Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/GRL6rC1oTwQK9_dBiKoSUoo_Ux8.roa
File: GRL6rC1oTwQK9_dBiKoSUoo_Ux8.roa (raw, json)
Hash identifier: OfNktRR0mUWs1zvgd0nXfN28D3hA00Mt+tRax9Jt7Yc=
Subject key identifier: 19:12:FA:AC:2D:68:4F:04:0A:F7:F7:41:88:AA:12:52:8A:3F:53:1F
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 0193054C38F7678994E4CC66CB5DF3AB6E13
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/GRL6rC1oTwQK9_dBiKoSUoo_Ux8.roa
Signing time: Thu 07 Nov 2024 06:25:01 +0000
ROA not before: Thu 07 Nov 2024 06:25:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215224
IP address blocks: 89.249.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:53:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:05:4c:38:f7:67:89:94:e4:cc:66:cb:5d:f3:ab:6e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Nov 7 06:25:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1912faac2d684f040af7f74188aa12528a3f531f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f7:6e:cd:60:fb:93:b5:05:96:2c:a6:34:83:
dc:04:ba:0d:e8:72:3c:fc:ab:80:c2:69:bb:3e:0c:
89:6c:10:1e:db:e8:50:0f:09:e4:fb:fe:5f:a8:41:
b8:b6:e0:3a:9a:79:84:eb:5c:2d:63:52:6d:c5:bf:
b1:96:e6:db:8d:e4:3d:3c:6c:db:27:18:0e:94:83:
1a:46:e5:12:57:99:53:71:ff:f5:0c:82:e3:6a:b3:
3f:1c:51:d0:35:ac:60:3a:94:21:05:db:3a:87:81:
00:a4:19:6b:12:b3:50:18:66:af:6a:9b:51:92:5b:
9d:48:59:cb:8c:69:6c:01:8f:f2:f8:15:d2:6f:87:
5e:bb:56:0a:b7:e8:20:00:15:29:bf:87:fc:fc:14:
68:24:26:39:7d:cd:35:97:8a:91:f9:74:f0:61:85:
30:cd:b2:22:1c:a2:7a:d1:fe:be:28:4a:ca:92:c7:
31:fb:4c:ff:87:72:e4:cc:ec:44:19:82:fd:58:47:
cb:13:88:57:74:27:82:2e:cc:3c:a2:8f:50:ae:49:
e5:ba:cb:db:df:c3:cd:9a:db:2c:f1:3b:7e:35:b4:
0c:52:d8:44:b4:16:20:ca:52:c0:22:3f:40:c1:b7:
be:1f:09:30:fa:70:9f:1e:99:d7:42:a6:4f:f5:c5:
9a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:12:FA:AC:2D:68:4F:04:0A:F7:F7:41:88:AA:12:52:8A:3F:53:1F
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/GRL6rC1oTwQK9_dBiKoSUoo_Ux8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.200.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:72:af:83:a7:8a:10:e5:65:dc:12:01:77:22:a8:b8:83:03:
ed:1b:b7:6d:56:56:90:cf:01:3a:6c:34:d5:2b:19:3a:8c:45:
39:53:78:a3:b0:59:bb:45:af:10:70:86:61:46:a7:46:f4:f7:
8f:62:88:26:22:93:36:98:d7:80:cd:12:2b:7d:3d:3e:f0:bc:
0e:90:44:19:77:5d:b2:66:36:a0:e4:d6:57:15:85:e2:c7:77:
9b:82:bc:5f:6c:69:ab:ef:4f:74:3f:e5:f0:82:6b:f2:79:91:
f4:b9:27:67:2a:0e:51:d7:e2:67:0b:dd:0b:fd:52:fa:9c:07:
a5:cd:19:73:02:b1:7d:57:80:de:cc:01:c2:66:d3:e7:5f:0b:
62:c0:a1:0d:04:a6:12:62:7e:7c:af:2f:e0:51:0d:94:59:90:
ac:f1:2a:68:52:e7:95:7d:be:82:03:31:88:2a:ed:6c:ca:64:
fa:66:f0:15:2f:2a:4e:82:9d:12:9b:36:ea:c8:f6:00:e4:35:
5c:7a:1b:43:45:a2:32:45:a5:55:cb:c1:1b:14:ad:06:c1:bb:
50:9b:bc:08:e8:c1:46:82:a6:00:23:47:71:a0:93:5c:c5:db:
1c:3e:06:ce:82:88:88:48:aa:ae:77:87:ba:4e:54:7c:5e:fe:
84:5a:48:11
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZMFTDj3Z4mU5Mxmy13zq24TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1
MThjYjkwHhcNMjQxMTA3MDYyNTAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTEyZmFhYzJkNjg0ZjA0MGFmN2Y3NDE4OGFhMTI1MjhhM2Y1MzFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPduzWD7k7UFliymNIPcBLoN6HI8
/KuAwmm7PgyJbBAe2+hQDwnk+/5fqEG4tuA6mnmE61wtY1Jtxb+xlubbjeQ9PGzb
JxgOlIMaRuUSV5lTcf/1DILjarM/HFHQNaxgOpQhBds6h4EApBlrErNQGGavaptR
kludSFnLjGlsAY/y+BXSb4deu1YKt+ggABUpv4f8/BRoJCY5fc01l4qR+XTwYYUw
zbIiHKJ60f6+KErKkscx+0z/h3LkzOxEGYL9WEfLE4hXdCeCLsw8oo9Qrknlusvb
38PNmtss8Tt+NbQMUthEtBYgylLAIj9Awbe+Hwkw+nCfHpnXQqZP9cWakQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBkS+qwtaE8ECvf3QYiqElKKP1MfMB8GA1UdIwQY
MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt
MzQyNWIxMjVlYWE3LzEvR1JMNnJDMW9Ud1FLOV9kQmlLb1NVb29fVXg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3
LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWfnIMA0G
CSqGSIb3DQEBCwUAA4IBAQBfcq+Dp4oQ5WXcEgF3Iqi4gwPtG7dtVlaQzwE6bDTV
Kxk6jEU5U3ijsFm7Ra8QcIZhRqdG9PePYogmIpM2mNeAzRIrfT0+8LwOkEQZd12y
Zjag5NZXFYXix3ebgrxfbGmr7090P+XwgmvyeZH0uSdnKg5R1+JnC90L/VL6nAel
zRlzArF9V4DezAHCZtPnXwtiwKENBKYSYn58ry/gUQ2UWZCs8SpoUueVfb6CAzGI
Ku1symT6ZvAVLypOgp0SmzbqyPYA5DVcehtDRaIyRaVVy8EbFK0GwbtQm7wI6MFG
gqYAI0dxoJNcxdscPgbOgoiISKqud4e6TlR8Xv6EWkgR
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:20:01 2025 by rpki-client