Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/THtAYeLGn8v1Ammyq346250uF4s.roa
File: THtAYeLGn8v1Ammyq346250uF4s.roa (raw, json)
Hash identifier: lhA7j/wpwZ6duksmgBtn34cFkiYm7y4xbUc15q6ru40=
Subject key identifier: 4C:7B:40:61:E2:C6:9F:CB:F5:02:69:B2:AB:7E:3A:DB:9D:2E:17:8B
Certificate issuer: /CN=87b1396fd11c730ef20448129b282856ac504cb7
Certificate serial: 018F59162EFD1482AC990BDE74E3AB77C192
Authority key identifier: 87:B1:39:6F:D1:1C:73:0E:F2:04:48:12:9B:28:28:56:AC:50:4C:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/THtAYeLGn8v1Ammyq346250uF4s.roa
Signing time: Wed 08 May 2024 16:42:56 +0000
ROA not before: Wed 08 May 2024 16:42:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400866
IP address blocks: 192.109.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Jun 2024 04:18:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:59:16:2e:fd:14:82:ac:99:0b:de:74:e3:ab:77:c1:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b1396fd11c730ef20448129b282856ac504cb7
Validity
Not Before: May 8 16:42:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c7b4061e2c69fcbf50269b2ab7e3adb9d2e178b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:93:4f:fc:39:bb:5d:58:12:81:bf:01:70:a4:
30:07:f0:8d:aa:1f:48:4c:f0:ce:b3:9b:bf:58:50:
e2:8f:b1:9f:db:9e:b1:2a:f0:63:33:d0:ac:4b:49:
f0:0d:2a:00:e1:c9:22:a5:ab:27:78:86:8c:fc:d6:
dc:5e:fa:df:83:81:e9:d1:d4:f6:b0:e9:f9:69:f0:
21:a1:21:76:c3:1c:63:6a:f2:86:28:c3:70:48:e1:
57:c0:98:f7:79:b2:ce:35:7a:2a:1f:a1:c8:3d:32:
99:42:93:94:76:86:7e:6d:78:79:7b:01:55:ef:69:
28:f4:7c:d1:17:3d:18:c4:30:e0:c3:73:a6:14:72:
77:e5:52:25:25:cf:13:5f:0a:69:e3:45:04:d1:e4:
1c:86:6b:c6:c8:b0:a8:4c:ae:16:56:ac:5b:1c:82:
2b:9f:46:b4:fb:d2:a1:4b:51:35:13:d9:33:5f:3f:
7b:a7:31:12:04:bf:ad:6b:79:1e:6c:55:83:00:b7:
e4:8d:a2:42:d8:c6:55:fe:f5:b8:d6:af:4f:c1:8c:
da:06:3d:c1:61:36:fd:8e:86:bb:62:81:96:02:32:
90:ce:08:e1:7a:26:7c:3b:47:5a:d3:9c:8a:c9:43:
06:d9:bc:86:02:15:a1:c3:5a:d1:09:6d:14:32:ac:
2a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:7B:40:61:E2:C6:9F:CB:F5:02:69:B2:AB:7E:3A:DB:9D:2E:17:8B
X509v3 Authority Key Identifier:
keyid:87:B1:39:6F:D1:1C:73:0E:F2:04:48:12:9B:28:28:56:AC:50:4C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/THtAYeLGn8v1Ammyq346250uF4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.206.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:eb:fa:70:55:54:42:d6:3f:52:cf:3b:c5:45:15:63:88:48:
a8:ce:25:10:42:fb:fc:42:0a:34:22:8d:e1:b2:ab:8d:51:c2:
ad:9d:8c:98:1b:67:52:d4:2d:95:54:6b:a6:d1:64:02:9c:83:
2a:5d:72:05:f2:af:96:47:8c:37:ba:fd:af:60:31:a4:f6:3f:
a0:b4:dd:3e:65:7a:70:86:3b:60:35:26:fb:a5:50:df:74:2b:
c7:ee:b0:d7:11:4d:5b:9f:ba:0f:2c:96:37:b0:be:04:9c:8d:
c3:bc:7e:4a:48:98:9f:48:81:27:1a:10:21:71:dc:2e:e1:c0:
6b:c8:da:3d:1d:53:a2:56:34:a2:ed:9f:62:6f:dd:72:19:4c:
8d:26:81:80:69:7d:b7:cd:57:ea:71:74:65:3d:22:86:d8:f6:
43:0d:de:c9:54:75:c2:bf:a2:7c:d6:6d:67:74:eb:40:57:e9:
c7:95:ab:e4:8f:13:f2:62:f5:c5:61:ca:ed:85:66:71:2d:cb:
ff:d4:3e:b9:24:32:f8:78:67:ab:2b:a2:29:73:b9:65:3f:fd:
2e:99:d8:1d:9d:92:f1:b0:df:76:5c:a2:3b:86:48:4b:35:6e:
ee:9f:a6:b4:9e:e9:ea:ae:d9:4c:e0:ed:de:59:01:07:2c:c8:
54:c7:73:92
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY9ZFi79FIKsmQvedOOrd8GSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3YjEzOTZmZDExYzczMGVmMjA0NDgxMjliMjgyODU2YWM1
MDRjYjcwHhcNMjQwNTA4MTY0MjU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzdiNDA2MWUyYzY5ZmNiZjUwMjY5YjJhYjdlM2FkYjlkMmUxNzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5NP/Dm7XVgSgb8BcKQwB/CNqh9I
TPDOs5u/WFDij7Gf256xKvBjM9CsS0nwDSoA4ckipasneIaM/NbcXvrfg4Hp0dT2
sOn5afAhoSF2wxxjavKGKMNwSOFXwJj3ebLONXoqH6HIPTKZQpOUdoZ+bXh5ewFV
72ko9HzRFz0YxDDgw3OmFHJ35VIlJc8TXwpp40UE0eQchmvGyLCoTK4WVqxbHIIr
n0a0+9KhS1E1E9kzXz97pzESBL+ta3kebFWDALfkjaJC2MZV/vW41q9PwYzaBj3B
YTb9joa7YoGWAjKQzgjheiZ8O0da05yKyUMG2byGAhWhw1rRCW0UMqwqgQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEx7QGHixp/L9QJpsqt+OtudLheLMB8GA1UdIwQY
MBaAFIexOW/RHHMO8gRIEpsoKFasUEy3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDdFNWI5RWNjdzd5QkVnU215Z29WcXhRVExjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8zOGJjOTAtMWQ1My00ZDQ3LWJiZGIt
ZjRlN2M5Y2M0M2ZmLzEvVEh0QVllTEduOHYxQW1teXEzNDYyNTB1RjRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8zOGJjOTAtMWQ1My00ZDQ3LWJiZGItZjRlN2M5Y2M0M2Zm
LzEvaDdFNWI5RWNjdzd5QkVnU215Z29WcXhRVExjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwG3OMA0G
CSqGSIb3DQEBCwUAA4IBAQCl6/pwVVRC1j9SzzvFRRVjiEioziUQQvv8Qgo0Io3h
squNUcKtnYyYG2dS1C2VVGum0WQCnIMqXXIF8q+WR4w3uv2vYDGk9j+gtN0+ZXpw
hjtgNSb7pVDfdCvH7rDXEU1bn7oPLJY3sL4EnI3DvH5KSJifSIEnGhAhcdwu4cBr
yNo9HVOiVjSi7Z9ib91yGUyNJoGAaX23zVfqcXRlPSKG2PZDDd7JVHXCv6J81m1n
dOtAV+nHlavkjxPyYvXFYcrthWZxLcv/1D65JDL4eGerK6Ipc7llP/0umdgdnZLx
sN92XKI7hkhLNW7un6a0nunqrtlM4O3eWQEHLMhUx3OS
-----END CERTIFICATE-----
Generated at Fri Jun 7 04:54:16 2024 by rpki-client on console-fra.rpki-client.org