Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/K6j8Vcasuh3lh6x-hEV7QIW0ul8.roa
File: K6j8Vcasuh3lh6x-hEV7QIW0ul8.roa (raw, json)
Hash identifier: RKvN/qRYak7PPS45Qtw0B+eWSkbrHf2NSc6XaqNps9U=
Subject key identifier: 2B:A8:FC:55:C6:AC:BA:1D:E5:87:AC:7E:84:45:7B:40:85:B4:BA:5F
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018B48AE2C634601784E6E4D9EC11D17F59A
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/K6j8Vcasuh3lh6x-hEV7QIW0ul8.roa
Signing time: Thu 19 Oct 2023 16:04:15 +0000
ROA not before: Thu 19 Oct 2023 16:04:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.185.24.0/22 maxlen: 24
109.72.116.0/22 maxlen: 24
109.72.118.0/24 maxlen: 24
89.185.0.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 20 Oct 2023 08:40:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:48:ae:2c:63:46:01:78:4e:6e:4d:9e:c1:1d:17:f5:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Oct 19 16:04:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ba8fc55c6acba1de587ac7e84457b4085b4ba5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:93:c5:42:ca:06:d6:c6:d8:fc:a7:38:73:c1:
9c:1c:78:f0:d7:70:7c:6a:ce:15:17:47:ed:2f:5c:
e4:97:c6:88:4a:5b:9a:c0:7a:75:d6:c1:5c:8f:de:
68:84:c7:99:73:39:ad:c9:1e:9e:63:ba:ca:ff:de:
40:e5:56:df:a9:e7:51:7b:00:8e:80:43:aa:2f:48:
92:1b:18:d6:dc:2d:59:08:1f:b3:cd:b7:5c:97:bd:
f8:ce:2d:27:25:bc:3a:12:c3:e8:92:bc:a4:cb:2a:
af:dd:4c:10:61:f7:16:f7:24:4a:71:f5:96:e5:c2:
75:66:67:ca:a4:37:c4:d2:81:e4:87:89:4c:8b:0e:
a5:e9:00:da:08:f8:ad:aa:5b:e9:7c:52:12:08:26:
45:50:62:4e:41:a9:5f:cc:e4:f3:9c:ed:b6:fd:6e:
6e:6f:bd:e8:1c:8b:1f:93:6d:ae:c6:e1:58:bf:a8:
61:4e:d1:12:21:b8:24:f6:21:d5:46:de:9b:a8:aa:
79:07:0f:a4:f6:52:9d:bb:cb:a5:7a:0b:1b:10:3b:
ed:1e:17:d0:ed:fb:4e:f1:69:2a:1b:6c:7d:e8:93:
ec:67:9b:07:58:48:ad:47:bb:46:e7:e2:d0:2c:6c:
3f:58:14:b9:a1:72:65:32:26:f0:7a:db:12:45:34:
a1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A8:FC:55:C6:AC:BA:1D:E5:87:AC:7E:84:45:7B:40:85:B4:BA:5F
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/K6j8Vcasuh3lh6x-hEV7QIW0ul8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.0.0/22
89.185.24.0/22
109.72.116.0/22
Signature Algorithm: sha256WithRSAEncryption
55:a6:a8:fd:c5:a6:8b:d9:0d:6e:ac:c0:95:72:cd:68:bc:76:
5b:73:0f:2b:5d:b4:bc:ca:df:63:79:68:87:e5:21:2e:9f:33:
31:43:b2:6d:9e:a1:ed:0b:bf:71:3f:4b:68:4f:4b:2e:36:6c:
05:4c:5a:e5:18:27:24:7b:a1:3e:f7:57:d7:75:69:80:51:26:
96:80:59:5d:e1:b5:07:eb:cb:1a:b9:06:d0:03:d2:1d:0a:95:
3a:34:2a:89:a6:6d:93:2f:2c:44:4e:ce:38:1d:78:b5:36:1d:
4d:12:be:e4:97:5b:4f:3e:6d:45:1c:4d:af:e3:20:9c:46:52:
03:54:bf:3d:b2:3c:16:af:e5:e6:e5:af:8a:ca:4c:f3:30:70:
00:1b:71:19:d0:79:b0:73:b8:73:5e:10:47:9a:74:fd:42:e2:
d9:bc:c1:6c:3a:c5:6e:29:e5:de:36:bb:2a:f8:a7:2f:9e:9d:
75:84:65:15:b8:b8:78:f3:17:c7:7e:58:b7:b0:8b:3e:9d:57:
0c:ae:62:4a:23:12:b5:c9:08:c3:91:aa:de:81:7f:27:c8:f7:
6e:9e:3e:16:9d:91:4d:b5:95:05:d7:f4:a6:ff:3e:9d:2b:1c:
4e:b5:10:26:fb:c2:b6:49:3c:74:a1:d3:aa:1c:c4:22:da:71:
8f:b2:80:c7
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYtIrixjRgF4Tm5NnsEdF/WaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk
OGRhYmUwHhcNMjMxMDE5MTYwNDE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYmE4ZmM1NWM2YWNiYTFkZTU4N2FjN2U4NDQ1N2I0MDg1YjRiYTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZPFQsoG1sbY/Kc4c8GcHHjw13B8
as4VF0ftL1zkl8aISluawHp11sFcj95ohMeZczmtyR6eY7rK/95A5VbfqedRewCO
gEOqL0iSGxjW3C1ZCB+zzbdcl734zi0nJbw6EsPokrykyyqv3UwQYfcW9yRKcfWW
5cJ1ZmfKpDfE0oHkh4lMiw6l6QDaCPitqlvpfFISCCZFUGJOQalfzOTznO22/W5u
b73oHIsfk22uxuFYv6hhTtESIbgk9iHVRt6bqKp5Bw+k9lKdu8ulegsbEDvtHhfQ
7ftO8WkqG2x96JPsZ5sHWEitR7tG5+LQLGw/WBS5oXJlMibwetsSRTShLwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCuo/FXGrLod5YesfoRFe0CFtLpfMB8GA1UdIwQY
MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt
ODJhZDE0NTU1ZWFhLzEvSzZqOFZjYXN1aDNsaDZ4LWhFVjdRSVcwdWw4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh
LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCWbkAAwQC
WbkYAwQCbUh0MA0GCSqGSIb3DQEBCwUAA4IBAQBVpqj9xaaL2Q1urMCVcs1ovHZb
cw8rXbS8yt9jeWiH5SEunzMxQ7JtnqHtC79xP0toT0suNmwFTFrlGCcke6E+91fX
dWmAUSaWgFld4bUH68sauQbQA9IdCpU6NCqJpm2TLyxETs44HXi1Nh1NEr7kl1tP
Pm1FHE2v4yCcRlIDVL89sjwWr+Xm5a+KykzzMHAAG3EZ0Hmwc7hzXhBHmnT9QuLZ
vMFsOsVuKeXeNrsq+Kcvnp11hGUVuLh48xfHfli3sIs+nVcMrmJKIxK1yQjDkare
gX8nyPdunj4WnZFNtZUF1/Sm/z6dKxxOtRAm+8K2STx0odOqHMQi2nGPsoDH
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:45 2024 by rpki-client on console-ams.rpki-client.org