Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/8aeEvUyqLED-Kuz55mODI143Y_E.roa
File: 8aeEvUyqLED-Kuz55mODI143Y_E.roa (raw, json)
Hash identifier: FDgB1sf9/v/MqPqBhHziNT0NYrZF6qW7jy/uZDVplFE=
Subject key identifier: F1:A7:84:BD:4C:AA:2C:40:FE:2A:EC:F9:E6:63:83:23:5E:37:63:F1
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0188C3F2B98DBE5513019F2DF0DCADE7A209
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/8aeEvUyqLED-Kuz55mODI143Y_E.roa
Signing time: Fri 16 Jun 2023 11:24:04 +0000
ROA not before: Fri 16 Jun 2023 11:24:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 89.251.24.0/24 maxlen: 24
89.251.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Jun 2023 21:09:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c3:f2:b9:8d:be:55:13:01:9f:2d:f0:dc:ad:e7:a2:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jun 16 11:24:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1a784bd4caa2c40fe2aecf9e66383235e3763f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:85:e5:69:21:77:d6:31:b0:28:8b:e7:ac:db:
79:87:e6:2c:f3:00:ab:82:f3:82:98:f2:d0:2e:18:
00:60:e6:f8:26:2f:b6:70:dd:69:f4:86:a2:88:ee:
e7:c7:89:67:c2:13:a0:8a:12:d9:c8:b6:62:18:93:
43:7d:40:73:f1:d9:22:fd:b6:f9:d5:54:17:f3:15:
28:4a:85:d4:83:37:0a:1e:a8:19:4c:84:2f:c4:69:
df:31:c9:7b:e3:39:87:35:96:b1:08:20:4f:9a:d6:
7c:03:3f:a7:d7:3b:9d:e2:74:2f:f8:67:bd:d4:5c:
f7:a8:93:2e:c7:e8:60:81:bd:72:2e:38:42:3b:47:
32:a8:f7:62:55:e7:a7:60:54:a5:75:c3:97:00:76:
9c:44:5c:c4:08:d2:df:1b:44:ea:88:cf:b4:f6:15:
f7:21:05:ac:d0:3c:af:2d:dc:dc:8d:ce:9e:1e:04:
82:3f:8d:47:7e:9f:53:0a:7d:c5:24:ca:3b:56:e2:
b7:ad:12:b2:30:7e:de:7c:5b:11:e4:ef:39:62:c3:
1d:97:e6:a7:96:9d:eb:9a:b0:52:2d:26:f6:f3:8c:
65:59:a9:d5:6b:f3:a7:92:35:b2:43:43:2a:b4:a4:
eb:91:53:77:85:d9:ce:9d:9a:19:95:17:00:f4:84:
9d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A7:84:BD:4C:AA:2C:40:FE:2A:EC:F9:E6:63:83:23:5E:37:63:F1
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/8aeEvUyqLED-Kuz55mODI143Y_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.24.0/24
89.251.27.0/24
Signature Algorithm: sha256WithRSAEncryption
33:9b:b6:ac:1b:fd:42:0e:22:03:d2:c5:51:57:cc:6e:09:2a:
16:51:03:98:7c:3d:91:9b:a7:d8:87:55:a1:0c:17:8f:3a:a4:
da:a4:a8:54:76:d2:fc:2e:6c:d1:ad:13:df:f5:64:46:af:68:
17:68:24:35:79:c7:27:68:1a:8e:43:f1:e0:37:9b:12:1a:d9:
a5:8f:e3:30:43:1d:80:6f:db:d0:9b:8e:b5:8a:1d:f5:d4:15:
30:b6:34:47:fd:34:30:19:9e:19:e8:70:01:d3:1c:85:4a:5d:
26:b8:74:11:4a:5b:b5:a5:03:60:35:91:00:7c:59:cf:d4:93:
1d:e5:66:a9:f8:0d:9f:fe:f9:be:ae:7e:f1:e1:86:46:a3:61:
7d:56:8c:d7:bb:72:ea:da:38:3f:97:76:22:05:71:c2:cb:7f:
b7:ab:0a:da:75:be:50:5f:31:45:44:09:fe:f9:31:34:b2:cf:
d1:5a:23:0f:a7:16:ac:0b:e0:0d:62:9c:de:0d:42:3f:d6:78:
e6:25:6a:85:3f:f7:3d:a2:e9:bb:7e:51:8a:15:89:3b:4a:dc:
54:f6:a8:56:a9:e6:32:01:18:37:9c:03:11:02:f2:06:bb:f0:
f3:3b:13:ba:4c:6c:86:8a:0a:b0:dd:b2:da:ae:3b:0d:8a:68:
8a:f4:31:94
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYjD8rmNvlUTAZ8t8Nyt56IJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjMwNjE2MTEyNDA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMWE3ODRiZDRjYWEyYzQwZmUyYWVjZjllNjYzODMyMzVlMzc2M2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYXlaSF31jGwKIvnrNt5h+Ys8wCr
gvOCmPLQLhgAYOb4Ji+2cN1p9IaiiO7nx4lnwhOgihLZyLZiGJNDfUBz8dki/bb5
1VQX8xUoSoXUgzcKHqgZTIQvxGnfMcl74zmHNZaxCCBPmtZ8Az+n1zud4nQv+Ge9
1Fz3qJMux+hggb1yLjhCO0cyqPdiVeenYFSldcOXAHacRFzECNLfG0TqiM+09hX3
IQWs0DyvLdzcjc6eHgSCP41Hfp9TCn3FJMo7VuK3rRKyMH7efFsR5O85YsMdl+an
lp3rmrBSLSb284xlWanVa/OnkjWyQ0MqtKTrkVN3hdnOnZoZlRcA9ISdsQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPGnhL1MqixA/irs+eZjgyNeN2PxMB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvOGFlRXZVeXFMRUQtS3V6NTVtT0RJMTQzWV9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWfsYAwQA
WfsbMA0GCSqGSIb3DQEBCwUAA4IBAQAzm7asG/1CDiID0sVRV8xuCSoWUQOYfD2R
m6fYh1WhDBePOqTapKhUdtL8LmzRrRPf9WRGr2gXaCQ1eccnaBqOQ/HgN5sSGtml
j+MwQx2Ab9vQm461ih311BUwtjRH/TQwGZ4Z6HAB0xyFSl0muHQRSlu1pQNgNZEA
fFnP1JMd5Wap+A2f/vm+rn7x4YZGo2F9VozXu3Lq2jg/l3YiBXHCy3+3qwradb5Q
XzFFRAn++TE0ss/RWiMPpxasC+ANYpzeDUI/1njmJWqFP/c9oum7flGKFYk7StxU
9qhWqeYyARg3nAMRAvIGu/DzOxO6TGyGigqw3bLarjsNimiK9DGU
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:36 2024 by rpki-client on console-fra.rpki-client.org