Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/u24eduajEF2KS25qP8U0pYXR3Fs.roa
File: u24eduajEF2KS25qP8U0pYXR3Fs.roa (raw, json)
Hash identifier: 7DZAwPzomx6Ig4Loxwq1GuVX7z7bcp8g1f70mYApxbA=
Subject key identifier: BB:6E:1E:76:E6:A3:10:5D:8A:4B:6E:6A:3F:C5:34:A5:85:D1:DC:5B
Certificate issuer: /CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f
Certificate serial: 0190C1644CD857BEFC043FE60A7864CA4389
Authority key identifier: DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/u24eduajEF2KS25qP8U0pYXR3Fs.roa
Signing time: Wed 17 Jul 2024 15:51:34 +0000
ROA not before: Wed 17 Jul 2024 15:51:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3257
IP address blocks: 86.111.224.0/22 maxlen: 22
94.131.218.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Nov 2024 12:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c1:64:4c:d8:57:be:fc:04:3f:e6:0a:78:64:ca:43:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f
Validity
Not Before: Jul 17 15:51:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb6e1e76e6a3105d8a4b6e6a3fc534a585d1dc5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c1:0b:79:e1:0c:d1:f5:bf:fb:76:80:ce:c3:
c9:16:72:8d:41:a9:aa:d6:3a:a8:8f:57:a4:3f:fc:
12:62:d0:e9:47:78:36:fc:36:68:10:18:bb:99:a8:
4a:2a:d9:25:cc:60:38:6d:80:8d:1b:ff:bc:81:06:
41:92:ef:3e:90:7b:1a:d5:8e:7c:55:8d:f7:a4:15:
7c:bb:28:84:5b:43:98:73:07:bc:4c:4b:5b:82:34:
0c:7a:07:56:3b:bc:18:53:72:44:78:2f:de:6f:38:
d2:7a:3c:5f:56:c3:43:f1:75:32:f4:8f:da:8f:be:
c9:9f:08:45:1f:28:d7:1c:d4:29:67:1d:34:20:dd:
82:03:21:03:9a:c8:df:74:7d:e9:a3:21:e7:fa:96:
58:c0:d7:64:fa:dc:43:01:fc:88:37:21:05:74:d1:
b3:f0:03:a6:6e:8a:06:53:46:2c:a4:01:3a:79:91:
11:44:c7:32:93:ca:3e:58:20:46:b2:2c:f4:d9:d2:
65:bf:63:dc:b1:07:54:2e:16:5d:4a:69:d5:4a:31:
cd:f2:23:6e:0c:0e:31:79:54:35:c7:da:9b:0b:e4:
de:d8:31:6a:80:5c:4e:c9:c5:f9:b5:b7:9b:e4:66:
43:03:d4:69:df:f9:7c:12:74:91:8a:c0:12:6f:a8:
77:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:6E:1E:76:E6:A3:10:5D:8A:4B:6E:6A:3F:C5:34:A5:85:D1:DC:5B
X509v3 Authority Key Identifier:
keyid:DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/u24eduajEF2KS25qP8U0pYXR3Fs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.111.224.0/22
94.131.218.0/24
Signature Algorithm: sha256WithRSAEncryption
24:34:6f:08:9f:fa:bd:19:e8:f9:e9:04:bd:96:84:66:ce:0f:
8a:9f:44:f2:59:60:58:30:68:6a:d6:53:d0:71:38:f1:05:b6:
3a:51:2e:5e:5b:7e:5e:68:f0:33:e6:ed:b1:64:8a:e8:d1:7b:
5b:10:30:ab:77:96:92:0a:4a:e3:fc:37:05:aa:8b:69:d0:2e:
49:3c:c2:20:1f:00:c9:3b:ac:e7:d0:34:d6:54:13:dc:07:fb:
83:48:94:26:52:27:a2:7b:ff:60:2e:87:9c:cd:84:c6:9a:34:
23:d5:c8:df:3c:d3:e6:2d:22:4d:48:b9:6a:34:bb:8f:9e:27:
f8:8e:1b:9d:68:c5:5e:76:b8:02:6b:96:5f:7b:07:97:94:15:
cb:bf:81:c9:7c:d0:89:06:39:63:38:0e:3b:22:15:09:94:ac:
6e:8b:32:78:aa:d3:34:8d:3a:bc:cc:b4:84:e3:23:f5:43:af:
2d:d3:c1:78:a2:5e:5c:3e:de:8a:00:a8:6d:46:f2:79:50:a0:
1b:c0:2a:6f:92:da:ad:06:2c:0f:cb:88:95:e8:7e:a1:b8:76:
ac:d7:e7:0a:3b:77:b6:89:78:ee:1a:1e:75:1b:ea:74:db:15:
b9:23:e2:31:7d:af:88:47:26:13:d9:6b:ed:f9:99:58:2c:82:
79:36:02:ee
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZDBZEzYV778BD/mCnhkykOJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYjM5NmRmYTk1MWVjNDE1N2YyMTFlNWVkNzQwZWQ5N2Ux
YjBmM2YwHhcNMjQwNzE3MTU1MTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjZlMWU3NmU2YTMxMDVkOGE0YjZlNmEzZmM1MzRhNTg1ZDFkYzViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMELeeEM0fW/+3aAzsPJFnKNQamq
1jqoj1ekP/wSYtDpR3g2/DZoEBi7mahKKtklzGA4bYCNG/+8gQZBku8+kHsa1Y58
VY33pBV8uyiEW0OYcwe8TEtbgjQMegdWO7wYU3JEeC/ebzjSejxfVsND8XUy9I/a
j77JnwhFHyjXHNQpZx00IN2CAyEDmsjfdH3poyHn+pZYwNdk+txDAfyINyEFdNGz
8AOmbooGU0YspAE6eZERRMcyk8o+WCBGsiz02dJlv2PcsQdULhZdSmnVSjHN8iNu
DA4xeVQ1x9qbC+Te2DFqgFxOycX5tbeb5GZDA9Rp3/l8EnSRisASb6h34QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLtuHnbmoxBdiktuaj/FNKWF0dxbMB8GA1UdIwQY
MBaAFNuzlt+pUexBV/IR5e10Dtl+Gw8/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjdPVzM2bFI3RUZYOGhIbDdYUU8yWDRiRHo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9iMzk4N2EtNDUwNC00NzQ5LTlkNzMt
ZGY1NzJmZTk2NzJhLzEvdTI0ZWR1YWpFRjJLUzI1cVA4VTBwWVhSM0ZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9iMzk4N2EtNDUwNC00NzQ5LTlkNzMtZGY1NzJmZTk2NzJh
LzEvMjdPVzM2bFI3RUZYOGhIbDdYUU8yWDRiRHo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCVm/gAwQA
XoPaMA0GCSqGSIb3DQEBCwUAA4IBAQAkNG8In/q9Gej56QS9loRmzg+Kn0TyWWBY
MGhq1lPQcTjxBbY6US5eW35eaPAz5u2xZIro0XtbEDCrd5aSCkrj/DcFqotp0C5J
PMIgHwDJO6zn0DTWVBPcB/uDSJQmUieie/9gLoeczYTGmjQj1cjfPNPmLSJNSLlq
NLuPnif4jhudaMVedrgCa5ZfeweXlBXLv4HJfNCJBjljOA47IhUJlKxuizJ4qtM0
jTq8zLSE4yP1Q68t08F4ol5cPt6KAKhtRvJ5UKAbwCpvktqtBiwPy4iV6H6huHas
1+cKO3e2iXjuGh51G+p02xW5I+Ixfa+IRyYT2Wvt+ZlYLIJ5NgLu
-----END CERTIFICATE-----
Generated at Thu Nov 21 14:22:52 2024 by rpki-client on console-ams.rpki-client.org