Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/mabRUuaLxUnaMt7VQvO7SmJAdVc.roa
File: mabRUuaLxUnaMt7VQvO7SmJAdVc.roa (raw, json)
Hash identifier: rQmqwyW5JhS70uoerUNMTJPxEv3+gnznB7DTUHyPuys=
Subject key identifier: 99:A6:D1:52:E6:8B:C5:49:DA:32:DE:D5:42:F3:BB:4A:62:40:75:57
Certificate issuer: /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Certificate serial: 018D7996638E1E5DA81D81495538CBE567C8
Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/mabRUuaLxUnaMt7VQvO7SmJAdVc.roa
Signing time: Mon 05 Feb 2024 14:05:15 +0000
ROA not before: Mon 05 Feb 2024 14:05:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35571
IP address blocks: 87.236.80.0/22 maxlen: 22
87.236.80.0/24 maxlen: 24
87.236.81.0/24 maxlen: 24
87.236.82.0/24 maxlen: 24
87.236.83.0/24 maxlen: 24
87.236.84.0/23 maxlen: 23
87.236.84.0/24 maxlen: 24
87.236.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Apr 2024 12:10:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:79:96:63:8e:1e:5d:a8:1d:81:49:55:38:cb:e5:67:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Validity
Not Before: Feb 5 14:05:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99a6d152e68bc549da32ded542f3bb4a62407557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:31:b8:d3:69:68:98:75:2c:3d:28:b7:4f:df:
8b:c8:43:23:83:47:c9:3b:fb:b6:9f:20:25:72:6a:
53:06:84:ce:cc:1b:a9:94:74:0e:5d:73:b2:e5:f4:
95:bc:70:10:f6:4c:92:b8:da:63:5f:2f:2b:4f:fc:
be:6b:cf:8e:6a:ed:f1:02:34:25:0c:a6:3e:f1:d0:
a6:ef:e1:e1:e4:f8:f9:f0:44:d8:4a:8b:d6:ca:83:
94:c6:a3:e6:e9:c0:85:cf:52:4d:9e:a4:ae:ab:34:
55:80:bb:b3:e7:e7:d4:9b:17:96:58:11:64:b5:a9:
95:27:bd:c7:6b:77:79:7f:3b:2c:91:54:14:5a:ea:
a2:5e:87:17:b8:c3:1d:39:82:a0:6d:6f:df:41:b5:
09:1a:7b:68:95:65:0f:02:b4:8f:c0:de:dc:44:9a:
26:dc:d2:ca:0f:a5:b8:e9:0a:a5:56:0d:55:df:49:
49:c5:48:5f:fa:01:50:a7:f4:80:0f:a0:a4:38:49:
54:3b:03:27:6b:b4:08:fa:39:c9:a5:8f:61:44:af:
54:02:29:75:2b:d9:80:f3:b5:91:e5:de:fe:95:cd:
40:8d:80:da:d6:e3:ac:a8:2d:43:c8:a1:12:0d:7a:
2b:86:27:20:4d:a2:0f:b8:8c:e4:b8:5a:16:4a:dd:
b1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A6:D1:52:E6:8B:C5:49:DA:32:DE:D5:42:F3:BB:4A:62:40:75:57
X509v3 Authority Key Identifier:
keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/mabRUuaLxUnaMt7VQvO7SmJAdVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.80.0-87.236.85.255
Signature Algorithm: sha256WithRSAEncryption
c7:82:0c:f1:c7:3d:0d:c3:70:36:01:c4:8a:d2:c5:d3:1e:cc:
dc:4a:08:4e:38:90:5c:59:a1:fb:2f:64:b7:98:5a:72:63:30:
fa:59:23:26:8a:50:ad:0e:ba:dc:29:0d:9c:46:c2:9f:57:e7:
33:a9:f2:3b:20:41:1e:39:43:2d:4f:ba:47:11:7c:e6:a6:73:
52:7d:52:47:9b:40:23:c4:5e:df:c1:0e:bf:3a:e7:15:b2:f8:
28:c1:23:94:22:c0:c3:fe:0d:ce:a8:ee:c5:bf:b7:26:71:90:
d3:08:1e:1b:5a:d4:2d:49:7f:0e:9d:06:47:c4:54:97:30:4d:
07:21:bd:e2:eb:58:37:16:80:ba:d3:4e:03:94:6a:60:99:c4:
90:4d:9c:3e:ef:20:71:15:d0:3d:b3:31:06:7b:05:58:ff:87:
4e:8c:87:16:2e:73:07:09:d6:e7:01:48:7c:96:0a:93:e1:31:
1c:e6:cf:04:db:82:57:43:a1:ff:2d:ad:f2:88:03:47:18:3e:
3a:4e:6f:36:ea:6e:98:e9:b4:f7:e4:9e:56:e9:2b:46:38:7b:
2b:93:2c:c5:c0:a8:4d:12:91:57:5f:f9:e1:59:6d:fc:43:56:
aa:44:2c:6c:16:d6:5f:3a:5d:28:df:8f:05:c1:39:57:87:b2:
30:da:61:d9
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAY15lmOOHl2oHYFJVTjL5WfIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5Nzk4NjNjZWE4MmFlYjhlOWRmMzg0YjM5YWE1MTc2ZjRi
Y2ZhNjEwHhcNMjQwMjA1MTQwNTE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OWE2ZDE1MmU2OGJjNTQ5ZGEzMmRlZDU0MmYzYmI0YTYyNDA3NTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jG402lomHUsPSi3T9+LyEMjg0fJ
O/u2nyAlcmpTBoTOzBuplHQOXXOy5fSVvHAQ9kySuNpjXy8rT/y+a8+Oau3xAjQl
DKY+8dCm7+Hh5Pj58ETYSovWyoOUxqPm6cCFz1JNnqSuqzRVgLuz5+fUmxeWWBFk
tamVJ73Ha3d5fzsskVQUWuqiXocXuMMdOYKgbW/fQbUJGntolWUPArSPwN7cRJom
3NLKD6W46QqlVg1V30lJxUhf+gFQp/SAD6CkOElUOwMna7QI+jnJpY9hRK9UAil1
K9mA87WR5d7+lc1AjYDa1uOsqC1DyKESDXorhicgTaIPuIzkuFoWSt2xDwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFJmm0VLmi8VJ2jLe1ULzu0piQHVXMB8GA1UdIwQY
MBaAFHl5hjzqgq646d84SzmqUXb0vPphMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEt
ZGU0YWNmNDQ3ZmFlLzEvbWFiUlV1YUx4VW5hTXQ3VlF2TzdTbUpBZFZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEtZGU0YWNmNDQ3ZmFl
LzEvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBARX7FAD
BAFX7FQwDQYJKoZIhvcNAQELBQADggEBAMeCDPHHPQ3DcDYBxIrSxdMezNxKCE44
kFxZofsvZLeYWnJjMPpZIyaKUK0OutwpDZxGwp9X5zOp8jsgQR45Qy1PukcRfOam
c1J9UkebQCPEXt/BDr865xWy+CjBI5QiwMP+Dc6o7sW/tyZxkNMIHhta1C1Jfw6d
BkfEVJcwTQchveLrWDcWgLrTTgOUamCZxJBNnD7vIHEV0D2zMQZ7BVj/h06MhxYu
cwcJ1ucBSHyWCpPhMRzmzwTbgldDof8trfKIA0cYPjpObzbqbpjptPfknlbpK0Y4
eyuTLMXAqE0SkVdf+eFZbfxDVqpELGwW1l86XSjfjwXBOVeHsjDaYdk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:51 2024 by rpki-client on console-fra.rpki-client.org