Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/e3MytiVDBHTaHy6rKZlGXZM4oVc.roa
File: e3MytiVDBHTaHy6rKZlGXZM4oVc.roa (raw, json)
Hash identifier: C8W7249nQgJ9FroNbnBA+l0lMcPbQ0e5TKXKPOshZQM=
Subject key identifier: 7B:73:32:B6:25:43:04:74:DA:1F:2E:AB:29:99:46:5D:93:38:A1:57
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 0187DDA30CAEECAB2BB504F6ECD38E14233D
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/e3MytiVDBHTaHy6rKZlGXZM4oVc.roa
Signing time: Tue 02 May 2023 18:04:22 +0000
ROA not before: Tue 02 May 2023 18:04:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 89.185.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Sep 2023 15:25:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:dd:a3:0c:ae:ec:ab:2b:b5:04:f6:ec:d3:8e:14:23:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: May 2 18:04:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b7332b625430474da1f2eab2999465d9338a157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6e:25:12:2c:bf:2b:5c:eb:51:74:98:f4:9b:
61:1b:0c:92:f6:98:22:fa:7c:4c:39:e0:b3:b2:b3:
47:f9:c9:6b:3a:db:6e:57:ef:7d:3e:71:03:35:c9:
d1:00:75:3b:58:0f:90:27:03:66:bc:4e:f6:cf:c9:
00:5e:c9:88:9c:68:03:19:11:fa:07:52:d2:86:a6:
6b:97:92:2e:b3:8e:45:00:b6:7c:69:27:ee:2b:61:
ee:c3:bb:f5:e9:9a:00:19:a3:fb:35:1a:97:9f:e8:
ed:27:be:bb:8a:ca:49:9c:6f:bd:d9:b6:26:91:fc:
46:b2:3d:e5:92:61:72:7b:fc:fd:68:73:e1:df:2d:
4b:23:0d:cc:4b:c7:3f:df:70:5e:93:71:fd:ae:6c:
87:d9:38:93:16:22:b7:b5:1e:35:83:6c:87:c9:48:
ba:ad:57:42:0a:fa:18:94:f7:6f:ba:5a:ea:14:88:
65:b2:16:c5:44:5c:fe:02:94:85:32:21:0b:f2:af:
c8:89:85:b7:96:e6:50:44:33:0a:8e:36:54:59:05:
ca:54:e7:4d:1a:76:e9:4a:d9:c0:e9:55:f6:fe:b0:
15:3f:02:18:90:6b:3b:28:68:d0:54:cc:a4:99:c9:
d4:ed:47:ec:3c:09:60:95:fc:26:77:5d:68:6e:7a:
0d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:73:32:B6:25:43:04:74:DA:1F:2E:AB:29:99:46:5D:93:38:A1:57
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/e3MytiVDBHTaHy6rKZlGXZM4oVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.3.0/24
Signature Algorithm: sha256WithRSAEncryption
00:e8:78:ae:a3:3c:13:e6:f2:aa:07:07:b7:fe:20:19:e9:74:
7f:ff:fc:77:c3:62:f6:4a:6c:ec:05:a2:2d:ce:50:e5:a9:5e:
36:a0:09:c8:f0:d2:08:74:6a:bb:9a:3d:7b:ec:dd:d2:08:76:
0f:a5:40:e0:cb:d1:25:f5:a6:66:e4:67:a4:ca:da:ba:96:b2:
2c:51:b4:b6:d6:95:54:5f:d3:6f:38:37:72:dc:57:40:ed:d9:
5a:e1:21:5b:09:17:34:fa:b4:88:06:4b:d7:a6:26:75:f6:43:
77:b6:6d:be:8f:b8:2f:11:92:cf:a5:ad:ea:8c:9c:52:63:ce:
1f:75:53:11:be:cf:96:37:25:89:03:55:a5:8b:e5:64:24:17:
a9:52:a2:a5:2c:45:1a:f3:58:cd:d5:78:14:ad:3e:63:30:0c:
fa:a6:be:a3:1a:cf:1f:68:ee:df:af:1b:80:7b:cc:09:9d:54:
f7:0b:08:19:15:c6:86:33:01:52:91:26:98:a8:b1:90:b8:10:
83:e4:ab:fc:6d:ce:88:04:e9:54:04:d7:33:9d:b6:81:e5:33:
59:1e:c6:8f:21:f7:b1:ce:ba:66:bc:5b:ab:5b:14:c7:c5:7d:
7b:2b:1f:19:2a:e8:b3:ef:d6:bd:08:1a:c8:59:72:32:0c:67:
46:2a:74:c7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYfdowyu7KsrtQT27NOOFCM9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk
OGRhYmUwHhcNMjMwNTAyMTgwNDIyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjczMzJiNjI1NDMwNDc0ZGExZjJlYWIyOTk5NDY1ZDkzMzhhMTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl24lEiy/K1zrUXSY9JthGwyS9pgi
+nxMOeCzsrNH+clrOttuV+99PnEDNcnRAHU7WA+QJwNmvE72z8kAXsmInGgDGRH6
B1LShqZrl5Ius45FALZ8aSfuK2Huw7v16ZoAGaP7NRqXn+jtJ767ispJnG+92bYm
kfxGsj3lkmFye/z9aHPh3y1LIw3MS8c/33Bek3H9rmyH2TiTFiK3tR41g2yHyUi6
rVdCCvoYlPdvulrqFIhlshbFRFz+ApSFMiEL8q/IiYW3luZQRDMKjjZUWQXKVOdN
GnbpStnA6VX2/rAVPwIYkGs7KGjQVMykmcnU7UfsPAlglfwmd11obnoNuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHtzMrYlQwR02h8uqymZRl2TOKFXMB8GA1UdIwQY
MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt
ODJhZDE0NTU1ZWFhLzEvZTNNeXRpVkRCSFRhSHk2cktabEdYWk00b1ZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh
LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWbkDMA0G
CSqGSIb3DQEBCwUAA4IBAQAA6HiuozwT5vKqBwe3/iAZ6XR///x3w2L2SmzsBaIt
zlDlqV42oAnI8NIIdGq7mj177N3SCHYPpUDgy9El9aZm5Gekytq6lrIsUbS21pVU
X9NvODdy3FdA7dla4SFbCRc0+rSIBkvXpiZ19kN3tm2+j7gvEZLPpa3qjJxSY84f
dVMRvs+WNyWJA1Wli+VkJBepUqKlLEUa81jN1XgUrT5jMAz6pr6jGs8faO7frxuA
e8wJnVT3CwgZFcaGMwFSkSaYqLGQuBCD5Kv8bc6IBOlUBNcznbaB5TNZHsaPIfex
zrpmvFurWxTHxX17Kx8ZKuiz79a9CBrIWXIyDGdGKnTH
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:46 2024 by rpki-client on console-ams.rpki-client.org