Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/K1b-cXKMvbC6vPBewZmF8O1suM0.roa
File: K1b-cXKMvbC6vPBewZmF8O1suM0.roa (raw, json)
Hash identifier: hPoF6EXYTcHGwbMekwMugY/lq0sV72vQeTGpOMElr7M=
Subject key identifier: 2B:56:FE:71:72:8C:BD:B0:BA:BC:F0:5E:C1:99:85:F0:ED:6C:B8:CD
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 0185EA0808FC980BFF86DD5D0FC00DD12F0E
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/K1b-cXKMvbC6vPBewZmF8O1suM0.roa
Signing time: Wed 25 Jan 2023 17:44:33 +0000
ROA not before: Wed 25 Jan 2023 17:44:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50354
IP address blocks: 89.185.28.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 03 Feb 2023 15:35:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ea:08:08:fc:98:0b:ff:86:dd:5d:0f:c0:0d:d1:2f:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jan 25 17:44:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b56fe71728cbdb0babcf05ec19985f0ed6cb8cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3f:29:d8:83:2c:79:34:59:4c:b1:36:36:65:
7b:b0:b5:72:a2:fa:f7:94:1e:eb:f2:6f:02:53:29:
7e:fe:03:73:64:8b:c4:f8:86:3b:2a:31:c1:41:6e:
02:0a:13:16:56:70:ec:67:0c:de:c6:1b:d9:9b:7e:
be:6d:62:76:82:cd:d4:be:ff:7a:d0:7f:01:f9:12:
32:53:64:8c:02:5b:35:6a:fe:19:96:9e:4c:6b:04:
74:1b:ee:a6:19:cc:c0:19:a9:7f:f2:7a:2a:15:bd:
2d:cb:d8:1b:c8:e9:f6:7c:94:6c:a7:46:a2:04:8c:
16:c7:af:cf:d9:bd:4b:2a:da:c1:84:91:83:5e:89:
16:95:f5:e7:5b:b8:5b:dd:b8:be:0c:44:4e:5a:5c:
bb:28:c5:67:e5:dc:14:ef:a8:af:ed:c1:c8:2f:28:
cf:fe:ee:27:89:42:62:1e:4b:1b:a5:e3:83:73:33:
a0:51:d1:af:6a:bc:1d:62:42:d8:5b:a1:05:e4:ba:
31:3e:d5:3f:e8:f6:76:66:3c:2d:54:3d:2c:94:9d:
44:d0:b8:75:c2:df:eb:5c:06:d3:d1:d4:dd:28:f3:
6a:67:5e:67:31:e4:33:9b:3a:b7:66:09:5a:5e:f9:
1b:10:e7:59:79:e0:d0:c6:51:51:4b:bb:71:ff:31:
a4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:56:FE:71:72:8C:BD:B0:BA:BC:F0:5E:C1:99:85:F0:ED:6C:B8:CD
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/K1b-cXKMvbC6vPBewZmF8O1suM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.28.0/22
Signature Algorithm: sha256WithRSAEncryption
70:96:ef:88:9b:07:4b:c6:51:7b:af:f8:54:27:92:14:ff:ce:
b3:6e:d9:63:9d:ea:74:81:bd:61:14:7b:5b:61:00:b9:39:42:
97:be:fb:34:9a:3f:67:ce:f1:5c:0a:a3:a3:7b:4f:c0:f1:fb:
09:8b:9a:e3:ad:95:1b:f9:ad:b0:05:17:b8:25:4c:fb:f0:29:
53:72:90:68:01:3e:69:88:c6:f6:1f:94:4d:51:d3:67:5e:d4:
e4:cb:1a:3f:30:11:7a:5c:2a:99:36:77:3a:b4:4e:f1:8d:f2:
82:29:26:72:76:f5:0f:aa:46:43:ca:e7:cb:81:78:73:08:6b:
77:84:cd:73:39:8a:9a:6e:2a:40:52:72:27:bb:92:01:10:34:
04:5c:6d:69:91:c7:97:78:8d:50:27:17:ea:34:cf:93:55:2a:
da:9b:54:21:8b:6e:41:a6:65:36:34:40:00:60:e1:23:c5:10:
d6:0b:d2:e8:7c:df:1d:d4:ef:74:77:99:58:62:7d:79:49:dc:
78:12:28:0d:43:cc:bd:d0:dc:50:88:b1:f0:bd:cd:d4:04:c5:
f6:15:40:a4:7b:dd:b4:55:58:34:ad:df:5a:77:b7:18:37:a3:
5a:a5:5f:ae:61:35:7f:68:e8:17:9a:49:13:63:4e:c5:30:a0:
d2:ef:67:8e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYXqCAj8mAv/ht1dD8AN0S8OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk
OGRhYmUwHhcNMjMwMTI1MTc0NDMzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjU2ZmU3MTcyOGNiZGIwYmFiY2YwNWVjMTk5ODVmMGVkNmNiOGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArT8p2IMseTRZTLE2NmV7sLVyovr3
lB7r8m8CUyl+/gNzZIvE+IY7KjHBQW4CChMWVnDsZwzexhvZm36+bWJ2gs3Uvv96
0H8B+RIyU2SMAls1av4Zlp5MawR0G+6mGczAGal/8noqFb0ty9gbyOn2fJRsp0ai
BIwWx6/P2b1LKtrBhJGDXokWlfXnW7hb3bi+DEROWly7KMVn5dwU76iv7cHILyjP
/u4niUJiHksbpeODczOgUdGvarwdYkLYW6EF5LoxPtU/6PZ2ZjwtVD0slJ1E0Lh1
wt/rXAbT0dTdKPNqZ15nMeQzmzq3ZglaXvkbEOdZeeDQxlFRS7tx/zGkVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCtW/nFyjL2wurzwXsGZhfDtbLjNMB8GA1UdIwQY
MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt
ODJhZDE0NTU1ZWFhLzEvSzFiLWNYS012YkM2dlBCZXdabUY4TzFzdU0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh
LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCWbkcMA0G
CSqGSIb3DQEBCwUAA4IBAQBwlu+ImwdLxlF7r/hUJ5IU/86zbtljnep0gb1hFHtb
YQC5OUKXvvs0mj9nzvFcCqOje0/A8fsJi5rjrZUb+a2wBRe4JUz78ClTcpBoAT5p
iMb2H5RNUdNnXtTkyxo/MBF6XCqZNnc6tE7xjfKCKSZydvUPqkZDyufLgXhzCGt3
hM1zOYqabipAUnInu5IBEDQEXG1pkceXeI1QJxfqNM+TVSram1Qhi25BpmU2NEAA
YOEjxRDWC9LofN8d1O90d5lYYn15Sdx4EigNQ8y90NxQiLHwvc3UBMX2FUCke920
VVg0rd9ad7cYN6NapV+uYTV/aOgXmkkTY07FMKDS72eO
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:45 2024 by rpki-client on console-ams.rpki-client.org