Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/0sV_FDs5MuQm2K2KuJsSO2W74wQ.roa
File: 0sV_FDs5MuQm2K2KuJsSO2W74wQ.roa (raw, json)
Hash identifier: xR1YNuA2rvqtD6cCYX4UQPTo8ibnCspYdykWvhap7Vw=
Subject key identifier: D2:C5:7F:14:3B:39:32:E4:26:D8:AD:8A:B8:9B:12:3B:65:BB:E3:04
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018D5EF21695D47C28DB22A249B4B3D3EC5E
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/0sV_FDs5MuQm2K2KuJsSO2W74wQ.roa
Signing time: Wed 31 Jan 2024 09:55:40 +0000
ROA not before: Wed 31 Jan 2024 09:55:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 89.251.22.0/24 maxlen: 24
89.251.23.0/24 maxlen: 24
109.122.40.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Feb 2024 21:36:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5e:f2:16:95:d4:7c:28:db:22:a2:49:b4:b3:d3:ec:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 31 09:55:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2c57f143b3932e426d8ad8ab89b123b65bbe304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6f:5c:eb:4d:b3:cb:15:bf:36:56:91:5d:09:
0b:5d:b5:49:67:61:e5:bc:73:86:40:48:c6:0e:d3:
1a:02:fb:10:da:31:0f:53:93:59:30:93:c8:d2:ca:
15:3a:a8:76:b4:8d:c4:d7:8e:34:c1:1c:90:94:88:
10:63:09:a3:05:8b:ab:69:aa:7f:86:46:b1:45:97:
db:f6:0c:ff:85:f8:6e:ca:56:44:d2:cd:9c:8c:84:
38:b2:95:e3:32:de:43:75:60:73:f1:8f:16:3f:5e:
40:8d:2e:18:fa:74:ff:ae:15:a4:77:91:9f:4f:c5:
32:ae:3f:df:4a:25:2f:c4:16:81:fd:ec:cd:cc:a4:
4f:5a:d9:62:6e:cc:41:d2:49:d8:36:4d:9f:22:bb:
4f:43:eb:8c:1f:1a:20:fd:ee:48:22:85:fb:93:47:
c7:14:4f:f0:3f:2d:7d:e5:90:5b:9d:44:89:ce:a9:
42:50:5f:f7:c5:5a:45:7b:d5:75:82:dc:ec:3f:7b:
18:fc:bd:82:e4:ff:4a:ae:ef:c5:af:c7:10:5b:6a:
af:e7:14:1b:90:e3:d3:73:92:1b:70:95:33:07:2a:
28:0c:9f:01:e7:ec:c6:4e:73:74:6f:9b:3d:91:1c:
45:30:d1:91:c2:51:bd:0a:a1:e4:ba:73:94:a6:80:
e2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C5:7F:14:3B:39:32:E4:26:D8:AD:8A:B8:9B:12:3B:65:BB:E3:04
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/0sV_FDs5MuQm2K2KuJsSO2W74wQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.22.0/23
109.122.40.0/24
Signature Algorithm: sha256WithRSAEncryption
86:3d:83:75:17:c9:c6:25:be:38:6a:83:24:d4:3f:4c:6d:ee:
ac:b3:bb:50:fe:b1:f9:23:9b:03:38:26:bc:0d:01:ce:4a:ea:
ff:ed:21:a7:90:c2:69:97:53:78:9a:ca:92:15:75:39:2e:bd:
cb:33:2e:f2:99:b2:38:ac:65:33:81:87:45:a8:ae:c3:f8:a7:
a1:d7:01:93:45:51:29:60:ba:ce:49:8b:89:0b:34:54:51:89:
d4:10:26:78:ab:a2:19:ab:35:cf:92:a1:62:83:0c:2b:5d:5f:
d6:52:5c:9a:d3:a8:8c:28:48:d0:75:bb:a8:d8:c1:f6:df:69:
76:e1:71:41:52:27:d9:7d:a3:f9:0e:eb:5b:e5:7d:37:fc:c2:
20:cc:c5:a7:af:a0:f8:1f:bd:87:be:58:9d:aa:9d:0f:fa:51:
80:2d:ce:cf:33:01:c8:56:cd:f1:ae:59:25:75:01:b0:b1:56:
6d:bb:3f:c5:c5:39:cd:bd:e4:bf:9f:76:94:fc:f5:64:d8:4e:
eb:ea:ea:fb:76:77:1b:7a:fc:85:69:67:75:78:2f:86:7a:00:
63:c0:14:11:51:95:60:d2:c1:ac:9f:2d:6b:d4:60:f7:b5:d6:
a8:b3:3c:a0:4e:17:45:c4:ee:a1:b9:1b:fb:fe:e2:bb:de:44:
01:ee:33:84
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY1e8haV1Hwo2yKiSbSz0+xeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjQwMTMxMDk1NTQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMmM1N2YxNDNiMzkzMmU0MjZkOGFkOGFiODliMTIzYjY1YmJlMzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk29c602zyxW/NlaRXQkLXbVJZ2Hl
vHOGQEjGDtMaAvsQ2jEPU5NZMJPI0soVOqh2tI3E1440wRyQlIgQYwmjBYuraap/
hkaxRZfb9gz/hfhuylZE0s2cjIQ4spXjMt5DdWBz8Y8WP15AjS4Y+nT/rhWkd5Gf
T8Uyrj/fSiUvxBaB/ezNzKRPWtlibsxB0knYNk2fIrtPQ+uMHxog/e5IIoX7k0fH
FE/wPy195ZBbnUSJzqlCUF/3xVpFe9V1gtzsP3sY/L2C5P9Kru/Fr8cQW2qv5xQb
kOPTc5IbcJUzByooDJ8B5+zGTnN0b5s9kRxFMNGRwlG9CqHkunOUpoDi6wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNLFfxQ7OTLkJtitiribEjtlu+MEMB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvMHNWX0ZEczVNdVFtMksyS3VKc1NPMlc3NHdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBWfsWAwQA
bXooMA0GCSqGSIb3DQEBCwUAA4IBAQCGPYN1F8nGJb44aoMk1D9Mbe6ss7tQ/rH5
I5sDOCa8DQHOSur/7SGnkMJpl1N4msqSFXU5Lr3LMy7ymbI4rGUzgYdFqK7D+Keh
1wGTRVEpYLrOSYuJCzRUUYnUECZ4q6IZqzXPkqFigwwrXV/WUlya06iMKEjQdbuo
2MH232l24XFBUifZfaP5Dutb5X03/MIgzMWnr6D4H72Hvlidqp0P+lGALc7PMwHI
Vs3xrlkldQGwsVZtuz/FxTnNveS/n3aU/PVk2E7r6ur7dncbevyFaWd1eC+GegBj
wBQRUZVg0sGsny1r1GD3tdaoszygThdFxO6huRv7/uK73kQB7jOE
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:05 2024 by rpki-client on console-ams.rpki-client.org