Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/S6CZKkZ_sDEDGIdFRm80jVoe-L8.roa
File: S6CZKkZ_sDEDGIdFRm80jVoe-L8.roa (raw, json)
Hash identifier: t+0xmikVTJdehZ1LQLumxGtbX6PawFdYDHJbg2OP6Pc=
Subject key identifier: 4B:A0:99:2A:46:7F:B0:31:03:18:87:45:46:6F:34:8D:5A:1E:F8:BF
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 0188F79993F2D968AB7EEF319E55BA8691AC
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/S6CZKkZ_sDEDGIdFRm80jVoe-L8.roa
Signing time: Mon 26 Jun 2023 12:06:57 +0000
ROA not before: Mon 26 Jun 2023 12:06:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.185.24.0/22 maxlen: 24
109.72.116.0/22 maxlen: 24
89.185.0.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 29 Jun 2023 18:10:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f7:99:93:f2:d9:68:ab:7e:ef:31:9e:55:ba:86:91:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jun 26 12:06:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ba0992a467fb03103188745466f348d5a1ef8bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:05:b9:c4:04:39:61:51:36:cd:2d:f3:c6:4d:
58:7f:74:36:ae:b5:52:c0:a4:2a:62:6d:07:34:be:
40:fa:7b:41:5a:13:52:c5:ab:f3:3a:f9:25:bf:9b:
47:3b:e6:73:38:57:59:2f:05:2b:82:ab:3d:50:bc:
ea:4a:c6:77:d7:1b:33:6b:45:91:03:55:c6:c6:be:
f0:e5:06:15:71:4e:fb:d1:6b:98:4f:76:cc:ce:ed:
b9:f7:a6:4c:51:3b:90:24:3a:cd:75:f6:c2:ff:b4:
dd:a4:fb:ba:d7:f4:4c:54:4e:3f:f8:a9:71:56:91:
0a:e8:48:c6:85:78:06:8f:fc:fc:fe:ff:7e:e2:52:
a2:57:e3:38:55:98:aa:10:3e:13:62:2b:4b:65:95:
e5:af:23:40:a3:f3:d6:29:55:79:42:54:fd:32:dc:
59:cd:94:ee:f3:29:e3:93:9c:c1:05:d0:c1:0a:7a:
60:44:cb:bd:fc:ed:a0:05:17:e2:79:c5:2b:52:1a:
1a:a7:29:6e:9c:41:bf:64:49:37:c0:51:b4:5c:e8:
10:07:36:b8:69:83:db:e0:de:13:61:f0:08:c4:be:
7e:4c:9c:cf:c4:cf:0d:6e:da:2c:d6:47:81:c9:b3:
f3:cc:b5:9c:f6:80:bc:81:aa:05:dd:7b:bc:65:ab:
ab:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A0:99:2A:46:7F:B0:31:03:18:87:45:46:6F:34:8D:5A:1E:F8:BF
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/S6CZKkZ_sDEDGIdFRm80jVoe-L8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.0.0/22
89.185.24.0/22
109.72.116.0/22
Signature Algorithm: sha256WithRSAEncryption
36:f2:b1:53:c8:5c:a3:75:2d:25:86:a7:0b:d7:53:2e:09:a1:
ad:c8:29:6d:a3:28:5e:af:dc:52:d5:ac:7e:0b:83:78:2e:58:
41:82:b7:a6:6d:ba:16:2a:f5:75:08:ce:ed:1b:c6:fb:f7:a6:
fd:80:21:0b:93:11:ee:73:28:7a:06:10:25:fa:08:b2:63:99:
60:7a:46:5d:96:1e:cf:4b:1e:76:71:ad:ef:7a:c8:3a:a4:ae:
1b:62:6f:14:ea:bc:0b:30:dd:6a:d6:a5:3b:d1:ab:e3:27:4b:
51:b3:10:d4:28:e5:09:35:42:c1:0d:60:94:e9:01:4e:dc:52:
6f:48:c9:0a:e4:a3:e1:49:a8:83:5b:d7:56:54:53:0f:12:4c:
23:48:11:f5:e6:56:ec:81:5d:d4:e5:16:a6:8c:e2:73:36:ad:
4f:07:b3:5c:5e:5a:6b:0b:1c:9b:41:33:4a:17:8a:aa:ff:00:
66:af:70:94:62:2c:e4:27:e9:85:25:23:f8:16:91:4d:ab:14:
01:74:b6:96:cf:dc:92:4a:5d:62:12:69:5e:3e:f9:78:5a:d3:
93:08:76:f4:f8:85:c1:4a:4d:eb:c0:01:33:2c:8d:db:a0:cb:
d6:12:d8:cb:19:19:3c:56:4b:7c:6c:78:4a:a0:87:b0:a5:34:
9f:a6:e8:f9
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYj3mZPy2Wirfu8xnlW6hpGsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk
OGRhYmUwHhcNMjMwNjI2MTIwNjU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YmEwOTkyYTQ2N2ZiMDMxMDMxODg3NDU0NjZmMzQ4ZDVhMWVmOGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAW5xAQ5YVE2zS3zxk1Yf3Q2rrVS
wKQqYm0HNL5A+ntBWhNSxavzOvklv5tHO+ZzOFdZLwUrgqs9ULzqSsZ31xsza0WR
A1XGxr7w5QYVcU770WuYT3bMzu2596ZMUTuQJDrNdfbC/7TdpPu61/RMVE4/+Klx
VpEK6EjGhXgGj/z8/v9+4lKiV+M4VZiqED4TYitLZZXlryNAo/PWKVV5QlT9MtxZ
zZTu8ynjk5zBBdDBCnpgRMu9/O2gBRfiecUrUhoapylunEG/ZEk3wFG0XOgQBza4
aYPb4N4TYfAIxL5+TJzPxM8Nbtos1keBybPzzLWc9oC8gaoF3Xu8ZaurHQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFEugmSpGf7AxAxiHRUZvNI1aHvi/MB8GA1UdIwQY
MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt
ODJhZDE0NTU1ZWFhLzEvUzZDWktrWl9zREVER0lkRlJtODBqVm9lLUw4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh
LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCWbkAAwQC
WbkYAwQCbUh0MA0GCSqGSIb3DQEBCwUAA4IBAQA28rFTyFyjdS0lhqcL11MuCaGt
yCltoyher9xS1ax+C4N4LlhBgrembboWKvV1CM7tG8b796b9gCELkxHucyh6BhAl
+giyY5lgekZdlh7PSx52ca3vesg6pK4bYm8U6rwLMN1q1qU70avjJ0tRsxDUKOUJ
NULBDWCU6QFO3FJvSMkK5KPhSaiDW9dWVFMPEkwjSBH15lbsgV3U5RamjOJzNq1P
B7NcXlprCxybQTNKF4qq/wBmr3CUYizkJ+mFJSP4FpFNqxQBdLaWz9ySSl1iEmle
Pvl4WtOTCHb0+IXBSk3rwAEzLI3boMvWEtjLGRk8Vkt8bHhKoIewpTSfpuj5
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:46 2024 by rpki-client on console-ams.rpki-client.org