Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/JAWdlAB3X7rqF3m1aQiZcYW4DmI.roa
File: JAWdlAB3X7rqF3m1aQiZcYW4DmI.roa (raw, json)
Hash identifier: 8Y+LqDaAh5PgcKHENNzhW2UfGuWsX6A0h8icCqeCNIo=
Subject key identifier: 24:05:9D:94:00:77:5F:BA:EA:17:79:B5:69:08:99:71:85:B8:0E:62
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 0186A75C793D99701AC7EAEADAC2D737E3DB
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/JAWdlAB3X7rqF3m1aQiZcYW4DmI.roa
Signing time: Fri 03 Mar 2023 12:05:00 +0000
ROA not before: Fri 03 Mar 2023 12:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212609
IP address blocks: 89.185.23.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a7:5c:79:3d:99:70:1a:c7:ea:ea:da:c2:d7:37:e3:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Mar 3 12:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24059d9400775fbaea1779b56908997185b80e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f9:99:f1:46:f1:f2:b5:0b:2c:7d:cb:f6:fb:
08:09:8f:36:bc:f3:c0:e0:f7:18:f0:e4:38:e9:13:
ed:5c:9c:fb:45:ec:2b:7e:e5:2e:08:f2:83:de:1b:
fd:8a:9c:db:7e:8f:02:05:71:23:57:58:50:0e:4d:
6f:fb:ca:aa:da:31:53:b9:dc:fe:73:c9:a5:65:65:
c5:ef:3d:d3:cb:e6:72:c0:51:f6:56:0b:32:ab:97:
6a:77:ad:1e:c6:46:4e:c3:85:d1:76:2f:01:f8:7d:
be:44:b9:ba:32:75:8b:aa:cd:c3:3a:dc:18:a4:5e:
1e:43:46:e6:03:ac:66:a8:5c:3e:40:a3:c4:86:91:
18:6f:be:21:a4:41:4a:47:9b:90:dc:9a:cc:73:85:
64:c4:7b:34:73:d8:73:b5:8f:9d:94:e2:e6:9d:1a:
f7:97:15:72:36:56:0a:d7:cc:68:e5:e2:ed:0d:23:
30:52:92:25:af:b6:4a:c8:e0:2a:05:95:d1:08:30:
b2:72:5e:e4:b4:26:43:49:47:d4:21:15:a4:7e:52:
a5:a2:e2:e0:62:a7:cf:52:de:ce:2e:48:79:53:c3:
44:82:9d:29:12:24:b1:95:d5:d4:ef:3e:cb:8e:16:
8e:c8:e9:6d:01:4a:2e:08:ec:b0:f4:2e:1d:26:e8:
04:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:05:9D:94:00:77:5F:BA:EA:17:79:B5:69:08:99:71:85:B8:0E:62
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/JAWdlAB3X7rqF3m1aQiZcYW4DmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.23.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:47:ac:57:af:45:2e:77:0e:35:9f:0c:16:c2:72:e4:75:1f:
33:22:a9:14:99:61:bd:82:99:29:6d:87:ac:59:fe:29:6c:4c:
ed:eb:2d:54:8a:81:dd:93:ec:01:ed:f6:86:3f:d5:8a:bb:f2:
d2:57:87:cd:ff:7a:a5:b3:ed:31:70:d4:e3:b5:71:0f:ba:50:
f8:a9:72:b4:3f:fb:8a:f4:43:bd:1b:35:dd:67:7b:e8:07:c8:
a5:74:31:a1:47:7e:e4:98:29:7f:92:c6:42:57:e9:e6:7e:7a:
23:e4:1c:d2:24:38:27:35:8d:11:78:90:57:bc:19:51:e0:c4:
b6:6e:35:d4:50:76:85:2f:54:17:c6:3c:6d:a8:4e:8a:71:72:
52:02:91:71:29:87:d5:36:6d:e1:ac:3f:da:7d:88:5a:6f:3b:
2a:5a:fc:2c:c1:3a:80:0c:8f:1f:63:79:b9:60:ff:82:0f:12:
89:50:1e:b7:4d:5c:95:c3:e6:eb:55:1b:c7:75:f9:e2:05:83:
28:08:fe:81:14:cc:bf:f3:70:e9:36:b8:ed:e3:07:da:04:6c:
9d:b9:d8:8b:b9:0e:97:bc:f4:27:ee:07:52:98:95:6f:d6:30:
5b:25:91:4f:6d:68:5b:07:e2:8a:5d:e6:b5:c5:0a:8a:9d:67:
49:6e:07:c4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYanXHk9mXAax+rq2sLXN+PbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk
OGRhYmUwHhcNMjMwMzAzMTIwNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDA1OWQ5NDAwNzc1ZmJhZWExNzc5YjU2OTA4OTk3MTg1YjgwZTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfmZ8Ubx8rULLH3L9vsICY82vPPA
4PcY8OQ46RPtXJz7RewrfuUuCPKD3hv9ipzbfo8CBXEjV1hQDk1v+8qq2jFTudz+
c8mlZWXF7z3Ty+ZywFH2Vgsyq5dqd60exkZOw4XRdi8B+H2+RLm6MnWLqs3DOtwY
pF4eQ0bmA6xmqFw+QKPEhpEYb74hpEFKR5uQ3JrMc4VkxHs0c9hztY+dlOLmnRr3
lxVyNlYK18xo5eLtDSMwUpIlr7ZKyOAqBZXRCDCycl7ktCZDSUfUIRWkflKlouLg
YqfPUt7OLkh5U8NEgp0pEiSxldXU7z7LjhaOyOltAUouCOyw9C4dJugEUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCQFnZQAd1+66hd5tWkImXGFuA5iMB8GA1UdIwQY
MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt
ODJhZDE0NTU1ZWFhLzEvSkFXZGxBQjNYN3JxRjNtMWFRaVpjWVc0RG1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh
LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWbkXMA0G
CSqGSIb3DQEBCwUAA4IBAQBbR6xXr0Uudw41nwwWwnLkdR8zIqkUmWG9gpkpbYes
Wf4pbEzt6y1UioHdk+wB7faGP9WKu/LSV4fN/3qls+0xcNTjtXEPulD4qXK0P/uK
9EO9GzXdZ3voB8ildDGhR37kmCl/ksZCV+nmfnoj5BzSJDgnNY0ReJBXvBlR4MS2
bjXUUHaFL1QXxjxtqE6KcXJSApFxKYfVNm3hrD/afYhabzsqWvwswTqADI8fY3m5
YP+CDxKJUB63TVyVw+brVRvHdfniBYMoCP6BFMy/83DpNrjt4wfaBGydudiLuQ6X
vPQn7gdSmJVv1jBbJZFPbWhbB+KKXea1xQqKnWdJbgfE
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org