Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/etH1D-xJJLkF4Dept7M-VUVCiK8.roa
File: etH1D-xJJLkF4Dept7M-VUVCiK8.roa (raw, json)
Hash identifier: AB9TK+psN0bpAFGH1qaVmL9e7Svd6uJjJUb5X1kyY1c=
Subject key identifier: 7A:D1:F5:0F:EC:49:24:B9:05:E0:37:A9:B7:B3:3E:55:45:42:88:AF
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0188C529176196FF67DFAF319AE7764AF58B
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/etH1D-xJJLkF4Dept7M-VUVCiK8.roa
Signing time: Fri 16 Jun 2023 17:03:04 +0000
ROA not before: Fri 16 Jun 2023 17:03:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 89.36.140.0/24 maxlen: 24
86.105.4.0/24 maxlen: 24
46.102.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Jun 2023 17:27:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c5:29:17:61:96:ff:67:df:af:31:9a:e7:76:4a:f5:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 16 17:03:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ad1f50fec4924b905e037a9b7b33e55454288af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:20:8c:4e:a2:85:79:03:cf:cd:49:c9:6c:f3:
38:fd:be:08:98:9a:d0:ab:f9:ba:5d:22:85:e8:2e:
fc:c3:8e:38:df:5c:53:7a:24:b5:0b:cf:65:91:6d:
bb:60:6b:bb:f1:58:32:23:dd:e9:df:14:18:67:06:
74:ce:48:d6:25:b8:48:ae:f1:09:9f:05:52:f4:c6:
87:fc:63:71:c1:ce:3f:ea:ab:17:75:c2:39:41:29:
27:5c:1d:fc:88:95:86:e0:dd:b1:c9:78:86:b0:d8:
0a:98:62:58:60:ef:ba:4b:d5:e5:99:a3:b2:fc:88:
6c:56:37:70:a0:2f:a9:a8:87:94:47:34:b2:7f:b2:
9e:53:1c:73:ab:f3:72:6b:d3:7f:62:f1:fa:7c:db:
6b:82:f2:c7:ba:87:79:2e:69:d8:a7:71:00:ad:ea:
6f:06:d2:89:2f:58:ac:c7:24:b9:8c:e8:32:87:d8:
05:1e:20:ab:f9:c2:5a:db:34:02:2d:50:3c:81:a4:
ea:37:69:7d:10:35:de:f7:ce:3a:0a:be:e1:45:d2:
e5:b1:bf:76:09:06:d0:0f:18:64:a8:ae:5f:d0:87:
9e:c0:55:a5:58:ec:0f:83:a0:26:98:a4:22:48:55:
dd:d5:9d:63:b1:98:76:c7:d2:3c:cb:ba:51:6c:46:
3b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D1:F5:0F:EC:49:24:B9:05:E0:37:A9:B7:B3:3E:55:45:42:88:AF
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/etH1D-xJJLkF4Dept7M-VUVCiK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.237.0/24
86.105.4.0/24
89.36.140.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:d4:db:6a:2e:66:6e:4a:35:c9:94:cc:81:3f:bb:3e:74:1d:
9e:57:e6:0c:e0:cb:1c:e3:4a:81:60:5a:22:8e:ce:1b:ca:f0:
a6:07:35:a4:b1:d8:e3:9e:27:8d:2f:4b:07:ee:c7:b2:68:d2:
3c:bf:7e:2d:e4:e7:e5:64:b3:e1:3e:06:b2:11:cd:18:31:14:
83:42:08:3d:f1:8c:1b:bb:b6:28:df:cf:5f:c3:cb:c6:20:ab:
b1:3b:aa:87:24:18:b0:49:c8:c5:bb:78:e8:a3:9d:3d:26:7a:
89:0b:a0:fe:4d:fa:c1:89:14:d2:68:ec:4d:ec:a5:9b:86:3a:
ba:71:85:3d:77:13:ce:d0:c5:0c:fd:c0:5c:3c:0b:a5:42:ea:
60:0c:f9:e8:b7:00:55:cb:cc:e8:bb:5c:78:56:01:6a:21:bb:
5d:4a:31:51:35:7e:48:58:f7:47:85:59:5a:0b:33:a6:5a:22:
6d:24:a0:5d:f8:04:ae:86:bc:04:f6:84:99:79:b0:9a:01:35:
2d:0b:5e:ec:71:d8:87:9f:77:6b:96:25:51:02:d1:a6:55:18:
4f:03:e5:6f:4b:cc:ae:bf:ec:73:78:74:41:1c:e9:7b:08:fb:
fb:1d:4a:19:63:01:20:87:70:0f:00:12:ac:68:f2:f0:cf:07:
6d:88:d2:cb
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYjFKRdhlv9n368xmud2SvWLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjMwNjE2MTcwMzA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YWQxZjUwZmVjNDkyNGI5MDVlMDM3YTliN2IzM2U1NTQ1NDI4OGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCCMTqKFeQPPzUnJbPM4/b4ImJrQ
q/m6XSKF6C78w44431xTeiS1C89lkW27YGu78VgyI93p3xQYZwZ0zkjWJbhIrvEJ
nwVS9MaH/GNxwc4/6qsXdcI5QSknXB38iJWG4N2xyXiGsNgKmGJYYO+6S9XlmaOy
/IhsVjdwoC+pqIeURzSyf7KeUxxzq/Nya9N/YvH6fNtrgvLHuod5LmnYp3EArepv
BtKJL1isxyS5jOgyh9gFHiCr+cJa2zQCLVA8gaTqN2l9EDXe9846Cr7hRdLlsb92
CQbQDxhkqK5f0IeewFWlWOwPg6AmmKQiSFXd1Z1jsZh2x9I8y7pRbEY7PQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHrR9Q/sSSS5BeA3qbezPlVFQoivMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvZXRIMUQteEpKTGtGNERlcHQ3TS1WVVZDaUs4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALmbtAwQA
VmkEAwQAWSSMMA0GCSqGSIb3DQEBCwUAA4IBAQB61NtqLmZuSjXJlMyBP7s+dB2e
V+YM4Msc40qBYFoijs4byvCmBzWksdjjnieNL0sH7seyaNI8v34t5OflZLPhPgay
Ec0YMRSDQgg98Ywbu7Yo389fw8vGIKuxO6qHJBiwScjFu3joo509JnqJC6D+TfrB
iRTSaOxN7KWbhjq6cYU9dxPO0MUM/cBcPAulQupgDPnotwBVy8zou1x4VgFqIbtd
SjFRNX5IWPdHhVlaCzOmWiJtJKBd+ASuhrwE9oSZebCaATUtC17scdiHn3drliVR
AtGmVRhPA+VvS8yuv+xzeHRBHOl7CPv7HUoZYwEgh3APABKsaPLwzwdtiNLL
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:10 2024 by rpki-client on console-fra.rpki-client.org