Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/k_P9AdtPjLthSmKkne2lvKtVVQY.roa
File: k_P9AdtPjLthSmKkne2lvKtVVQY.roa (raw, json)
Hash identifier: tD27BDXTh7fJWSkEdY4/k7PQXCv5agaXs6L8LklPCBo=
Subject key identifier: 93:F3:FD:01:DB:4F:8C:BB:61:4A:62:A4:9D:ED:A5:BC:AB:55:55:06
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018C24A1EF28629856B76FF9EB2AF663D43B
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/k_P9AdtPjLthSmKkne2lvKtVVQY.roa
Signing time: Fri 01 Dec 2023 09:07:21 +0000
ROA not before: Fri 01 Dec 2023 09:07:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 147287
IP address blocks: 86.107.51.0/24 maxlen: 24
93.115.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 03 Dec 2023 08:48:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:24:a1:ef:28:62:98:56:b7:6f:f9:eb:2a:f6:63:d4:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Dec 1 09:07:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93f3fd01db4f8cbb614a62a49deda5bcab555506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5e:73:6b:9f:9c:b9:c2:02:a9:c6:ec:9c:19:
ea:4e:4d:11:03:e6:5f:fc:34:5b:6b:d5:87:1c:28:
e5:b2:b8:4b:0a:23:97:d1:69:f6:74:94:ec:f6:86:
96:44:01:34:3a:0e:d5:07:50:f1:6a:fe:81:8e:be:
3a:06:e7:51:ab:69:ee:f5:56:10:d3:7f:b6:b5:1b:
02:8b:57:4f:cb:f5:ae:fe:6e:ee:55:a3:66:bf:fb:
71:8b:3e:8f:41:6c:91:66:8f:fb:1f:6c:b8:8b:a0:
d2:3c:9b:f1:b9:e5:29:44:60:56:07:b9:02:e4:64:
43:fc:09:49:f0:61:99:2f:0c:84:26:42:5a:ca:a9:
1e:39:6f:6e:dd:0d:a8:76:f3:22:c2:ca:e5:89:3f:
7f:9f:45:5e:40:b8:13:7a:ec:ac:4f:43:77:7f:77:
1f:db:b7:76:49:7f:52:e2:b8:23:fa:30:28:e0:ad:
11:e6:28:49:b3:bc:8e:8d:1e:35:49:ca:14:84:31:
31:9b:d1:3a:dc:74:f1:3e:bd:48:62:c4:a9:a0:de:
43:5a:d3:58:aa:ef:72:92:bf:01:6a:df:a4:cc:01:
1d:2c:87:f1:a6:7c:36:7b:7d:55:38:c0:9c:a5:82:
30:b4:12:94:e8:40:98:d6:e0:27:a3:6b:d1:bd:3b:
27:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F3:FD:01:DB:4F:8C:BB:61:4A:62:A4:9D:ED:A5:BC:AB:55:55:06
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/k_P9AdtPjLthSmKkne2lvKtVVQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.51.0/24
93.115.203.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:17:8a:1b:7c:57:bd:3a:b9:e0:a4:2e:6f:36:09:9f:b3:97:
32:ed:55:fa:32:ba:e3:41:7e:73:43:36:e3:b7:5c:92:7e:3d:
a9:d5:24:f3:b5:ff:17:89:04:ba:00:b8:c0:97:12:85:4e:db:
4b:32:6e:e9:f9:43:93:4a:d9:b2:e8:d1:92:d0:24:fd:90:d3:
cf:f9:26:81:d0:71:b7:77:7d:0d:e7:20:be:34:d3:f0:e3:c5:
f1:9f:cf:7c:2f:29:8f:47:8c:60:26:a9:1e:48:f1:bc:e8:42:
6a:c1:6f:07:24:1a:d0:92:63:81:e0:16:2d:67:7a:0c:f8:1e:
20:8c:65:b6:29:de:d0:b5:3b:31:2f:28:11:3a:5b:e7:79:c4:
7e:32:4b:5f:3a:fb:94:7c:98:3e:38:56:eb:d9:7e:df:3d:55:
33:71:d7:a1:62:eb:20:bb:bc:bb:03:c1:3a:e8:81:15:e6:29:
b0:04:13:d1:8d:a8:f4:d3:45:53:25:b0:22:db:d7:46:50:92:
8d:1b:87:91:3e:24:98:48:03:e1:9c:41:4a:78:bc:34:3c:94:
96:b3:c1:4d:6a:cb:3b:72:5d:12:50:be:c9:50:fc:95:02:86:
ff:7f:d0:b5:e0:ac:98:58:53:eb:d3:54:ce:57:92:27:3a:16:
d4:b1:4a:a6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYwkoe8oYphWt2/56yr2Y9Q7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjMxMjAxMDkwNzIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5M2YzZmQwMWRiNGY4Y2JiNjE0YTYyYTQ5ZGVkYTViY2FiNTU1NTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmF5za5+cucICqcbsnBnqTk0RA+Zf
/DRba9WHHCjlsrhLCiOX0Wn2dJTs9oaWRAE0Og7VB1Dxav6Bjr46BudRq2nu9VYQ
03+2tRsCi1dPy/Wu/m7uVaNmv/txiz6PQWyRZo/7H2y4i6DSPJvxueUpRGBWB7kC
5GRD/AlJ8GGZLwyEJkJayqkeOW9u3Q2odvMiwsrliT9/n0VeQLgTeuysT0N3f3cf
27d2SX9S4rgj+jAo4K0R5ihJs7yOjR41ScoUhDExm9E63HTxPr1IYsSpoN5DWtNY
qu9ykr8Bat+kzAEdLIfxpnw2e31VOMCcpYIwtBKU6ECY1uAno2vRvTsnlQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJPz/QHbT4y7YUpipJ3tpbyrVVUGMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEva19QOUFkdFBqTHRoU21La25lMmx2S3RWVlFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVmszAwQA
XXPLMA0GCSqGSIb3DQEBCwUAA4IBAQA6F4obfFe9OrngpC5vNgmfs5cy7VX6Mrrj
QX5zQzbjt1ySfj2p1STztf8XiQS6ALjAlxKFTttLMm7p+UOTStmy6NGS0CT9kNPP
+SaB0HG3d30N5yC+NNPw48Xxn898LymPR4xgJqkeSPG86EJqwW8HJBrQkmOB4BYt
Z3oM+B4gjGW2Kd7QtTsxLygROlvnecR+MktfOvuUfJg+OFbr2X7fPVUzcdehYusg
u7y7A8E66IEV5imwBBPRjaj000VTJbAi29dGUJKNG4eRPiSYSAPhnEFKeLw0PJSW
s8FNass7cl0SUL7JUPyVAob/f9C14KyYWFPr01TOV5InOhbUsUqm
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:14 2024 by rpki-client on console-ams.rpki-client.org