Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/9teMmWdPB3doWRGnHG7IEeClafc.roa
File: 9teMmWdPB3doWRGnHG7IEeClafc.roa (raw, json)
Hash identifier: xl17GVy6hUct/h+zz4wAgaAL+L9GRKaswPa2Gnu4ew4=
Subject key identifier: F6:D7:8C:99:67:4F:07:77:68:59:11:A7:1C:6E:C8:11:E0:A5:69:F7
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018570672D8EBAA9C2D9A76120ED51A03AE4
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/9teMmWdPB3doWRGnHG7IEeClafc.roa
Signing time: Mon 02 Jan 2023 02:54:48 +0000
ROA not before: Mon 02 Jan 2023 02:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 89.185.28.0/22 maxlen: 24
109.72.124.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Jan 2023 16:32:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:2d:8e:ba:a9:c2:d9:a7:61:20:ed:51:a0:3a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jan 2 02:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6d78c99674f0777685911a71c6ec811e0a569f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d6:48:16:87:69:25:97:81:4e:c1:bc:5c:4d:
ee:c9:6d:a2:2d:83:92:f2:8d:8a:6f:ea:7a:9c:1d:
2e:c7:6a:86:c0:0b:37:cb:e6:8f:bb:63:e8:9d:24:
0a:8f:25:0f:ae:bf:ff:e5:9f:c8:51:93:02:04:67:
dc:84:c1:e9:ef:30:5c:f8:48:fd:0d:81:95:80:b1:
98:20:a4:6c:d2:47:c5:6b:68:fb:b6:6f:82:6b:71:
6f:39:9e:e0:98:29:e3:c5:e2:67:c8:13:bf:f9:7d:
93:66:7b:29:9e:45:45:dd:c1:35:ba:92:a5:6c:04:
20:1d:c2:de:f7:75:f7:99:93:4c:45:f3:53:1e:a2:
db:1c:2c:53:97:da:bc:3d:38:d6:8c:2b:14:59:6c:
fc:13:b3:69:ae:1b:9a:c5:d8:1c:50:dc:e3:89:bd:
bf:fb:26:53:01:91:24:d2:e1:d5:e9:14:71:a0:e1:
c9:cb:0c:50:67:ee:72:b3:73:5d:cb:87:bb:bb:8c:
71:91:99:98:80:ee:b4:75:da:33:88:c8:30:54:26:
ee:3c:27:f1:53:e8:cf:eb:ee:c3:e3:cb:4e:9a:f6:
17:13:7b:02:f3:29:59:87:6f:ae:03:73:00:41:ed:
f3:ee:dc:99:92:d6:dc:04:45:c7:5e:07:55:7d:1e:
93:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D7:8C:99:67:4F:07:77:68:59:11:A7:1C:6E:C8:11:E0:A5:69:F7
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/9teMmWdPB3doWRGnHG7IEeClafc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.28.0/22
109.72.124.0/22
Signature Algorithm: sha256WithRSAEncryption
15:99:f7:96:bd:22:8d:bf:ee:97:9f:ea:a1:b8:0e:a7:d9:cc:
01:c3:09:90:27:cd:2d:ed:27:7b:d0:e7:7b:1b:f5:35:b2:b3:
db:fd:e1:0a:5e:8c:a2:b4:41:a6:ae:34:8a:8a:31:11:b0:c5:
7c:81:65:bb:6a:fa:7e:a1:f5:63:f4:34:cf:77:62:b0:44:09:
be:21:a1:fa:8c:36:fd:6d:75:45:b6:66:e5:1f:07:ca:33:f7:
e9:24:42:10:58:c7:79:80:7d:20:14:96:20:39:7f:59:fb:ba:
44:c5:ba:79:0a:4c:7e:71:f8:0b:df:fc:79:81:a8:69:f2:ef:
7b:dc:36:5a:6f:a8:3b:ed:f1:91:68:37:47:8f:8e:c8:97:c6:
c7:4e:43:7c:4d:7d:d1:f7:20:4c:ec:ad:0f:e5:69:cf:17:d7:
6c:5a:ae:92:94:53:c7:d8:9b:06:fd:8c:8d:3d:62:eb:fe:ea:
9b:ea:fd:60:66:6d:19:3c:9b:f5:20:d0:06:b6:24:1f:c1:c7:
a8:7f:eb:40:72:bc:dd:ca:80:b0:07:a3:ff:99:d4:d1:78:c4:
5c:a0:74:91:ac:a4:fd:df:6c:07:2b:97:24:21:42:de:9b:b5:
41:f8:cb:39:b2:cf:44:20:cb:94:0a:07:1e:e8:42:ae:48:15:
75:89:35:dc
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVwZy2OuqnC2adhIO1RoDrkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk
OGRhYmUwHhcNMjMwMTAyMDI1NDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNmQ3OGM5OTY3NGYwNzc3Njg1OTExYTcxYzZlYzgxMWUwYTU2OWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNZIFodpJZeBTsG8XE3uyW2iLYOS
8o2Kb+p6nB0ux2qGwAs3y+aPu2PonSQKjyUPrr//5Z/IUZMCBGfchMHp7zBc+Ej9
DYGVgLGYIKRs0kfFa2j7tm+Ca3FvOZ7gmCnjxeJnyBO/+X2TZnspnkVF3cE1upKl
bAQgHcLe93X3mZNMRfNTHqLbHCxTl9q8PTjWjCsUWWz8E7NprhuaxdgcUNzjib2/
+yZTAZEk0uHV6RRxoOHJywxQZ+5ys3Ndy4e7u4xxkZmYgO60ddoziMgwVCbuPCfx
U+jP6+7D48tOmvYXE3sC8ylZh2+uA3MAQe3z7tyZktbcBEXHXgdVfR6TfQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPbXjJlnTwd3aFkRpxxuyBHgpWn3MB8GA1UdIwQY
MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt
ODJhZDE0NTU1ZWFhLzEvOXRlTW1XZFBCM2RvV1JHbkhHN0lFZUNsYWZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh
LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCWbkcAwQC
bUh8MA0GCSqGSIb3DQEBCwUAA4IBAQAVmfeWvSKNv+6Xn+qhuA6n2cwBwwmQJ80t
7Sd70Od7G/U1srPb/eEKXoyitEGmrjSKijERsMV8gWW7avp+ofVj9DTPd2KwRAm+
IaH6jDb9bXVFtmblHwfKM/fpJEIQWMd5gH0gFJYgOX9Z+7pExbp5Ckx+cfgL3/x5
gahp8u973DZab6g77fGRaDdHj47Il8bHTkN8TX3R9yBM7K0P5WnPF9dsWq6SlFPH
2JsG/YyNPWLr/uqb6v1gZm0ZPJv1INAGtiQfwceof+tAcrzdyoCwB6P/mdTReMRc
oHSRrKT932wHK5ckIULem7VB+Ms5ss9EIMuUCgce6EKuSBV1iTXc
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org