Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/_1R3IfYeIEv9xt6wvhABjfGZvzQ.roa
File: _1R3IfYeIEv9xt6wvhABjfGZvzQ.roa (raw, json)
Hash identifier: BMYBOup59gkmDU0DjxgqyOD2vWi/ARcN2vZUh9mU9gY=
Subject key identifier: FF:54:77:21:F6:1E:20:4B:FD:C6:DE:B0:BE:10:01:8D:F1:99:BF:34
Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial: 018CAFD84FFD757423E2AF7146774748D619
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/_1R3IfYeIEv9xt6wvhABjfGZvzQ.roa
Signing time: Thu 28 Dec 2023 09:53:58 +0000
ROA not before: Thu 28 Dec 2023 09:53:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48147
IP address blocks: 87.236.208.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:af:d8:4f:fd:75:74:23:e2:af:71:46:77:47:48:d6:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Validity
Not Before: Dec 28 09:53:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff547721f61e204bfdc6deb0be10018df199bf34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:15:34:7e:e9:93:d0:e5:f5:ca:29:a0:2c:c7:
ed:96:c7:cf:4a:58:d6:b4:0c:29:45:0e:07:74:e3:
cd:c8:2e:9e:f6:70:33:ac:94:75:f8:e2:b5:24:62:
dd:f4:37:8c:c9:51:e8:bc:d2:bd:6d:a0:54:f4:14:
5e:bd:57:e3:31:87:cc:f1:e0:4c:55:cf:d4:90:16:
19:68:bf:5e:01:89:66:36:28:8d:cf:99:23:e7:32:
ea:59:2a:a9:49:a2:b8:fc:b3:62:00:2d:4a:5d:ac:
5c:b3:d8:f4:a2:fd:78:49:d8:94:26:72:9f:9c:05:
de:59:70:13:f2:e6:2c:c6:a9:3c:a0:f0:ea:07:f2:
a1:a8:e7:79:f8:f3:47:45:56:30:cd:d5:95:3a:a5:
25:36:21:c3:5d:63:61:87:bc:18:1a:0b:1c:b2:78:
48:af:6e:5c:6f:bc:63:25:3c:46:fd:3e:ee:0a:5f:
91:85:9d:6a:08:bb:7a:a5:e9:70:1d:d0:f8:85:17:
c6:9d:9e:d2:dd:29:cc:c2:73:11:7c:1e:06:a8:96:
e6:6f:a5:97:ea:1a:a4:b5:26:bf:8b:36:d4:21:cf:
b3:30:fa:da:34:94:bb:3d:aa:ba:5a:90:40:b2:7e:
54:72:ed:ad:d3:69:fa:67:77:38:3b:24:1c:56:44:
bb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:54:77:21:F6:1E:20:4B:FD:C6:DE:B0:BE:10:01:8D:F1:99:BF:34
X509v3 Authority Key Identifier:
keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/_1R3IfYeIEv9xt6wvhABjfGZvzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.208.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:f5:a1:14:0b:2a:81:0b:19:74:a3:3a:5f:9d:f7:87:47:c0:
03:f7:55:a6:cd:74:81:50:2c:47:28:a2:08:97:d8:2e:a1:4e:
8d:b5:1c:9d:0f:0d:a4:47:60:cf:1b:bf:8b:ad:52:dc:e3:ef:
e9:e6:c1:55:ba:ba:7c:5b:57:49:83:3e:53:51:d3:e3:2a:56:
fd:dc:d8:08:ac:2b:06:f1:50:24:e3:01:e0:31:1e:18:02:26:
a7:70:bb:98:9f:62:c9:89:f6:75:3b:d1:28:0a:85:87:f7:36:
2b:2e:e4:17:39:5c:94:c5:23:e0:ae:a6:50:46:06:db:18:f1:
6c:a6:16:90:65:8e:8d:96:95:8d:97:a2:db:7b:d8:ff:4b:07:
71:22:35:69:1f:c4:df:54:8b:09:37:37:84:4e:01:05:17:07:
45:a9:75:82:08:4f:e8:11:ad:c9:ae:0a:53:09:80:cd:b3:2e:
ae:8b:46:f7:de:2c:19:f5:5c:75:7c:54:3f:e0:d5:fd:b2:3a:
e5:9a:b8:04:35:77:bb:4c:7f:e1:04:1d:97:5a:c6:06:a8:e2:
c1:2f:ec:64:19:62:67:84:32:95:fd:bc:6f:2c:20:85:42:f9:
11:89:df:17:bd:c4:86:3b:32:92:ff:e1:a2:a0:8a:f8:fe:2f:
8c:6c:4f:bc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYyv2E/9dXQj4q9xRndHSNYZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyYmY2NDY0Y2U2ZTE5YTRkY2Y4YTMyYjI3YTJmMWNiZTE1
NTEwNTUwHhcNMjMxMjI4MDk1MzU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjU0NzcyMWY2MWUyMDRiZmRjNmRlYjBiZTEwMDE4ZGYxOTliZjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxU0fumT0OX1yimgLMftlsfPSljW
tAwpRQ4HdOPNyC6e9nAzrJR1+OK1JGLd9DeMyVHovNK9baBU9BRevVfjMYfM8eBM
Vc/UkBYZaL9eAYlmNiiNz5kj5zLqWSqpSaK4/LNiAC1KXaxcs9j0ov14SdiUJnKf
nAXeWXAT8uYsxqk8oPDqB/KhqOd5+PNHRVYwzdWVOqUlNiHDXWNhh7wYGgscsnhI
r25cb7xjJTxG/T7uCl+RhZ1qCLt6pelwHdD4hRfGnZ7S3SnMwnMRfB4GqJbmb6WX
6hqktSa/izbUIc+zMPraNJS7Paq6WpBAsn5Ucu2t02n6Z3c4OyQcVkS7gwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP9UdyH2HiBL/cbesL4QAY3xmb80MB8GA1UdIwQY
MBaAFJK/ZGTObhmk3PijKyei8cvhVRBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzct
YjUzZTMwZTE0MTJhLzEvXzFSM0lmWWVJRXY5eHQ2d3ZoQUJqZkdadnpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzctYjUzZTMwZTE0MTJh
LzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+zQMA0G
CSqGSIb3DQEBCwUAA4IBAQCr9aEUCyqBCxl0ozpfnfeHR8AD91WmzXSBUCxHKKII
l9guoU6NtRydDw2kR2DPG7+LrVLc4+/p5sFVurp8W1dJgz5TUdPjKlb93NgIrCsG
8VAk4wHgMR4YAiancLuYn2LJifZ1O9EoCoWH9zYrLuQXOVyUxSPgrqZQRgbbGPFs
phaQZY6NlpWNl6Lbe9j/SwdxIjVpH8TfVIsJNzeETgEFFwdFqXWCCE/oEa3JrgpT
CYDNsy6ui0b33iwZ9Vx1fFQ/4NX9sjrlmrgENXe7TH/hBB2XWsYGqOLBL+xkGWJn
hDKV/bxvLCCFQvkRid8XvcSGOzKS/+GioIr4/i+MbE+8
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:43 2024 by rpki-client on console-fra.rpki-client.org