Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/FEq3WbQ-1tt-3BQGzYt4FW7XCNs.roa
File: FEq3WbQ-1tt-3BQGzYt4FW7XCNs.roa (raw, json)
Hash identifier: UYFlLuLy5YCcR34gax1S9eJkw2TkmED1zMmzgJk9Bzw=
Subject key identifier: 14:4A:B7:59:B4:3E:D6:DB:7E:DC:14:06:CD:8B:78:15:6E:D7:08:DB
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018CC794D4E1880609BCE4769E6A606F5AE1
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/FEq3WbQ-1tt-3BQGzYt4FW7XCNs.roa
Signing time: Tue 02 Jan 2024 00:31:08 +0000
ROA not before: Tue 02 Jan 2024 00:31:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20422
IP address blocks: 89.251.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 11 Feb 2024 08:23:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:d4:e1:88:06:09:bc:e4:76:9e:6a:60:6f:5a:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 2 00:31:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=144ab759b43ed6db7edc1406cd8b78156ed708db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ff:2a:f4:73:20:b8:03:7e:61:f2:59:31:25:
57:14:5b:f1:53:6e:31:90:50:9e:60:c6:ae:8c:ce:
1e:2b:00:5b:c3:45:24:c5:ce:4a:44:e2:ad:12:d8:
34:71:a7:69:06:97:f6:e7:69:e7:c7:24:dc:8b:d6:
11:f1:bb:1a:18:51:c8:a4:f6:7d:05:5c:1c:db:74:
19:16:2f:ee:49:eb:fb:b1:93:fb:e2:a2:ac:bd:4c:
59:9c:07:c1:ff:ef:08:ab:a8:90:64:e6:bf:54:9b:
7e:30:e9:93:53:e5:a2:84:f3:72:81:05:f3:98:a1:
30:8d:8c:83:05:dc:ef:c7:cf:af:73:a2:46:b4:85:
d3:e0:7f:6f:6b:f4:b2:c1:75:6d:1b:18:86:01:ac:
50:a0:eb:dd:28:9e:16:a2:f6:f0:1b:db:b9:4e:8a:
ae:b7:29:fa:a5:d7:d8:df:5b:46:c9:34:7a:c8:a2:
1e:45:2e:b7:a8:b8:40:e9:ab:79:50:57:32:44:ba:
fb:d3:42:01:2a:c3:8e:52:2d:55:93:f7:d0:8c:4b:
70:e6:9e:be:20:9c:ee:b2:dc:ef:e9:ff:f3:a9:e4:
1c:ac:0f:9b:cf:ab:59:92:71:7f:36:6f:69:3b:01:
2e:f9:28:23:09:89:e9:a7:87:fa:9a:b5:07:38:cd:
1b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:4A:B7:59:B4:3E:D6:DB:7E:DC:14:06:CD:8B:78:15:6E:D7:08:DB
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/FEq3WbQ-1tt-3BQGzYt4FW7XCNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.28.0/24
Signature Algorithm: sha256WithRSAEncryption
03:4f:1a:e7:c4:ac:7a:5d:68:2e:66:ab:4b:77:02:d1:4a:17:
63:ce:ff:60:38:cb:c5:4e:7d:61:8b:f9:02:26:b1:0e:30:31:
27:5c:fc:7a:72:87:77:f6:43:4f:a2:cb:04:ba:93:6e:31:3b:
69:8d:3c:f9:e7:44:2e:28:39:21:8a:49:af:7c:75:b3:ff:c9:
c3:7e:8a:5b:8e:3c:b6:30:24:d9:f9:ae:5e:fe:d5:36:f3:6e:
27:32:16:87:6e:5f:ef:1e:64:31:e5:c1:71:91:47:a3:4c:da:
a5:99:bb:2a:4d:de:34:59:6b:00:d8:2f:65:ea:c5:5f:be:27:
39:47:64:07:2c:61:ba:45:13:b0:9f:c7:4a:c5:af:73:d2:9c:
6c:a1:5a:14:26:1c:29:7b:f4:76:55:86:fd:99:6d:78:6a:4e:
a7:8e:cd:69:88:28:e2:69:5d:e1:01:c6:d6:b5:c9:c9:0e:76:
a6:e8:6a:12:6d:39:8c:6e:ee:a6:c4:a7:d8:f1:78:f0:71:d0:
d0:8c:eb:36:0d:40:4e:58:5a:a7:20:44:af:54:0f:bb:43:1a:
7c:0d:21:6b:3b:93:0e:f0:32:94:e8:44:f2:a7:8b:10:88:66:
80:43:03:cb:66:5f:7e:01:94:20:0e:97:0b:0c:a1:87:91:d1:
d2:c9:75:b2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHlNThiAYJvOR2nmpgb1rhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjQwMTAyMDAzMTA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDRhYjc1OWI0M2VkNmRiN2VkYzE0MDZjZDhiNzgxNTZlZDcwOGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/8q9HMguAN+YfJZMSVXFFvxU24x
kFCeYMaujM4eKwBbw0Ukxc5KROKtEtg0cadpBpf252nnxyTci9YR8bsaGFHIpPZ9
BVwc23QZFi/uSev7sZP74qKsvUxZnAfB/+8Iq6iQZOa/VJt+MOmTU+WihPNygQXz
mKEwjYyDBdzvx8+vc6JGtIXT4H9va/SywXVtGxiGAaxQoOvdKJ4WovbwG9u5Toqu
tyn6pdfY31tGyTR6yKIeRS63qLhA6at5UFcyRLr700IBKsOOUi1Vk/fQjEtw5p6+
IJzustzv6f/zqeQcrA+bz6tZknF/Nm9pOwEu+SgjCYnpp4f6mrUHOM0bkQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBRKt1m0PtbbftwUBs2LeBVu1wjbMB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvRkVxM1diUS0xdHQtM0JRR3pZdDRGVzdYQ05zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWfscMA0G
CSqGSIb3DQEBCwUAA4IBAQADTxrnxKx6XWguZqtLdwLRShdjzv9gOMvFTn1hi/kC
JrEOMDEnXPx6cod39kNPossEupNuMTtpjTz550QuKDkhikmvfHWz/8nDfopbjjy2
MCTZ+a5e/tU2824nMhaHbl/vHmQx5cFxkUejTNqlmbsqTd40WWsA2C9l6sVfvic5
R2QHLGG6RROwn8dKxa9z0pxsoVoUJhwpe/R2VYb9mW14ak6njs1piCjiaV3hAcbW
tcnJDnam6GoSbTmMbu6mxKfY8XjwcdDQjOs2DUBOWFqnIESvVA+7Qxp8DSFrO5MO
8DKU6ETyp4sQiGaAQwPLZl9+AZQgDpcLDKGHkdHSyXWy
-----END CERTIFICATE-----
Generated at Thu Apr 17 21:55:00 2025 by rpki-client