Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/hp8Vn2JdjMepa2vescIamfFeKjE.roa
File: hp8Vn2JdjMepa2vescIamfFeKjE.roa (raw, json)
Hash identifier: OOQYOuIBgugyBxxUCaKuivq3jVLF9wUoYGZA14T7vF8=
Subject key identifier: 86:9F:15:9F:62:5D:8C:C7:A9:6B:6B:DE:B1:C2:1A:99:F1:5E:2A:31
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 01882F4D9A8EF00397848CD02CA43CC8948B
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/hp8Vn2JdjMepa2vescIamfFeKjE.roa
Signing time: Thu 18 May 2023 14:39:54 +0000
ROA not before: Thu 18 May 2023 14:39:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200385
IP address blocks: 89.185.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 04 Jun 2023 22:10:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2f:4d:9a:8e:f0:03:97:84:8c:d0:2c:a4:3c:c8:94:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: May 18 14:39:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=869f159f625d8cc7a96b6bdeb1c21a99f15e2a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:93:ba:9f:c9:c6:d3:1a:7e:2a:56:27:6f:9e:
c0:b5:ff:7a:dd:62:9b:7b:88:19:23:2a:cf:15:3d:
4e:a3:b1:4e:d2:df:00:7f:72:f0:41:bd:4e:8c:e0:
d4:98:11:2a:b0:9c:50:5c:84:eb:4e:a3:f3:6a:40:
c7:ad:a3:ba:9e:97:16:44:e8:c9:6d:d8:e0:a6:28:
c5:f1:f1:3d:b2:16:98:d4:24:6b:8b:8e:98:ac:bd:
e4:03:4d:19:50:c2:7b:46:93:33:bb:7b:06:a0:c3:
94:23:4e:24:3d:88:80:ae:49:a5:d2:ab:5d:fe:55:
21:c9:d4:bc:9f:23:1e:5c:e1:d1:a4:e9:f4:04:98:
f8:54:16:3d:60:fd:ca:e9:32:89:e5:22:d1:98:72:
6e:8f:32:8f:9e:df:5b:63:0d:73:8c:99:71:ea:a8:
40:9a:89:3e:bd:3c:73:e5:8e:d3:cd:b4:46:bb:91:
78:89:85:20:51:5e:5f:82:f9:8a:a9:e1:06:a9:1a:
ae:30:15:aa:bb:e5:c0:14:96:0e:f3:1f:10:e6:59:
04:23:c2:ba:83:99:c7:2c:ef:44:d0:fa:f6:97:e1:
a2:9a:f3:ac:3b:9d:4c:d8:8f:85:c0:a6:20:61:3c:
ff:03:64:5c:a8:f8:ec:f0:a9:39:5d:77:2c:29:fe:
9e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:9F:15:9F:62:5D:8C:C7:A9:6B:6B:DE:B1:C2:1A:99:F1:5E:2A:31
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/hp8Vn2JdjMepa2vescIamfFeKjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.1.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:c3:07:c8:55:99:7c:e6:b9:87:63:d6:51:29:6d:89:69:a5:
04:07:9e:e7:c7:29:be:1c:be:ab:5d:1d:2c:dc:78:a0:1e:d0:
a7:50:86:88:d5:dd:55:1e:74:2e:39:4c:4a:d9:a7:49:3a:af:
91:84:d9:4c:48:1d:d2:97:51:f7:0a:13:97:84:50:0d:4b:b5:
bc:02:0b:fd:3a:d0:38:7c:45:8b:35:5e:8a:00:96:05:97:71:
a5:23:d5:d9:13:10:fb:a8:fe:89:7a:41:ca:6d:24:89:df:78:
5c:17:9e:2f:fb:82:d4:22:7c:4e:ce:37:9e:b1:ee:42:be:4b:
a6:89:ca:f6:34:a7:db:c6:ad:f7:14:17:cb:5c:0c:98:07:45:
e5:16:93:a1:7e:69:ef:e0:77:5d:20:69:14:80:a9:3e:0c:59:
e9:0d:de:36:af:bf:4f:37:a5:23:ff:12:3f:4e:55:c6:15:da:
53:55:a8:59:40:1d:31:3a:e7:54:51:b4:0a:27:ae:2c:f4:79:
2a:be:97:81:33:e7:40:ca:a1:e1:ca:3d:60:aa:14:74:8a:d1:
01:e7:2a:0f:ba:62:fb:6d:bf:ba:eb:8a:1f:59:1f:a9:16:fb:
32:52:bc:63:6a:6e:0d:55:51:3c:7e:de:88:99:8f:db:04:87:
f3:d0:00:66
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgvTZqO8AOXhIzQLKQ8yJSLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk
OGRhYmUwHhcNMjMwNTE4MTQzOTU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NjlmMTU5ZjYyNWQ4Y2M3YTk2YjZiZGViMWMyMWE5OWYxNWUyYTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5O6n8nG0xp+KlYnb57Atf963WKb
e4gZIyrPFT1Oo7FO0t8Af3LwQb1OjODUmBEqsJxQXITrTqPzakDHraO6npcWROjJ
bdjgpijF8fE9shaY1CRri46YrL3kA00ZUMJ7RpMzu3sGoMOUI04kPYiArkml0qtd
/lUhydS8nyMeXOHRpOn0BJj4VBY9YP3K6TKJ5SLRmHJujzKPnt9bYw1zjJlx6qhA
mok+vTxz5Y7TzbRGu5F4iYUgUV5fgvmKqeEGqRquMBWqu+XAFJYO8x8Q5lkEI8K6
g5nHLO9E0Pr2l+GimvOsO51M2I+FwKYgYTz/A2RcqPjs8Kk5XXcsKf6eiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIafFZ9iXYzHqWtr3rHCGpnxXioxMB8GA1UdIwQY
MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt
ODJhZDE0NTU1ZWFhLzEvaHA4Vm4ySmRqTWVwYTJ2ZXNjSWFtZkZlS2pFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh
LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWbkBMA0G
CSqGSIb3DQEBCwUAA4IBAQB7wwfIVZl85rmHY9ZRKW2JaaUEB57nxym+HL6rXR0s
3HigHtCnUIaI1d1VHnQuOUxK2adJOq+RhNlMSB3Sl1H3ChOXhFANS7W8Agv9OtA4
fEWLNV6KAJYFl3GlI9XZExD7qP6JekHKbSSJ33hcF54v+4LUInxOzjeese5Cvkum
icr2NKfbxq33FBfLXAyYB0XlFpOhfmnv4HddIGkUgKk+DFnpDd42r79PN6Uj/xI/
TlXGFdpTVahZQB0xOudUUbQKJ64s9HkqvpeBM+dAyqHhyj1gqhR0itEB5yoPumL7
bb+664ofWR+pFvsyUrxjam4NVVE8ft6ImY/bBIfz0ABm
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org