Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/_Rvi8-2BjlIXHT2DUKFUqaI9Xzo.roa
File: _Rvi8-2BjlIXHT2DUKFUqaI9Xzo.roa (raw, json)
Hash identifier: dFHHV2zIMzUyypiWD7joeI1/QWp9PZrE2FWVQ7aaoTk=
Subject key identifier: FD:1B:E2:F3:ED:81:8E:52:17:1D:3D:83:50:A1:54:A9:A2:3D:5F:3A
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 0189C06555EB3FFA322A2B0E067B5133BAC5
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/_Rvi8-2BjlIXHT2DUKFUqaI9Xzo.roa
Signing time: Fri 04 Aug 2023 11:53:33 +0000
ROA not before: Fri 04 Aug 2023 11:53:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 86.38.145.0/24 maxlen: 24
217.9.246.0/24 maxlen: 24
89.117.212.0/24 maxlen: 24
89.117.214.0/24 maxlen: 24
86.38.191.0/24 maxlen: 24
89.117.240.0/24 maxlen: 24
89.117.242.0/24 maxlen: 24
89.117.251.0/24 maxlen: 24
86.38.224.0/24 maxlen: 24
86.38.231.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c0:65:55:eb:3f:fa:32:2a:2b:0e:06:7b:51:33:ba:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Aug 4 11:53:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd1be2f3ed818e52171d3d8350a154a9a23d5f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f0:a2:8c:2f:ca:10:e0:c3:b0:9c:99:69:67:
b2:bd:d5:7f:c6:a7:7b:78:96:a0:e0:84:71:f0:86:
09:16:d1:ff:02:b6:bc:0f:63:e7:c4:c8:cc:b0:f9:
01:b4:bf:8e:3f:54:f3:29:df:12:a6:24:6a:14:3c:
53:8a:6e:0a:b9:8e:74:a8:09:54:65:b2:90:64:10:
81:f9:e4:68:a1:18:6e:8d:59:7d:8f:0f:65:78:09:
16:e0:e7:fe:f4:4c:6a:a0:c3:29:12:25:e9:1b:4d:
e1:fe:0e:9e:95:6f:0d:93:ea:ad:ae:29:b8:06:36:
e4:48:aa:b5:9d:a0:3a:b7:38:c5:bb:36:c2:68:bf:
49:0a:f0:71:3e:97:80:62:59:f4:60:a8:80:b2:c3:
e6:73:12:9a:7c:83:06:9b:0a:d7:89:bb:3f:63:27:
be:29:99:99:91:24:58:de:b2:5b:87:01:63:b1:00:
ec:42:74:8e:38:81:a5:45:04:a6:d2:2a:e1:2b:6b:
39:f9:87:a0:10:f9:e6:a0:50:a1:ac:af:10:f1:b3:
5f:64:79:72:4e:61:7a:fa:fe:49:9b:09:e1:4c:79:
2e:8e:e6:c1:87:c7:88:57:a8:60:28:aa:bf:52:1a:
ed:3c:a7:12:12:07:43:0f:36:f4:2f:b0:9e:ff:0f:
f6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1B:E2:F3:ED:81:8E:52:17:1D:3D:83:50:A1:54:A9:A2:3D:5F:3A
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/_Rvi8-2BjlIXHT2DUKFUqaI9Xzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.145.0/24
86.38.191.0/24
86.38.224.0/24
86.38.231.0/24
89.117.212.0/24
89.117.214.0/24
89.117.240.0/24
89.117.242.0/24
89.117.251.0/24
217.9.246.0/24
Signature Algorithm: sha256WithRSAEncryption
47:b8:ce:92:fa:bc:6e:ee:b7:a6:65:d6:c7:ac:ed:6f:c9:c4:
db:e1:80:12:ef:8f:b2:5a:7b:63:98:81:4e:70:1a:22:c0:bb:
23:05:ff:aa:2d:ea:2c:73:b3:60:e9:f0:92:fe:d6:c5:1e:ba:
b9:c0:e7:8f:95:0e:70:f6:7f:bf:31:74:05:eb:a0:2f:96:10:
e5:de:cc:46:c6:1c:9f:a6:3e:24:33:44:20:f2:da:0e:05:b1:
1b:49:66:f5:1b:9f:18:fd:b5:f1:41:68:2e:4c:92:75:d4:9a:
1c:e2:69:5b:b3:86:a7:5c:13:f2:3a:9e:23:57:29:c0:16:4a:
28:00:05:9d:b0:c1:b1:6a:5f:83:b1:26:43:d9:c4:c5:b9:e8:
cd:22:8a:9c:10:be:8c:17:16:2d:3b:fb:c0:89:65:f9:a3:db:
81:b8:17:9a:ca:dc:ba:a9:d4:f8:eb:1e:d0:7d:e1:cc:dc:2a:
9e:37:5d:5e:da:15:0b:6b:48:e6:c4:ff:57:f5:62:75:ab:9e:
d5:33:a7:ac:fc:82:b0:9e:0d:8c:b5:54:47:03:70:25:c9:16:
c7:bf:b8:5c:80:79:9e:75:87:e8:6b:38:95:03:98:4e:44:c5:
0e:20:61:7d:2e:b1:1e:74:d7:be:19:59:e8:45:9a:72:6a:3a:
4b:45:39:d9
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAYnAZVXrP/oyKisOBntRM7rFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZGQ4MWE4MzNkOWIwNDNjN2ZmZDYzNWE1OTg3ZjUzNjk3
MTE4MGQwHhcNMjMwODA0MTE1MzMzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDFiZTJmM2VkODE4ZTUyMTcxZDNkODM1MGExNTRhOWEyM2Q1ZjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufCijC/KEODDsJyZaWeyvdV/xqd7
eJag4IRx8IYJFtH/Ara8D2PnxMjMsPkBtL+OP1TzKd8SpiRqFDxTim4KuY50qAlU
ZbKQZBCB+eRooRhujVl9jw9leAkW4Of+9ExqoMMpEiXpG03h/g6elW8Nk+qtrim4
BjbkSKq1naA6tzjFuzbCaL9JCvBxPpeAYln0YKiAssPmcxKafIMGmwrXibs/Yye+
KZmZkSRY3rJbhwFjsQDsQnSOOIGlRQSm0irhK2s5+YegEPnmoFChrK8Q8bNfZHly
TmF6+v5JmwnhTHkujubBh8eIV6hgKKq/UhrtPKcSEgdDDzb0L7Ce/w/2AwIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFP0b4vPtgY5SFx09g1ChVKmiPV86MB8GA1UdIwQY
MBaAFPDdgagz2bBDx//WNaWYf1NpcRgNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUt
MDQ2ODA0MjQ4NmRjLzEvX1J2aTgtMkJqbElYSFQyRFVLRlVxYUk5WHpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUtMDQ2ODA0MjQ4NmRj
LzEvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQAViaRAwQA
Via/AwQAVibgAwQAVibnAwQAWXXUAwQAWXXWAwQAWXXwAwQAWXXyAwQAWXX7AwQA
2Qn2MA0GCSqGSIb3DQEBCwUAA4IBAQBHuM6S+rxu7remZdbHrO1vycTb4YAS74+y
WntjmIFOcBoiwLsjBf+qLeosc7Ng6fCS/tbFHrq5wOePlQ5w9n+/MXQF66AvlhDl
3sxGxhyfpj4kM0Qg8toOBbEbSWb1G58Y/bXxQWguTJJ11Joc4mlbs4anXBPyOp4j
VynAFkooAAWdsMGxal+DsSZD2cTFuejNIoqcEL6MFxYtO/vAiWX5o9uBuBeayty6
qdT46x7QfeHM3CqeN11e2hULa0jmxP9X9WJ1q57VM6es/IKwng2MtVRHA3AlyRbH
v7hcgHmedYfoaziVA5hORMUOIGF9LrEedNe+GVnoRZpyajpLRTnZ
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:19 2024 by rpki-client on console-ams.rpki-client.org