Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/j6fVTamp47IZsY2w4oFdEmoFybs.roa
File: j6fVTamp47IZsY2w4oFdEmoFybs.roa (raw, json)
Hash identifier: e3Xrlbq1HBlA4hIZ4hcwKBMKQJVHxaY01iTU5aMABe0=
Subject key identifier: 8F:A7:D5:4D:A9:A9:E3:B2:19:B1:8D:B0:E2:81:5D:12:6A:05:C9:BB
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0187C21277C6B6DE05653E17C781584097F2
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/j6fVTamp47IZsY2w4oFdEmoFybs.roa
Signing time: Thu 27 Apr 2023 09:36:42 +0000
ROA not before: Thu 27 Apr 2023 09:36:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 86.107.51.0/24 maxlen: 24
89.34.219.0/24 maxlen: 24
89.47.55.0/24 maxlen: 24
89.35.129.0/24 maxlen: 24
89.35.130.0/23 maxlen: 23
89.35.131.0/24 maxlen: 24
89.40.70.0/24 maxlen: 24
188.241.136.0/24 maxlen: 24
188.241.137.0/24 maxlen: 24
94.198.171.0/24 maxlen: 24
86.107.100.0/24 maxlen: 24
77.81.88.0/24 maxlen: 24
89.45.35.0/24 maxlen: 24
188.214.107.0/24 maxlen: 24
77.81.100.0/24 maxlen: 24
176.223.188.0/24 maxlen: 24
62.192.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Apr 2023 12:08:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c2:12:77:c6:b6:de:05:65:3e:17:c7:81:58:40:97:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 27 09:36:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8fa7d54da9a9e3b219b18db0e2815d126a05c9bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d1:02:34:31:e9:81:f9:24:41:de:ce:7a:e4:
4c:fc:5a:39:62:6f:f4:a5:53:98:14:87:cb:4d:fd:
80:9d:fb:b7:93:3f:ca:30:c2:ea:dc:aa:cd:fd:9a:
a3:bd:8f:5c:12:11:ad:17:ee:e8:11:ef:90:07:16:
b4:57:e8:6b:40:16:10:9a:79:af:30:46:9e:06:0b:
7d:3e:d4:b3:c4:b5:f9:5e:a9:e9:f8:0d:b1:69:45:
e4:5e:69:1c:ad:f9:58:70:d7:64:21:76:93:5c:aa:
c4:7a:11:33:f2:9e:8c:ca:9e:47:94:d8:75:a5:c7:
b1:99:2d:4a:87:94:19:e7:04:2a:d7:c1:f4:7b:c7:
4d:f0:b4:18:46:18:e2:c5:ef:a1:45:7d:91:18:8b:
75:5c:da:a5:7d:00:75:64:75:f3:9b:53:e9:0f:3b:
ee:e4:fd:01:a8:8e:a2:1a:c8:c6:0a:6c:31:6a:2e:
f6:67:ed:09:e4:13:28:11:3c:bf:f8:92:6c:ca:e0:
a1:b8:58:1a:08:9a:41:5e:27:83:c8:97:db:4f:aa:
04:c5:0b:48:00:04:27:cc:62:5a:f3:1f:dc:26:6e:
7a:a1:76:1a:30:01:b2:9e:16:58:a4:60:22:55:4b:
18:3b:28:e2:b9:8d:0e:0a:9b:09:0c:8a:c0:ad:86:
55:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A7:D5:4D:A9:A9:E3:B2:19:B1:8D:B0:E2:81:5D:12:6A:05:C9:BB
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/j6fVTamp47IZsY2w4oFdEmoFybs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.152.0/24
77.81.88.0/24
77.81.100.0/24
86.107.51.0/24
86.107.100.0/24
89.34.219.0/24
89.35.129.0-89.35.131.255
89.40.70.0/24
89.45.35.0/24
89.47.55.0/24
94.198.171.0/24
176.223.188.0/24
188.214.107.0/24
188.241.136.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:29:a5:a2:1e:d7:18:5a:51:bd:ee:32:ea:68:21:6a:1c:65:
19:77:d5:9a:a5:7d:5d:e2:02:68:86:8a:6d:14:15:04:3f:84:
0e:57:40:50:d7:39:55:61:9a:c2:e5:6b:e1:db:1d:54:b3:9d:
82:d6:eb:90:c9:7f:8a:1b:b5:ec:d5:57:22:bb:ac:97:7c:e8:
f7:95:78:5a:c2:15:f7:74:da:77:eb:65:86:78:c2:cb:45:aa:
be:60:14:76:b7:25:3d:e9:a7:81:1c:ad:21:d6:e9:02:bd:0f:
58:a1:60:08:89:e1:24:aa:8a:7b:a2:7b:1e:0e:79:84:fd:19:
1b:ee:bd:5d:8c:6a:1b:ba:5d:40:b1:93:ac:5b:c3:d3:9b:bb:
f0:9d:f8:6d:26:49:b8:eb:72:5c:00:88:7d:dd:b6:1e:6e:c0:
33:4c:ae:2b:29:90:cc:eb:d8:a4:25:58:6c:2b:85:00:a4:e6:
9f:1c:a0:d4:bf:58:cf:be:85:bb:af:f7:f2:03:b7:1e:13:f7:
3f:08:4c:30:7a:92:27:09:cf:07:43:23:de:49:1e:3a:ef:bd:
ce:71:d2:f2:7d:cf:da:76:d0:0c:c4:77:c6:73:ff:3b:6f:7e:
35:da:96:9b:df:34:2b:5c:ed:c7:00:8a:c7:55:61:bf:30:e4:
5d:e7:54:04
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgISAYfCEnfGtt4FZT4Xx4FYQJfyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjMwNDI3MDkzNjQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZmE3ZDU0ZGE5YTllM2IyMTliMThkYjBlMjgxNWQxMjZhMDVjOWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdECNDHpgfkkQd7OeuRM/Fo5Ym/0
pVOYFIfLTf2Anfu3kz/KMMLq3KrN/ZqjvY9cEhGtF+7oEe+QBxa0V+hrQBYQmnmv
MEaeBgt9PtSzxLX5Xqnp+A2xaUXkXmkcrflYcNdkIXaTXKrEehEz8p6Myp5HlNh1
pcexmS1Kh5QZ5wQq18H0e8dN8LQYRhjixe+hRX2RGIt1XNqlfQB1ZHXzm1PpDzvu
5P0BqI6iGsjGCmwxai72Z+0J5BMoETy/+JJsyuChuFgaCJpBXieDyJfbT6oExQtI
AAQnzGJa8x/cJm56oXYaMAGynhZYpGAiVUsYOyjiuY0OCpsJDIrArYZVBQIDAQAB
o4ICXzCCAlswHQYDVR0OBBYEFI+n1U2pqeOyGbGNsOKBXRJqBcm7MB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvajZmVlRhbXA0N0lac1kydzRvRmRFbW9GeWJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHUGCCsGAQUFBwEHAQH/BGYwZDBiBAIAATBcAwQAPsCYAwQA
TVFYAwQATVFkAwQAVmszAwQAVmtkAwQAWSLbMAwDBABZI4EDBAJZI4ADBABZKEYD
BABZLSMDBABZLzcDBABexqsDBACw37wDBAC81msDBAG88YgwDQYJKoZIhvcNAQEL
BQADggEBAEoppaIe1xhaUb3uMupoIWocZRl31ZqlfV3iAmiGim0UFQQ/hA5XQFDX
OVVhmsLla+HbHVSznYLW65DJf4obtezVVyK7rJd86PeVeFrCFfd02nfrZYZ4wstF
qr5gFHa3JT3pp4EcrSHW6QK9D1ihYAiJ4SSqinuiex4OeYT9GRvuvV2Mahu6XUCx
k6xbw9Obu/Cd+G0mSbjrclwAiH3dth5uwDNMrispkMzr2KQlWGwrhQCk5p8coNS/
WM++hbuv9/IDtx4T9z8ITDB6kicJzwdDI95JHjrvvc5x0vJ9z9p20AzEd8Zz/ztv
fjXalpvfNCtc7ccAisdVYb8w5F3nVAQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:10 2024 by rpki-client on console-fra.rpki-client.org