Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/3jUJ33k8VJV9A5bzdyqiqr8UVTA.roa
File: 3jUJ33k8VJV9A5bzdyqiqr8UVTA.roa (raw, json)
Hash identifier: jny8ULnInbIz0ElZH1kRWE2mK5TFqAlF02JsKHD0eDY=
Subject key identifier: DE:35:09:DF:79:3C:54:95:7D:03:96:F3:77:2A:A2:AA:BF:14:55:30
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01856FD53666ECC59AB8F68C7580B0C3F4DA
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/3jUJ33k8VJV9A5bzdyqiqr8UVTA.roa
Signing time: Mon 02 Jan 2023 00:15:22 +0000
ROA not before: Mon 02 Jan 2023 00:15:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58078
IP address blocks: 89.37.184.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:36:66:ec:c5:9a:b8:f6:8c:75:80:b0:c3:f4:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:15:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de3509df793c54957d0396f3772aa2aabf145530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9c:8b:22:b9:d5:ff:3c:f3:10:91:11:f9:27:
9d:d0:41:fb:46:05:93:f0:7c:be:7b:da:1e:35:b9:
00:3e:14:9a:3a:25:c7:36:db:cb:86:ec:09:7f:cd:
e3:9c:ef:80:c6:62:5a:10:95:0a:f3:cd:d0:19:06:
04:4d:d4:a5:94:fc:c5:d6:db:7b:66:7b:97:d4:33:
b9:33:dc:ea:8e:90:87:f4:73:86:17:0e:4b:8a:ff:
a7:bd:37:55:d5:51:43:93:f2:e3:80:ed:6e:17:50:
74:10:1e:ce:64:e7:ba:6d:ce:05:af:d2:19:42:e5:
4f:14:23:27:6d:f7:23:93:41:b4:0a:3c:c8:d7:a4:
90:f1:87:e1:3a:05:a9:d3:72:17:70:9a:5c:60:b9:
6e:af:34:bc:70:93:7a:19:83:86:25:93:7d:bd:7a:
75:d0:a1:fc:77:03:1b:d4:53:fd:a9:04:44:22:c2:
7e:c6:83:81:16:bf:df:0a:13:72:91:e1:1d:ec:2d:
04:65:a8:e8:41:e5:bf:35:94:19:6e:51:5c:6c:9b:
86:23:dd:5b:31:a4:d7:44:f7:e8:02:b9:d0:23:ac:
c9:d9:d4:56:bc:39:73:1e:30:10:68:5e:56:52:84:
d9:92:59:0e:47:ed:b5:16:11:cb:df:aa:14:de:c3:
2e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:35:09:DF:79:3C:54:95:7D:03:96:F3:77:2A:A2:AA:BF:14:55:30
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/3jUJ33k8VJV9A5bzdyqiqr8UVTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.184.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:af:e1:74:fb:09:4a:f5:25:10:fa:4a:c1:dc:da:ae:1a:3d:
29:fe:ae:72:07:cf:b8:a3:a0:ed:c7:52:f6:ae:53:e4:54:98:
70:ca:10:31:7d:c0:98:39:24:f1:9a:8c:b1:b0:61:58:02:2f:
2c:65:92:83:13:ef:f1:29:bc:0e:f9:c8:83:93:ee:3a:4f:23:
95:dd:f5:a9:3d:e6:42:a7:30:2e:8a:78:96:5b:cb:62:46:43:
0c:b7:cf:6d:36:da:19:65:bf:45:20:20:44:5f:e4:eb:62:57:
3c:71:ed:a7:08:e0:83:7e:cc:ff:f5:61:d8:c1:e7:b1:f1:cf:
05:36:fc:56:6e:06:0d:1f:46:71:c2:d9:db:4d:93:66:48:50:
40:cf:ca:d5:d0:67:1f:02:58:c8:68:c7:45:8a:96:91:e6:d3:
1a:0a:d0:ab:bc:58:9e:7b:2f:7f:6c:da:d0:1f:fa:a9:3d:12:
c8:eb:f4:3c:83:5c:e8:df:f7:91:27:eb:67:e8:96:65:19:5b:
0b:8f:b5:35:85:15:49:42:45:eb:9b:3c:89:c0:34:79:ab:0d:
b1:76:91:52:2e:de:0e:87:89:1b:28:e0:e2:e6:50:05:e6:7a:
4e:e9:f5:83:a6:a9:05:31:5e:34:bc:22:30:f8:59:3a:22:e1:
06:ea:e7:25
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYVv1TZm7MWauPaMdYCww/TaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy
MTliNTkwHhcNMjMwMTAyMDAxNTIyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZTM1MDlkZjc5M2M1NDk1N2QwMzk2ZjM3NzJhYTJhYWJmMTQ1NTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45yLIrnV/zzzEJER+Sed0EH7RgWT
8Hy+e9oeNbkAPhSaOiXHNtvLhuwJf83jnO+AxmJaEJUK883QGQYETdSllPzF1tt7
ZnuX1DO5M9zqjpCH9HOGFw5Liv+nvTdV1VFDk/LjgO1uF1B0EB7OZOe6bc4Fr9IZ
QuVPFCMnbfcjk0G0CjzI16SQ8YfhOgWp03IXcJpcYLlurzS8cJN6GYOGJZN9vXp1
0KH8dwMb1FP9qQREIsJ+xoOBFr/fChNykeEd7C0EZajoQeW/NZQZblFcbJuGI91b
MaTXRPfoArnQI6zJ2dRWvDlzHjAQaF5WUoTZklkOR+21FhHL36oU3sMuJQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFN41Cd95PFSVfQOW83cqoqq/FFUwMB8GA1UdIwQY
MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl
LTkyZTI1ZmUxNjMzMS8xLzNqVUozM2s4VkpWOUE1YnpkeXFpcXI4VVZUQS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz
MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABZJbgw
DQYJKoZIhvcNAQELBQADggEBANiv4XT7CUr1JRD6SsHc2q4aPSn+rnIHz7ijoO3H
UvauU+RUmHDKEDF9wJg5JPGajLGwYVgCLyxlkoMT7/EpvA75yIOT7jpPI5Xd9ak9
5kKnMC6KeJZby2JGQwy3z2022hllv0UgIERf5OtiVzxx7acI4IN+zP/1YdjB57Hx
zwU2/FZuBg0fRnHC2dtNk2ZIUEDPytXQZx8CWMhox0WKlpHm0xoK0Ku8WJ57L39s
2tAf+qk9Esjr9DyDXOjf95En62folmUZWwuPtTWFFUlCReubPInANHmrDbF2kVIu
3g6HiRso4OLmUAXmek7p9YOmqQUxXjS8IjD4WToi4Qbq5yU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:52 2024 by rpki-client on console-ams.rpki-client.org