Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/j4rruEkp9vjzmsl9zB0blw0CzkM.roa
File: j4rruEkp9vjzmsl9zB0blw0CzkM.roa (raw, json)
Hash identifier: wjMHa3CHGBpEEfNpcEeA6j3Ol6KZ12s8AqGishj4ImU=
Subject key identifier: 8F:8A:EB:B8:49:29:F6:F8:F3:9A:C9:7D:CC:1D:1B:97:0D:02:CE:43
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01877AC2D60016C7CC9ED8B3277F3D68ED12
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/j4rruEkp9vjzmsl9zB0blw0CzkM.roa
Signing time: Thu 13 Apr 2023 13:16:41 +0000
ROA not before: Thu 13 Apr 2023 13:16:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 86.107.50.0/24 maxlen: 24
188.213.216.0/24 maxlen: 24
93.115.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Apr 2023 14:09:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7a:c2:d6:00:16:c7:cc:9e:d8:b3:27:7f:3d:68:ed:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 13 13:16:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f8aebb84929f6f8f39ac97dcc1d1b970d02ce43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6d:e1:0d:b1:9c:65:96:84:e6:e5:a8:c4:44:
df:dd:a9:0c:2b:dc:8e:b4:83:f6:24:d4:d4:9b:79:
8e:e4:d6:19:72:a0:93:29:7a:9b:45:49:73:09:9e:
7b:39:eb:d9:be:59:83:eb:aa:6d:ee:94:0d:a5:22:
a0:1a:07:05:8e:dc:4e:02:bc:c8:0a:30:82:59:a4:
29:c2:6c:a9:b5:36:5e:26:b9:54:8a:f6:10:07:9f:
2b:eb:80:bd:0b:eb:e4:31:7e:93:7a:b6:64:22:3a:
5f:03:85:6b:f2:ef:e3:f7:e5:fd:26:b3:20:a0:13:
ab:02:0e:c6:a3:a7:b7:ef:d5:78:82:2a:fd:61:0c:
bf:f5:21:c6:5e:93:e4:81:03:51:c7:f3:41:82:80:
3f:e2:9d:79:6b:a3:a1:27:3e:52:9c:d7:c4:7b:cd:
f5:b1:9c:04:5c:d3:b7:11:60:61:da:89:8f:2b:10:
b2:fe:e7:ba:f1:6b:ad:34:47:30:1a:b8:e4:db:04:
6f:0f:90:4a:3b:46:16:a9:86:e1:3f:9b:37:c4:6c:
81:1f:f1:69:86:b8:97:f1:83:22:83:e7:6c:4d:f8:
93:6a:9e:b2:fa:05:d8:29:73:0c:81:d1:6c:6a:0c:
cc:7d:e0:1b:ae:f7:1a:40:9f:31:79:97:5d:23:21:
62:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:8A:EB:B8:49:29:F6:F8:F3:9A:C9:7D:CC:1D:1B:97:0D:02:CE:43
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/j4rruEkp9vjzmsl9zB0blw0CzkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.50.0/24
93.115.203.0/24
188.213.216.0/24
Signature Algorithm: sha256WithRSAEncryption
45:30:0f:95:22:e0:37:cb:b0:8a:12:fd:bb:e8:57:fb:a7:9d:
ab:e3:89:95:0a:cb:47:6e:44:92:76:50:e4:ed:34:c3:43:b8:
35:fb:3d:e5:b6:58:1f:86:3d:18:58:28:72:a1:2b:17:85:fb:
ee:c8:f8:42:db:9a:9f:14:60:74:f1:0d:3a:eb:13:7a:c7:e5:
80:67:80:53:f6:f4:f5:f5:df:81:ac:5b:b4:62:4a:9b:60:07:
ca:74:64:ee:e9:67:16:17:bc:ff:a6:70:bb:b5:1e:65:0b:d2:
0f:04:fc:4d:bd:31:6d:23:2f:2e:36:91:f5:8a:86:21:09:2c:
5c:01:4a:15:84:ef:c2:b1:1b:4e:9d:03:11:f9:6a:87:48:a8:
54:ad:47:16:97:2b:72:66:5a:0e:ff:4e:ae:b2:56:88:1f:bd:
0b:f1:6d:0a:48:52:f7:c9:19:3c:5a:5a:b4:b1:3b:5c:48:93:
92:16:d1:95:5e:dd:66:02:c5:8c:8a:d7:b7:1c:67:03:f2:4d:
46:de:23:a4:cc:49:24:6e:7e:4b:6a:94:07:f8:81:be:80:59:
83:86:8f:a0:46:b7:ff:7f:0f:de:27:86:af:f2:0e:61:c9:58:
7d:7b:17:63:20:80:a2:8e:e7:39:6d:4c:72:ff:88:d8:56:11:
68:7f:47:ed
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYd6wtYAFsfMntizJ389aO0SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjMwNDEzMTMxNjQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjhhZWJiODQ5MjlmNmY4ZjM5YWM5N2RjYzFkMWI5NzBkMDJjZTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwG3hDbGcZZaE5uWoxETf3akMK9yO
tIP2JNTUm3mO5NYZcqCTKXqbRUlzCZ57OevZvlmD66pt7pQNpSKgGgcFjtxOArzI
CjCCWaQpwmyptTZeJrlUivYQB58r64C9C+vkMX6TerZkIjpfA4Vr8u/j9+X9JrMg
oBOrAg7Go6e379V4gir9YQy/9SHGXpPkgQNRx/NBgoA/4p15a6OhJz5SnNfEe831
sZwEXNO3EWBh2omPKxCy/ue68WutNEcwGrjk2wRvD5BKO0YWqYbhP5s3xGyBH/Fp
hriX8YMig+dsTfiTap6y+gXYKXMMgdFsagzMfeAbrvcaQJ8xeZddIyFilQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFI+K67hJKfb485rJfcwdG5cNAs5DMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvajRycnVFa3A5dmp6bXNsOXpCMGJsdzBDemtNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVmsyAwQA
XXPLAwQAvNXYMA0GCSqGSIb3DQEBCwUAA4IBAQBFMA+VIuA3y7CKEv276Ff7p52r
44mVCstHbkSSdlDk7TTDQ7g1+z3ltlgfhj0YWChyoSsXhfvuyPhC25qfFGB08Q06
6xN6x+WAZ4BT9vT19d+BrFu0YkqbYAfKdGTu6WcWF7z/pnC7tR5lC9IPBPxNvTFt
Iy8uNpH1ioYhCSxcAUoVhO/CsRtOnQMR+WqHSKhUrUcWlytyZloO/06uslaIH70L
8W0KSFL3yRk8Wlq0sTtcSJOSFtGVXt1mAsWMite3HGcD8k1G3iOkzEkkbn5LapQH
+IG+gFmDho+gRrf/fw/eJ4av8g5hyVh9exdjIICijuc5bUxy/4jYVhFof0ft
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:14 2024 by rpki-client on console-ams.rpki-client.org