Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/I-QT6SXT9qWgCbLKX26flBToGYA.roa
File: I-QT6SXT9qWgCbLKX26flBToGYA.roa (raw, json)
Hash identifier: rh3rZIHE+JpOVEzXzOONB/y5EKT6ZDGTjOCWgosA+Sk=
Subject key identifier: 23:E4:13:E9:25:D3:F6:A5:A0:09:B2:CA:5F:6E:9F:94:14:E8:19:80
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 0190772A4B41BCE92FD8518AEA4C252A03D8
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/I-QT6SXT9qWgCbLKX26flBToGYA.roa
Signing time: Wed 03 Jul 2024 05:56:18 +0000
ROA not before: Wed 03 Jul 2024 05:56:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204174
IP address blocks: 86.104.160.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 03 Aug 2024 07:54:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:77:2a:4b:41:bc:e9:2f:d8:51:8a:ea:4c:25:2a:03:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Jul 3 05:56:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=23e413e925d3f6a5a009b2ca5f6e9f9414e81980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:70:99:ce:48:c8:44:58:aa:d4:ac:52:c1:b4:
69:1d:48:5b:e2:d7:58:45:e3:81:4c:ed:e8:2f:cf:
de:8c:c2:2c:07:9b:81:8b:4b:87:7f:52:23:02:77:
86:69:08:4f:9a:91:b7:64:59:cc:1d:a2:de:e9:d5:
d8:6d:89:a5:6b:c5:4f:05:b0:81:d8:72:3c:f4:e5:
36:06:6c:bc:74:10:19:5d:d8:a7:3a:71:86:14:f3:
6f:4a:b7:e0:5f:ae:5c:46:16:4b:62:d4:b5:a1:fb:
f2:36:56:cc:75:3c:c6:37:16:5b:ae:7c:ab:b4:71:
97:c1:60:59:df:96:e0:7b:fb:15:66:db:cf:1f:1d:
f3:3b:68:ed:d1:62:f5:a7:18:e8:d0:ce:a2:73:4e:
f8:e6:5a:3c:73:c6:90:bd:03:c4:5a:06:65:5b:de:
de:7a:1e:14:2b:14:cc:4f:46:fe:03:78:5a:3e:61:
84:ed:67:d6:14:27:da:a4:7f:21:f0:60:ed:16:ac:
01:88:db:22:70:da:f2:30:ca:84:08:a7:cb:9d:b6:
48:a3:f2:ed:12:de:4a:dd:7b:d3:ae:39:72:56:2a:
fe:6b:9e:61:0b:cd:8d:89:73:77:3e:3a:65:a9:4b:
23:a8:3a:c7:10:69:6c:ff:95:e7:d4:73:d2:fd:5b:
1c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E4:13:E9:25:D3:F6:A5:A0:09:B2:CA:5F:6E:9F:94:14:E8:19:80
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/I-QT6SXT9qWgCbLKX26flBToGYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.104.160.0/22
Signature Algorithm: sha256WithRSAEncryption
69:4c:bf:68:72:c2:6c:3a:8c:e4:28:a7:9b:94:a1:68:3a:01:
2e:46:bf:e6:a2:17:64:70:9c:e4:58:06:37:fa:b1:44:c4:95:
6a:69:73:15:4e:6e:c3:70:ab:dd:39:1e:ef:fc:25:33:99:47:
85:cc:a0:61:1d:ed:2b:4b:65:59:5f:11:64:1e:f1:aa:39:c0:
e3:c1:77:20:ad:8c:7f:29:f9:5a:4b:69:9d:5a:be:13:6e:ac:
22:c2:1b:36:4d:f5:cc:35:86:46:4a:9a:a9:36:4e:b9:fb:e3:
65:82:aa:35:56:26:c6:ca:86:ca:51:21:a8:1d:e1:82:46:7b:
5e:50:40:c6:f7:c5:5f:b3:a6:7a:50:22:d0:80:a4:d3:83:7c:
c7:d1:21:6f:54:78:66:54:95:09:62:5a:9f:9c:b8:19:e1:2f:
1e:66:48:ab:94:b1:54:2d:0d:0a:67:ac:4c:ac:f1:ce:19:4a:
a2:36:db:55:40:99:71:7f:a6:e5:19:01:c6:ec:22:75:dc:7a:
1d:7a:30:78:91:c8:be:c5:28:3e:94:0e:84:be:df:cc:0b:bc:
27:a4:aa:c5:4c:4b:76:ce:60:d7:09:c3:77:15:7f:92:35:6e:
83:06:81:0f:0b:a9:91:e6:90:b1:bf:90:37:fb:5c:39:98:44:
03:64:b2:f4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZB3KktBvOkv2FGK6kwlKgPYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2Y2NlMDZlNzBkZjk3MGQ5MGFiZmUzY2JlN2ZhODgyZjQ2
N2IxZTQwHhcNMjQwNzAzMDU1NjE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyM2U0MTNlOTI1ZDNmNmE1YTAwOWIyY2E1ZjZlOWY5NDE0ZTgxOTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3CZzkjIRFiq1KxSwbRpHUhb4tdY
ReOBTO3oL8/ejMIsB5uBi0uHf1IjAneGaQhPmpG3ZFnMHaLe6dXYbYmla8VPBbCB
2HI89OU2Bmy8dBAZXdinOnGGFPNvSrfgX65cRhZLYtS1ofvyNlbMdTzGNxZbrnyr
tHGXwWBZ35bge/sVZtvPHx3zO2jt0WL1pxjo0M6ic0745lo8c8aQvQPEWgZlW97e
eh4UKxTMT0b+A3haPmGE7WfWFCfapH8h8GDtFqwBiNsicNryMMqECKfLnbZIo/Lt
Et5K3XvTrjlyVir+a55hC82NiXN3PjplqUsjqDrHEGls/5Xn1HPS/VscJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCPkE+kl0/aloAmyyl9un5QU6BmAMB8GA1UdIwQY
MBaAFIbM4G5w35cNkKv+PL5/qIL0Z7HkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2Ut
ODk3MTRhN2U4ZDU4LzEvSS1RVDZTWFQ5cVdnQ2JMS1gyNmZsQlRvR1lBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2UtODk3MTRhN2U4ZDU4
LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVmigMA0G
CSqGSIb3DQEBCwUAA4IBAQBpTL9ocsJsOozkKKeblKFoOgEuRr/mohdkcJzkWAY3
+rFExJVqaXMVTm7DcKvdOR7v/CUzmUeFzKBhHe0rS2VZXxFkHvGqOcDjwXcgrYx/
KflaS2mdWr4Tbqwiwhs2TfXMNYZGSpqpNk65++Nlgqo1VibGyobKUSGoHeGCRnte
UEDG98Vfs6Z6UCLQgKTTg3zH0SFvVHhmVJUJYlqfnLgZ4S8eZkirlLFULQ0KZ6xM
rPHOGUqiNttVQJlxf6blGQHG7CJ13HodejB4kci+xSg+lA6Evt/MC7wnpKrFTEt2
zmDXCcN3FX+SNW6DBoEPC6mR5pCxv5A3+1w5mEQDZLL0
-----END CERTIFICATE-----
Generated at Sat Aug 3 09:12:38 2024 by rpki-client on console-fra.rpki-client.org