Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/4FBMOXaMWMtnZf1qZFHjJMGMBDg.roa
File: 4FBMOXaMWMtnZf1qZFHjJMGMBDg.roa (raw, json)
Hash identifier: D3C9gRsYmCcSFNwQmDHWmmLiw/0zTswrtPygVVvFXhw=
Subject key identifier: E0:50:4C:39:76:8C:58:CB:67:65:FD:6A:64:51:E3:24:C1:8C:04:38
Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Certificate serial: 018AF03EBBEDAD469BD8BDCD69E894BB553B
Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/4FBMOXaMWMtnZf1qZFHjJMGMBDg.roa
Signing time: Mon 02 Oct 2023 11:55:57 +0000
ROA not before: Mon 02 Oct 2023 11:55:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 84.247.105.0/24 maxlen: 24
84.247.104.0/24 maxlen: 24
84.247.110.0/24 maxlen: 24
84.247.109.0/24 maxlen: 24
84.247.108.0/24 maxlen: 24
84.247.107.0/24 maxlen: 24
84.247.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Oct 2023 12:26:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f0:3e:bb:ed:ad:46:9b:d8:bd:cd:69:e8:94:bb:55:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Validity
Not Before: Oct 2 11:55:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0504c39768c58cb6765fd6a6451e324c18c0438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c1:3c:f2:d8:e3:69:9b:08:48:4d:4b:01:bb:
32:68:d3:ca:6d:95:42:ee:40:63:a1:e1:6e:00:20:
a6:fc:c7:d5:f0:dc:0f:35:bf:04:ec:16:1e:a5:7c:
22:fd:65:92:0f:cf:e1:5d:ba:c9:69:8f:fd:7b:14:
d7:76:7a:02:db:68:44:95:8c:9d:f3:08:29:c2:f2:
8a:41:2b:e2:c6:93:a7:c6:fb:1e:78:27:6b:2a:90:
77:ef:c9:ea:58:c3:c6:a9:47:05:3b:3e:22:3a:3b:
9e:c5:eb:af:d4:cf:0f:76:f8:ad:b3:6f:70:b7:bc:
07:dd:ab:f5:88:52:5c:bc:64:66:ae:d6:4a:f6:88:
21:dc:7b:27:af:93:6a:62:f3:53:04:a2:44:73:79:
91:76:c5:4c:5d:7c:3e:80:84:85:15:5e:a1:e9:41:
b8:6b:8b:25:66:65:89:8b:0c:7e:7c:74:52:a4:88:
e1:ed:8b:e4:a3:d6:d2:67:b2:44:7e:90:f4:7a:db:
d6:d0:2a:30:c8:80:6d:a3:73:76:a5:a6:2f:59:b8:
68:45:26:16:79:09:58:d9:d8:ba:e1:b0:bc:a7:06:
94:65:42:5b:97:36:6e:76:15:dc:76:43:ee:d1:84:
d8:70:2d:5f:ec:4b:62:80:8d:bb:80:33:9a:f5:76:
01:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:50:4C:39:76:8C:58:CB:67:65:FD:6A:64:51:E3:24:C1:8C:04:38
X509v3 Authority Key Identifier:
keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/4FBMOXaMWMtnZf1qZFHjJMGMBDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.104.0-84.247.110.255
Signature Algorithm: sha256WithRSAEncryption
9e:06:bc:50:c5:27:e4:30:da:43:95:95:1c:9f:ce:62:a4:f8:
ab:ec:22:6f:11:9b:20:33:67:85:d5:8d:5c:45:c1:96:57:cc:
bb:26:88:39:f1:02:59:30:4a:df:ee:ce:63:18:77:4b:b8:85:
95:6d:8f:a2:ac:60:cb:a2:45:86:7c:c6:35:9a:01:3f:7c:47:
2a:3f:dd:42:53:65:e5:78:8c:be:d3:35:c7:c2:bf:19:06:1d:
c0:e9:cc:0c:be:f7:a0:03:f5:08:8d:93:d7:89:2d:86:1e:a5:
86:35:88:94:8a:1c:19:d2:63:d2:8b:ef:ed:ad:2f:82:7e:2a:
50:1a:23:a2:14:15:83:8b:c4:3d:16:af:fb:3d:fc:64:c5:13:
19:f6:68:65:cb:5a:f8:40:fc:64:6c:29:80:55:d6:40:c3:6e:
dc:82:5f:c2:7f:73:33:10:75:de:7c:94:0d:8f:75:fb:a5:53:
1d:c3:b2:b9:bb:4a:e8:18:c7:2b:b3:3d:15:68:de:77:a0:24:
03:41:ec:e4:d7:ba:05:4e:dd:64:7d:e8:90:9c:34:39:60:85:
1a:95:4d:91:03:f5:b4:db:6c:fb:96:72:87:56:33:ce:86:c8:
e7:51:15:85:fb:53:d4:8b:e1:76:e2:71:55:79:b1:c7:54:ae:
73:a9:08:fb
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYrwPrvtrUab2L3NaeiUu1U7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNDU5YWE0NjAyYmZmYTJkMjY1MGJhNjY4MTg0NThjODlm
YzQ1ODIwHhcNMjMxMDAyMTE1NTU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDUwNGMzOTc2OGM1OGNiNjc2NWZkNmE2NDUxZTMyNGMxOGMwNDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtME88tjjaZsISE1LAbsyaNPKbZVC
7kBjoeFuACCm/MfV8NwPNb8E7BYepXwi/WWSD8/hXbrJaY/9exTXdnoC22hElYyd
8wgpwvKKQSvixpOnxvseeCdrKpB378nqWMPGqUcFOz4iOjuexeuv1M8Pdvits29w
t7wH3av1iFJcvGRmrtZK9ogh3Hsnr5NqYvNTBKJEc3mRdsVMXXw+gISFFV6h6UG4
a4slZmWJiwx+fHRSpIjh7Yvko9bSZ7JEfpD0etvW0CowyIBto3N2paYvWbhoRSYW
eQlY2di64bC8pwaUZUJblzZudhXcdkPu0YTYcC1f7EtigI27gDOa9XYBjQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFOBQTDl2jFjLZ2X9amRR4yTBjAQ4MB8GA1UdIwQY
MBaAFJ5FmqRgK/+i0mULpmgYRYyJ/EWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWIt
MjhhODQxZGEwYmZkLzEvNEZCTU9YYU1XTXRuWmYxcVpGSGpKTUdNQkRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWItMjhhODQxZGEwYmZk
LzEvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBANU92gD
BABU924wDQYJKoZIhvcNAQELBQADggEBAJ4GvFDFJ+Qw2kOVlRyfzmKk+KvsIm8R
myAzZ4XVjVxFwZZXzLsmiDnxAlkwSt/uzmMYd0u4hZVtj6KsYMuiRYZ8xjWaAT98
Ryo/3UJTZeV4jL7TNcfCvxkGHcDpzAy+96AD9QiNk9eJLYYepYY1iJSKHBnSY9KL
7+2tL4J+KlAaI6IUFYOLxD0Wr/s9/GTFExn2aGXLWvhA/GRsKYBV1kDDbtyCX8J/
czMQdd58lA2PdfulUx3Dsrm7SugYxyuzPRVo3negJANB7OTXugVO3WR96JCcNDlg
hRqVTZED9bTbbPuWcodWM86GyOdRFYX7U9SL4XbicVV5scdUrnOpCPs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:29 2024 by rpki-client on console-fra.rpki-client.org