Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/0tPK3EkSwGJJMXzq9Wy0qhxOkNY.roa
File: 0tPK3EkSwGJJMXzq9Wy0qhxOkNY.roa (raw, json)
Hash identifier: /08f10cKpQlQUnQXvXjSnHxI+WhrSF628lGiZJzWRcQ=
Subject key identifier: D2:D3:CA:DC:49:12:C0:62:49:31:7C:EA:F5:6C:B4:AA:1C:4E:90:D6
Certificate issuer: /CN=d999e5d64e44b1733c61737337ce82b4a6943a46
Certificate serial: 01901B9DF282969B40D942CBF2FE9F9A8F15
Authority key identifier: D9:99:E5:D6:4E:44:B1:73:3C:61:73:73:37:CE:82:B4:A6:94:3A:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Znl1k5EsXM8YXNzN86CtKaUOkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/0tPK3EkSwGJJMXzq9Wy0qhxOkNY.roa
Signing time: Sat 15 Jun 2024 11:17:34 +0000
ROA not before: Sat 15 Jun 2024 11:17:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35760
IP address blocks: 87.101.16.0/20 maxlen: 20
87.101.16.0/21 maxlen: 21
87.101.24.0/21 maxlen: 21
91.196.12.0/23 maxlen: 23
91.196.12.0/24 maxlen: 24
91.196.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 15 Jun 2024 13:22:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1b:9d:f2:82:96:9b:40:d9:42:cb:f2:fe:9f:9a:8f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d999e5d64e44b1733c61737337ce82b4a6943a46
Validity
Not Before: Jun 15 11:17:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2d3cadc4912c06249317ceaf56cb4aa1c4e90d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:eb:08:3f:45:e5:27:cb:99:ae:a5:07:cc:5b:
04:86:b2:e3:b5:44:14:31:cf:bf:ba:67:13:66:8f:
1a:be:47:03:22:73:65:7c:06:65:17:d0:ff:e0:07:
d0:a4:ef:fd:7d:3e:d0:d0:0f:5c:6b:37:3b:be:04:
d1:dc:3f:dc:7f:d2:c4:81:f2:fc:de:17:e7:76:53:
be:c4:4a:21:1a:80:b0:5e:d8:6d:75:33:db:ba:56:
c5:f6:10:fc:25:ce:78:22:4e:cc:c5:3e:18:df:0a:
a8:11:2a:44:cb:9e:97:86:34:28:fc:07:2b:98:e2:
84:77:5c:fe:f4:72:9a:5d:b1:94:aa:1c:28:3b:9b:
84:bc:54:65:ec:0f:21:57:1f:52:3a:a6:0e:5a:12:
ca:f6:4e:4f:b6:e7:75:94:45:a1:a6:76:6a:88:c7:
ac:bd:0f:d2:fc:54:bc:63:2d:f6:93:ae:53:8a:1e:
3c:8a:91:e2:8f:4c:00:ce:2b:12:97:e4:b7:c2:0b:
26:69:46:c9:8d:e2:76:fe:1d:c4:cf:6b:de:61:05:
27:29:bd:da:0d:94:d9:77:cc:0f:30:8c:9b:41:82:
ab:5a:bf:3c:86:b3:c5:53:d7:3f:92:09:92:03:53:
cc:c1:aa:67:3d:10:ee:1c:c7:ea:21:31:9a:21:f5:
67:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D3:CA:DC:49:12:C0:62:49:31:7C:EA:F5:6C:B4:AA:1C:4E:90:D6
X509v3 Authority Key Identifier:
keyid:D9:99:E5:D6:4E:44:B1:73:3C:61:73:73:37:CE:82:B4:A6:94:3A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Znl1k5EsXM8YXNzN86CtKaUOkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/0tPK3EkSwGJJMXzq9Wy0qhxOkNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.101.16.0/20
91.196.12.0/23
Signature Algorithm: sha256WithRSAEncryption
03:99:81:8b:2c:df:67:ba:e8:68:0c:27:8a:ce:48:4c:02:a7:
ad:8d:2c:68:ce:54:3d:a5:8a:0d:5f:69:06:6b:a6:ac:65:74:
9b:3d:0c:cb:76:32:c5:15:ab:97:09:24:cf:61:2b:5b:38:66:
27:f5:36:62:e3:0a:4e:62:5a:08:8b:55:54:7e:40:42:a3:aa:
1b:31:3d:9d:5d:c8:5e:f5:89:3c:20:2e:68:c4:b7:8a:66:28:
04:d7:b3:79:12:0e:ad:b8:b2:5b:5f:96:8e:08:64:5c:ce:63:
4a:2a:39:7d:6a:53:4b:ac:62:a1:e6:b7:b6:cc:f6:6c:7b:03:
59:16:ee:96:af:a0:66:8b:aa:b0:4b:cf:f8:4c:3c:c8:e5:f1:
be:ff:4f:bc:df:a3:5c:cf:47:a8:5e:e8:5d:fb:4d:70:4a:80:
a0:f7:68:cb:52:b4:c8:1e:e4:18:7f:c8:70:7f:38:57:1d:34:
ff:b7:c6:ec:ee:97:cf:16:ff:19:cf:18:d5:61:24:4e:3a:9e:
ce:42:a8:08:91:c2:88:79:3e:f9:ec:f5:96:cf:c1:31:38:32:
3d:12:d1:2d:46:95:ec:b2:31:72:c6:41:9a:f8:d4:8d:23:2e:
f4:80:b3:2b:07:f9:1d:de:b4:0f:93:0c:f2:29:22:3d:ab:d6:
00:79:9c:06
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZAbnfKClptA2ULL8v6fmo8VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5OTllNWQ2NGU0NGIxNzMzYzYxNzM3MzM3Y2U4MmI0YTY5
NDNhNDYwHhcNMjQwNjE1MTExNzM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMmQzY2FkYzQ5MTJjMDYyNDkzMTdjZWFmNTZjYjRhYTFjNGU5MGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvusIP0XlJ8uZrqUHzFsEhrLjtUQU
Mc+/umcTZo8avkcDInNlfAZlF9D/4AfQpO/9fT7Q0A9cazc7vgTR3D/cf9LEgfL8
3hfndlO+xEohGoCwXthtdTPbulbF9hD8Jc54Ik7MxT4Y3wqoESpEy56XhjQo/Acr
mOKEd1z+9HKaXbGUqhwoO5uEvFRl7A8hVx9SOqYOWhLK9k5Ptud1lEWhpnZqiMes
vQ/S/FS8Yy32k65Tih48ipHij0wAzisSl+S3wgsmaUbJjeJ2/h3Ez2veYQUnKb3a
DZTZd8wPMIybQYKrWr88hrPFU9c/kgmSA1PMwapnPRDuHMfqITGaIfVnWwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNLTytxJEsBiSTF86vVstKocTpDWMB8GA1UdIwQY
MBaAFNmZ5dZORLFzPGFzczfOgrSmlDpGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlpubDFrNUVzWE04WVhOek44NkN0S2FVT2tZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9mMDFmOTktYmMwMS00YjM5LTkzNjIt
OWY0N2M3NDEwZDQxLzEvMHRQSzNFa1N3R0pKTVh6cTlXeTBxaHhPa05ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9mMDFmOTktYmMwMS00YjM5LTkzNjItOWY0N2M3NDEwZDQx
LzEvMlpubDFrNUVzWE04WVhOek44NkN0S2FVT2tZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEV2UQAwQB
W8QMMA0GCSqGSIb3DQEBCwUAA4IBAQADmYGLLN9nuuhoDCeKzkhMAqetjSxozlQ9
pYoNX2kGa6asZXSbPQzLdjLFFauXCSTPYStbOGYn9TZi4wpOYloIi1VUfkBCo6ob
MT2dXche9Yk8IC5oxLeKZigE17N5Eg6tuLJbX5aOCGRczmNKKjl9alNLrGKh5re2
zPZsewNZFu6Wr6Bmi6qwS8/4TDzI5fG+/0+836Ncz0eoXuhd+01wSoCg92jLUrTI
HuQYf8hwfzhXHTT/t8bs7pfPFv8ZzxjVYSROOp7OQqgIkcKIeT757PWWz8ExODI9
EtEtRpXssjFyxkGa+NSNIy70gLMrB/kd3rQPkwzyKSI9q9YAeZwG
-----END CERTIFICATE-----
Generated at Sat Jun 15 18:00:29 2024 by rpki-client on console-ams.rpki-client.org