Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/1-mpJ6pOVwg3fFeeO_pT0IWG1ftk.roa
File: 1-mpJ6pOVwg3fFeeO_pT0IWG1ftk.roa (raw, json)
Hash identifier: cMB3B+lA/qyZjlHlIEuqhxEVfIFCKcRRPC/E/eie1c4=
Subject key identifier: FA:6A:49:EA:93:95:C2:0D:DF:15:E7:8E:FE:94:F4:21:61:B5:7E:D9
Certificate issuer: /CN=ebf42e80602aedf58a3c7a81883c1a34f69d2fb4
Certificate serial: 018571B0FB4C6E4497E2B3C6550B68A81692
Authority key identifier: EB:F4:2E:80:60:2A:ED:F5:8A:3C:7A:81:88:3C:1A:34:F6:9D:2F:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/1-mpJ6pOVwg3fFeeO_pT0IWG1ftk.roa
Signing time: Mon 02 Jan 2023 08:55:02 +0000
ROA not before: Mon 02 Jan 2023 08:55:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49164
IP address blocks: 89.36.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b0:fb:4c:6e:44:97:e2:b3:c6:55:0b:68:a8:16:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebf42e80602aedf58a3c7a81883c1a34f69d2fb4
Validity
Not Before: Jan 2 08:55:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa6a49ea9395c20ddf15e78efe94f42161b57ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:87:fe:c0:33:a9:fa:bd:f8:4d:f3:75:ca:3c:
a3:25:da:0d:65:34:ca:71:11:51:5c:ec:7c:fc:76:
70:91:31:7a:d5:19:87:09:c7:19:c8:30:cb:82:2d:
30:ab:f7:4a:c8:cd:09:e4:d9:4e:04:89:84:50:29:
40:76:7b:53:b1:76:d9:78:cf:36:e4:0b:35:dd:7b:
16:64:e8:f7:d3:d9:2a:35:49:a7:08:94:29:ee:23:
2c:0a:45:e4:69:5d:81:d9:3c:a5:b6:df:2a:a6:a4:
92:48:e4:c2:92:4c:74:49:ad:1d:a7:08:c7:e3:d5:
ed:6a:c2:ba:eb:5a:8f:ea:26:d9:b3:b2:85:50:d6:
d0:f0:c7:0e:88:ae:56:a6:da:50:be:95:12:31:a8:
75:17:de:f3:ba:2b:61:11:00:a5:a0:b1:6b:38:c6:
7d:85:f0:f8:06:e6:60:5c:ea:9b:99:e1:58:86:17:
b0:fe:bd:da:8a:fe:53:a2:be:ab:38:b5:6e:e4:be:
44:06:17:b7:91:58:4f:e7:6f:ae:51:b2:28:38:c6:
49:28:6b:15:4e:af:05:ea:dc:48:19:27:93:cc:2c:
ee:4e:2d:01:92:39:ba:d2:77:0a:55:f4:3d:2b:45:
0a:d9:64:a5:13:70:e7:dc:3d:b5:bb:98:8e:b6:53:
6a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6A:49:EA:93:95:C2:0D:DF:15:E7:8E:FE:94:F4:21:61:B5:7E:D9
X509v3 Authority Key Identifier:
keyid:EB:F4:2E:80:60:2A:ED:F5:8A:3C:7A:81:88:3C:1A:34:F6:9D:2F:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/1-mpJ6pOVwg3fFeeO_pT0IWG1ftk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.36.173.0/24
Signature Algorithm: sha256WithRSAEncryption
21:ec:74:ca:a2:d0:50:6a:5b:17:c8:66:f8:42:d2:be:ee:08:
6d:80:60:5e:e2:43:91:d3:8b:9c:ad:5f:56:4f:ea:70:a2:d1:
22:d8:bc:d1:6f:38:7b:72:3f:5b:e3:d0:56:79:e3:b2:da:bc:
8f:b8:1d:c7:2d:97:3c:2b:21:cd:f3:4a:36:2f:e5:6f:d9:14:
5a:bf:43:01:b8:c9:bf:22:bd:51:cc:f3:ba:ab:c0:e2:eb:87:
4f:b6:04:0e:af:af:f1:b0:67:89:1f:0f:02:de:6c:8f:7e:43:
1d:be:12:fc:6d:d3:27:ef:8f:19:a9:d8:9f:ac:43:0a:78:c5:
7a:ed:59:4c:c3:56:b5:ac:0d:cf:6f:3c:b2:eb:45:61:fc:f2:
af:b6:db:66:d2:d7:9b:c1:c8:2c:73:c3:90:8d:b2:b1:e5:20:
72:2f:d9:fb:67:fb:33:d1:3f:0f:73:35:1c:3a:86:d4:12:9e:
96:00:5b:38:91:dd:f6:3a:42:8b:ca:5b:3a:cb:c8:ad:72:3e:
e0:2f:2f:3f:61:47:5e:fb:ef:3d:44:3a:5b:57:28:1e:2b:67:
b9:37:62:ad:56:a4:a1:ce:b1:7f:56:28:58:3e:f5:4c:d3:a3:
4f:c8:6b:aa:6b:d5:c1:db:34:2c:d7:af:45:43:b0:4c:ab:5f:
13:e3:47:b2
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVxsPtMbkSX4rPGVQtoqBaSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViZjQyZTgwNjAyYWVkZjU4YTNjN2E4MTg4M2MxYTM0ZjY5
ZDJmYjQwHhcNMjMwMTAyMDg1NTAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTZhNDllYTkzOTVjMjBkZGYxNWU3OGVmZTk0ZjQyMTYxYjU3ZWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIf+wDOp+r34TfN1yjyjJdoNZTTK
cRFRXOx8/HZwkTF61RmHCccZyDDLgi0wq/dKyM0J5NlOBImEUClAdntTsXbZeM82
5As13XsWZOj309kqNUmnCJQp7iMsCkXkaV2B2Tyltt8qpqSSSOTCkkx0Sa0dpwjH
49XtasK661qP6ibZs7KFUNbQ8McOiK5WptpQvpUSMah1F97zuithEQCloLFrOMZ9
hfD4BuZgXOqbmeFYhhew/r3aiv5Tor6rOLVu5L5EBhe3kVhP52+uUbIoOMZJKGsV
Tq8F6txIGSeTzCzuTi0Bkjm60ncKVfQ9K0UK2WSlE3Dn3D21u5iOtlNqxQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPpqSeqTlcIN3xXnjv6U9CFhtX7ZMB8GA1UdIwQY
MBaAFOv0LoBgKu31ijx6gYg8GjT2nS+0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNl9RdWdHQXE3ZldLUEhxQmlEd2FOUGFkTDdRLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8wOTUyZDQtNGE0OS00NDdkLWFkM2Mt
MTkwM2VkYWZhOGJmLzEvMS1tcEo2cE9Wd2czZkZlZU9fcFQwSVdHMWZ0ay5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMDEvMDk1MmQ0LTRhNDktNDQ3ZC1hZDNjLTE5MDNlZGFmYThi
Zi8xLzZfUXVnR0FxN2ZXS1BIcUJpRHdhTlBhZEw3US5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFkkrTAN
BgkqhkiG9w0BAQsFAAOCAQEAIex0yqLQUGpbF8hm+ELSvu4IbYBgXuJDkdOLnK1f
Vk/qcKLRIti80W84e3I/W+PQVnnjstq8j7gdxy2XPCshzfNKNi/lb9kUWr9DAbjJ
vyK9UczzuqvA4uuHT7YEDq+v8bBniR8PAt5sj35DHb4S/G3TJ++PGanYn6xDCnjF
eu1ZTMNWtawNz288sutFYfzyr7bbZtLXm8HILHPDkI2yseUgci/Z+2f7M9E/D3M1
HDqG1BKelgBbOJHd9jpCi8pbOsvIrXI+4C8vP2FHXvvvPUQ6W1coHitnuTdirVak
oc6xf1YoWD71TNOjT8hrqmvVwds0LNevRUOwTKtfE+NHsg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:54 2024 by rpki-client on console-ams.rpki-client.org