Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/V6qSt7j3a2zEDGlSmnXB2AXXDnc.roa
File: V6qSt7j3a2zEDGlSmnXB2AXXDnc.roa (raw, json)
Hash identifier: V4QUW/z4zXCFk9y2SGupYQ03EHop4i/Lyj9Q2kl0Qs8=
Subject key identifier: 57:AA:92:B7:B8:F7:6B:6C:C4:0C:69:52:9A:75:C1:D8:05:D7:0E:77
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01889F54C29C8954C6F0D09A9B8AC30003D9
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/V6qSt7j3a2zEDGlSmnXB2AXXDnc.roa
Signing time: Fri 09 Jun 2023 08:45:12 +0000
ROA not before: Fri 09 Jun 2023 08:45:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 109.122.46.0/24 maxlen: 24
89.251.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 11 Jun 2023 11:35:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9f:54:c2:9c:89:54:c6:f0:d0:9a:9b:8a:c3:00:03:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jun 9 08:45:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57aa92b7b8f76b6cc40c69529a75c1d805d70e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:93:16:d7:aa:0b:08:9e:6d:a4:ea:df:72:14:
b8:5d:6b:19:c0:dd:1a:04:6a:7c:98:16:75:94:cc:
21:c3:80:68:ff:89:56:36:ed:3c:7f:f4:2f:a7:98:
25:c8:f2:1b:8f:18:1c:eb:bb:b1:0b:12:63:ce:99:
e1:df:79:4e:dc:24:00:e1:a8:6b:4d:70:91:de:d3:
98:da:9f:3f:0e:4b:d1:61:f7:cb:d1:02:ab:94:c7:
2f:6e:9e:26:14:b0:90:91:86:aa:98:3c:d1:92:70:
2c:c6:cf:5a:9d:63:65:bf:45:68:f3:82:8f:e4:07:
99:91:22:63:5c:ec:d7:91:3e:4f:d4:eb:3f:f4:84:
1f:97:e9:80:04:49:bb:2f:94:9c:68:05:49:52:c0:
0a:e7:fb:8e:d0:54:58:0b:0b:71:4e:15:06:4f:5e:
30:66:8a:30:73:3d:05:cd:15:b9:5f:f6:90:5f:ee:
b6:9c:68:b4:bc:79:e5:c6:71:10:f8:7d:d9:14:11:
4c:3d:ec:59:4d:6f:6f:03:63:73:2d:0f:f5:5f:9e:
e1:25:bd:b3:60:f4:c7:f2:33:f4:2a:d7:80:27:7e:
af:76:25:ef:6d:f0:76:98:09:cd:95:05:3c:eb:76:
bd:ed:e6:68:bd:95:c1:43:5a:bd:ab:a1:02:56:af:
d7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:AA:92:B7:B8:F7:6B:6C:C4:0C:69:52:9A:75:C1:D8:05:D7:0E:77
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/V6qSt7j3a2zEDGlSmnXB2AXXDnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.25.0/24
109.122.46.0/24
Signature Algorithm: sha256WithRSAEncryption
13:51:7a:a9:55:e2:1c:dc:13:c6:b6:e9:e1:f1:db:22:d4:ac:
7d:db:95:ae:95:67:85:fb:31:19:18:8a:c6:31:6c:90:82:a1:
7b:23:03:51:65:41:d8:29:a4:00:45:42:e2:32:fc:10:18:3c:
85:69:ac:a2:be:35:39:a4:5e:22:bc:65:99:e3:56:a0:24:e3:
f9:ef:46:f1:37:84:c9:e8:20:24:74:c9:a6:78:66:4f:a0:e4:
7f:b2:40:cd:79:ad:83:68:3a:73:6e:b3:7c:29:07:a4:67:86:
57:66:d9:79:36:ac:90:6e:68:0e:5e:3c:25:92:b5:8b:d9:67:
b5:cb:6a:1c:34:c2:24:b8:34:d3:14:b7:84:b1:a5:0a:3d:41:
8b:01:e3:5f:9a:9f:9e:58:79:44:de:a8:fa:ed:54:de:38:5d:
c6:4d:fa:57:5a:c2:41:84:15:f2:35:3b:d3:86:93:a8:30:8f:
34:21:b6:b0:b2:fc:ce:18:06:2c:f6:8f:cb:a6:96:32:7f:de:
a4:2d:66:87:32:dd:f1:fa:5c:38:6e:e1:68:50:8d:cd:8b:4c:
c3:ee:8d:58:97:44:3f:60:6f:cc:07:15:19:34:09:ec:1d:d6:
dc:85:de:60:f2:72:0c:fe:19:52:46:57:4a:3c:72:54:c2:79:
41:8d:16:44
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYifVMKciVTG8NCam4rDAAPZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjMwNjA5MDg0NTEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1N2FhOTJiN2I4Zjc2YjZjYzQwYzY5NTI5YTc1YzFkODA1ZDcwZTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZMW16oLCJ5tpOrfchS4XWsZwN0a
BGp8mBZ1lMwhw4Bo/4lWNu08f/Qvp5glyPIbjxgc67uxCxJjzpnh33lO3CQA4ahr
TXCR3tOY2p8/DkvRYffL0QKrlMcvbp4mFLCQkYaqmDzRknAsxs9anWNlv0Vo84KP
5AeZkSJjXOzXkT5P1Os/9IQfl+mABEm7L5ScaAVJUsAK5/uO0FRYCwtxThUGT14w
Zoowcz0FzRW5X/aQX+62nGi0vHnlxnEQ+H3ZFBFMPexZTW9vA2NzLQ/1X57hJb2z
YPTH8jP0KteAJ36vdiXvbfB2mAnNlQU863a97eZovZXBQ1q9q6ECVq/XgwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFeqkre492tsxAxpUpp1wdgF1w53MB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvVjZxU3Q3ajNhMnpFREdsU21uWEIyQVhYRG5jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWfsZAwQA
bXouMA0GCSqGSIb3DQEBCwUAA4IBAQATUXqpVeIc3BPGtunh8dsi1Kx925WulWeF
+zEZGIrGMWyQgqF7IwNRZUHYKaQARULiMvwQGDyFaayivjU5pF4ivGWZ41agJOP5
70bxN4TJ6CAkdMmmeGZPoOR/skDNea2DaDpzbrN8KQekZ4ZXZtl5NqyQbmgOXjwl
krWL2We1y2ocNMIkuDTTFLeEsaUKPUGLAeNfmp+eWHlE3qj67VTeOF3GTfpXWsJB
hBXyNTvThpOoMI80IbawsvzOGAYs9o/LppYyf96kLWaHMt3x+lw4buFoUI3Ni0zD
7o1Yl0Q/YG/MBxUZNAnsHdbchd5g8nIM/hlSRldKPHJUwnlBjRZE
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:06 2024 by rpki-client on console-ams.rpki-client.org