Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/j6pIFYZ2sXWwY4XM-3XJsfTBEZ0.roa
File: j6pIFYZ2sXWwY4XM-3XJsfTBEZ0.roa (raw, json)
Hash identifier: e7o+tPpy+hhn6dJm/1leJNh9QqsgcHvFxpDCKLXV9HY=
Subject key identifier: 8F:AA:48:15:86:76:B1:75:B0:63:85:CC:FB:75:C9:B1:F4:C1:11:9D
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 01888A787C174521C100AF842964F77E449B
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/j6pIFYZ2sXWwY4XM-3XJsfTBEZ0.roa
Signing time: Mon 05 Jun 2023 07:32:11 +0000
ROA not before: Mon 05 Jun 2023 07:32:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.185.0.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 10 Jun 2023 09:29:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8a:78:7c:17:45:21:c1:00:af:84:29:64:f7:7e:44:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jun 5 07:32:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8faa48158676b175b06385ccfb75c9b1f4c1119d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a4:b7:c8:4c:61:d7:c0:e1:42:74:86:e9:5a:
dd:e2:5c:2a:e7:3f:98:97:94:48:aa:c9:6f:cf:0a:
0d:84:47:67:d7:28:ed:ef:6f:f9:94:16:27:e4:2c:
2c:4c:fd:bf:08:eb:17:45:8b:28:5d:d1:cb:5d:58:
3a:6f:9c:0f:25:05:15:ba:60:c6:84:52:57:6e:cb:
ac:0b:e0:6f:91:0d:e6:35:f0:dc:d3:55:4b:8f:3f:
fd:26:1c:26:56:bf:a7:d6:6c:6b:80:56:6f:f9:6d:
bf:d3:14:cb:c8:4a:0a:6b:69:4a:ca:cd:cc:d2:3d:
0f:36:95:11:16:36:cf:eb:f1:e4:aa:ae:e6:2b:46:
35:f3:09:e8:24:17:e9:62:a8:d7:86:72:ae:36:30:
62:8d:94:dd:74:5a:0b:5a:db:31:bb:f9:aa:2c:a2:
1f:99:61:cb:58:ba:c8:d7:a6:13:39:75:a7:71:6b:
82:c1:e7:79:25:05:ca:46:c5:af:00:13:bb:71:e2:
c1:7a:37:1a:14:97:fb:dc:90:2e:ed:a0:d9:79:76:
b8:f5:5b:d8:49:c0:0d:e6:f4:d2:d8:c9:69:2f:6c:
82:a7:f5:e3:98:0e:4b:8a:96:d6:8e:5f:a9:73:0f:
be:43:b2:f0:73:6d:3a:fb:78:78:b4:52:a4:9c:b8:
f8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AA:48:15:86:76:B1:75:B0:63:85:CC:FB:75:C9:B1:F4:C1:11:9D
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/j6pIFYZ2sXWwY4XM-3XJsfTBEZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.0.0/22
Signature Algorithm: sha256WithRSAEncryption
52:0f:31:0d:e7:a0:8b:21:39:c7:e8:2a:60:79:69:de:2f:5f:
9a:b7:0f:1c:3c:21:a6:80:81:2b:a5:99:1a:53:9a:e5:80:d6:
7d:db:49:36:01:46:b2:04:f4:28:81:a8:d6:5a:59:c2:00:31:
cf:a2:f3:14:81:62:09:cb:4a:73:56:eb:bc:ac:76:73:fd:c6:
18:42:9f:c6:83:5f:cc:ec:4c:37:66:4e:a6:95:1d:ad:b6:26:
b1:82:95:d6:41:2b:d4:63:8d:8a:af:ce:69:d7:6e:60:4d:fc:
67:5c:64:15:83:e8:ec:46:fa:56:43:6b:c8:b5:ea:59:9f:ce:
15:09:6a:80:9f:e0:f6:7e:63:21:da:2c:65:64:74:ff:3e:36:
36:b8:4d:7c:98:43:bd:0a:3c:2d:ac:ea:62:63:14:96:c2:89:
f6:51:70:63:14:c7:56:44:b5:10:7e:4d:21:38:23:b5:f0:ab:
71:f9:fd:87:4f:63:7d:72:cf:7c:d8:57:bb:9c:bf:0b:cb:7d:
cd:7e:9b:29:1b:9e:ff:e6:25:ce:1c:40:36:c2:a8:4d:fa:50:
68:e5:97:ce:ed:b2:c3:10:e8:84:8b:0f:1f:f6:bc:4b:6c:0f:
c0:73:3f:ae:f3:d8:d7:08:35:b0:bd:62:0e:4a:9e:1f:32:c5:
1e:80:30:d4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYiKeHwXRSHBAK+EKWT3fkSbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk
OGRhYmUwHhcNMjMwNjA1MDczMjExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZmFhNDgxNTg2NzZiMTc1YjA2Mzg1Y2NmYjc1YzliMWY0YzExMTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqS3yExh18DhQnSG6Vrd4lwq5z+Y
l5RIqslvzwoNhEdn1yjt72/5lBYn5CwsTP2/COsXRYsoXdHLXVg6b5wPJQUVumDG
hFJXbsusC+BvkQ3mNfDc01VLjz/9JhwmVr+n1mxrgFZv+W2/0xTLyEoKa2lKys3M
0j0PNpURFjbP6/Hkqq7mK0Y18wnoJBfpYqjXhnKuNjBijZTddFoLWtsxu/mqLKIf
mWHLWLrI16YTOXWncWuCwed5JQXKRsWvABO7ceLBejcaFJf73JAu7aDZeXa49VvY
ScAN5vTS2MlpL2yCp/XjmA5LipbWjl+pcw++Q7Lwc206+3h4tFKknLj4/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI+qSBWGdrF1sGOFzPt1ybH0wRGdMB8GA1UdIwQY
MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt
ODJhZDE0NTU1ZWFhLzEvajZwSUZZWjJzWFd3WTRYTS0zWEpzZlRCRVowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh
LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCWbkAMA0G
CSqGSIb3DQEBCwUAA4IBAQBSDzEN56CLITnH6CpgeWneL1+atw8cPCGmgIErpZka
U5rlgNZ920k2AUayBPQogajWWlnCADHPovMUgWIJy0pzVuu8rHZz/cYYQp/Gg1/M
7Ew3Zk6mlR2ttiaxgpXWQSvUY42Kr85p125gTfxnXGQVg+jsRvpWQ2vItepZn84V
CWqAn+D2fmMh2ixlZHT/PjY2uE18mEO9CjwtrOpiYxSWwon2UXBjFMdWRLUQfk0h
OCO18Ktx+f2HT2N9cs982Fe7nL8Ly33NfpspG57/5iXOHEA2wqhN+lBo5ZfO7bLD
EOiEiw8f9rxLbA/Acz+u89jXCDWwvWIOSp4fMsUegDDU
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:46 2024 by rpki-client on console-ams.rpki-client.org