrh2IFGeKH
zdKN/9qdu3qi7Eg3Q6BtoFogN9Jg5W2rhmJxDQMHdF07CuSVn5hrvxJxXfcOPf8c
ZBJX8Jvrsf+ymQw4mlhEvQVC1UxICG1+iWHJgXW5ZJ1UxTEtL7WiIuPukwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFGoiJFO9trzmGLZwwn0fNFpgueVdMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvYWlJa1U3MjJ2T1lZdG5EQ2ZSODBXbUM1NVYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAAjnxAwQA
LVgMAwQAVmsyAwQAXXPLAwQAXrFqAwQAsH6uMA0GCSqGSIb3DQEBCwUAA4IBAQBr
bhZexLpRvY8id7g4ZP+m3mtz25hFl3vZYGrOP+5X7C/PlyckyoPexyz7CFlu7WGw
YelMIfxnBxwqXghjniiTZE8f2KW/bfN2BJyEOZgHHiwhUhXY33TJ2wotCFYGdT03
c1HCI3dPWgaHXLDedEqdk/VsmCtCKcpCDXnqld8yrXKh2HtgjEToWcr3av7vOzPF
o1oM3v4cbNdyxkaZ6AGDMYn9hU7BtUxgBwDyJciExP9peh52UWFQWX7ZFXklGTjW
8AP5vYkHPt7Wr6uimwEhXTUdQx3z0aZWOXNavLOjJlMfvk56NCtTyEeXYJWFVcrk
O3DfU9/odOW7Nyt66wYY
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:13 2024 by rpki-client on console-ams.rpki-client.org