Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/dl45FltFTS04LmTUboFttCVjjjY.roa
File: dl45FltFTS04LmTUboFttCVjjjY.roa (raw, json)
Hash identifier: voGcdOcYd4w+gF54eJegY2LUAEHQdF72Un21bPI/rq4=
Subject key identifier: 76:5E:39:16:5B:45:4D:2D:38:2E:64:D4:6E:81:6D:B4:25:63:8E:36
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018C1B3006EBD60516673837FEBE9C364757
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/dl45FltFTS04LmTUboFttCVjjjY.roa
Signing time: Wed 29 Nov 2023 13:06:21 +0000
ROA not before: Wed 29 Nov 2023 13:06:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 86.107.51.0/24 maxlen: 24
89.34.202.0/24 maxlen: 24
188.214.107.0/24 maxlen: 24
89.35.119.0/24 maxlen: 24
89.35.130.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 01 Dec 2023 08:05:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1b:30:06:eb:d6:05:16:67:38:37:fe:be:9c:36:47:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Nov 29 13:06:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=765e39165b454d2d382e64d46e816db425638e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5c:2a:85:46:9e:f1:0d:d0:1d:32:f6:4f:c8:
e7:ff:1a:96:e2:38:2b:81:67:06:f9:ea:b4:18:97:
31:22:59:44:b2:e1:30:eb:2c:b7:17:56:79:3e:09:
7d:ae:e1:69:85:32:2f:43:98:81:47:1a:97:59:bc:
76:0b:08:76:4d:4f:e5:2d:91:1f:d7:92:fc:7a:f5:
7b:9a:c4:cf:6e:cc:c3:cf:68:81:d1:8e:f0:f1:67:
bb:7c:d8:50:e4:f8:28:57:a9:40:8e:7c:10:f3:e4:
d9:20:1d:b1:e2:b1:34:56:0c:97:7d:aa:6f:ca:c3:
7e:36:0d:42:7d:4b:8d:0e:f0:0b:a0:16:28:e1:34:
ff:b9:58:c0:45:af:90:62:3a:bc:b6:e3:44:c5:3a:
8f:6f:61:d3:29:44:14:b4:c8:28:ca:ba:32:ba:9e:
7d:19:4c:eb:a9:ac:ca:8b:3a:c9:54:81:fe:8b:74:
28:a7:8f:ef:d3:bc:3d:55:08:6c:e2:48:16:da:97:
66:9f:6a:a1:f5:bf:66:3b:e2:95:76:54:96:79:08:
4e:15:69:f1:08:b5:b1:e0:7f:80:35:02:60:85:bc:
99:63:b9:8f:6b:b8:b4:01:ac:c2:0e:2c:9d:01:10:
43:66:97:aa:ef:42:ad:56:36:fe:53:f6:ea:b4:53:
30:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:5E:39:16:5B:45:4D:2D:38:2E:64:D4:6E:81:6D:B4:25:63:8E:36
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/dl45FltFTS04LmTUboFttCVjjjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.51.0/24
89.34.202.0/24
89.35.119.0/24
89.35.130.0/23
188.214.107.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:8c:54:bc:3c:a1:0e:46:55:d5:76:5a:1d:67:38:e3:08:09:
ef:07:71:e5:7c:14:4c:4a:5c:d8:d2:77:e3:aa:05:7c:36:bf:
9b:2a:11:53:67:88:f2:fb:9a:33:42:91:33:91:98:43:4c:f7:
17:9b:97:b3:5b:6d:c3:08:95:0d:8d:03:15:b8:32:95:c5:ce:
83:da:92:5b:3c:13:9d:16:b3:9a:25:c6:86:c4:61:44:26:00:
b4:c3:8f:19:40:44:d4:12:37:76:6a:71:d8:d5:8e:9d:1a:8d:
13:c2:8d:c5:58:8b:16:53:fb:40:72:45:a2:c2:c5:ac:96:43:
cb:fd:1c:6e:65:bf:c9:40:30:05:d7:48:8d:92:30:b0:de:1a:
4c:0d:48:09:b7:3f:f9:a6:26:ab:58:94:f7:61:8c:e5:40:c5:
14:a0:3e:c5:23:eb:dc:c8:a7:aa:9b:e4:42:87:96:b4:a2:84:
1e:f9:e9:ce:1e:e9:96:83:9f:d3:d4:5b:0e:64:87:04:09:c1:
06:b1:aa:98:ec:ab:eb:ae:00:aa:39:d5:46:30:46:9c:c8:87:
b8:4a:13:67:62:a3:58:5d:37:a5:b9:ff:cb:27:68:34:4c:ee:
bc:71:75:7e:f6:f5:92:1b:81:9c:1a:95:34:8d:9f:b8:55:a2:
ae:e4:fc:3b
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYwbMAbr1gUWZzg3/r6cNkdXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjMxMTI5MTMwNjIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NjVlMzkxNjViNDU0ZDJkMzgyZTY0ZDQ2ZTgxNmRiNDI1NjM4ZTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVwqhUae8Q3QHTL2T8jn/xqW4jgr
gWcG+eq0GJcxIllEsuEw6yy3F1Z5Pgl9ruFphTIvQ5iBRxqXWbx2Cwh2TU/lLZEf
15L8evV7msTPbszDz2iB0Y7w8We7fNhQ5PgoV6lAjnwQ8+TZIB2x4rE0VgyXfapv
ysN+Ng1CfUuNDvALoBYo4TT/uVjARa+QYjq8tuNExTqPb2HTKUQUtMgoyroyup59
GUzrqazKizrJVIH+i3Qop4/v07w9VQhs4kgW2pdmn2qh9b9mO+KVdlSWeQhOFWnx
CLWx4H+ANQJghbyZY7mPa7i0AazCDiydARBDZpeq70KtVjb+U/bqtFMw6wIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFHZeORZbRU0tOC5k1G6BbbQlY442MB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvZGw0NUZsdEZUUzA0TG1UVWJvRnR0Q1ZqampZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAVmszAwQA
WSLKAwQAWSN3AwQBWSOCAwQAvNZrMA0GCSqGSIb3DQEBCwUAA4IBAQBsjFS8PKEO
RlXVdlodZzjjCAnvB3HlfBRMSlzY0nfjqgV8Nr+bKhFTZ4jy+5ozQpEzkZhDTPcX
m5ezW23DCJUNjQMVuDKVxc6D2pJbPBOdFrOaJcaGxGFEJgC0w48ZQETUEjd2anHY
1Y6dGo0Two3FWIsWU/tAckWiwsWslkPL/RxuZb/JQDAF10iNkjCw3hpMDUgJtz/5
piarWJT3YYzlQMUUoD7FI+vcyKeqm+RCh5a0ooQe+enOHumWg5/T1FsOZIcECcEG
saqY7KvrrgCqOdVGMEacyIe4ShNnYqNYXTeluf/LJ2g0TO68cXV+9vWSG4GcGpU0
jZ+4VaKu5Pw7
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:07 2024 by rpki-client on console-fra.rpki-client.org