Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/VJ6gaHye6Hv7zlMafFDR94Wk5cw.roa
File: VJ6gaHye6Hv7zlMafFDR94Wk5cw.roa (raw, json)
Hash identifier: Y3euV9VuD/eFOWPGarjyRfSyVhSxuQsduKpQnaYhpu0=
Subject key identifier: 54:9E:A0:68:7C:9E:E8:7B:FB:CE:53:1A:7C:50:D1:F7:85:A4:E5:CC
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 019294B7460FBC08AF4FE7649034CCE18264
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/VJ6gaHye6Hv7zlMafFDR94Wk5cw.roa
Signing time: Wed 16 Oct 2024 09:44:51 +0000
ROA not before: Wed 16 Oct 2024 09:44:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 89.21.84.0/24 maxlen: 24
89.21.85.0/24 maxlen: 24
89.251.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 20 Oct 2024 18:31:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:94:b7:46:0f:bc:08:af:4f:e7:64:90:34:cc:e1:82:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Oct 16 09:44:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=549ea0687c9ee87bfbce531a7c50d1f785a4e5cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:72:a9:ef:4c:be:94:ad:ae:c0:62:3f:4c:25:
db:fd:8a:02:61:94:e7:ac:62:33:00:8a:a3:5f:76:
83:d7:5f:22:fd:75:f2:38:17:fb:ad:84:b0:ef:5d:
d3:76:9e:b1:0c:da:01:4c:a6:10:dd:1b:63:ee:49:
c6:4b:e3:3c:61:c1:14:21:d7:8f:7e:6e:92:85:e4:
37:a0:d6:fa:59:2c:9b:8b:45:38:4c:05:b0:5a:ac:
60:5d:71:b0:42:91:4d:a0:e8:dc:5e:9b:cf:4d:08:
0e:d6:14:3f:d6:8c:21:db:bb:fb:de:e0:b9:50:5e:
0a:95:aa:2e:ea:81:cc:6a:5b:34:dc:0b:58:8e:8b:
43:34:49:24:ab:73:03:30:5b:ad:14:b9:82:1f:56:
16:fd:e2:63:b7:56:9e:df:e8:5e:f8:83:0e:5e:c8:
a1:6e:8f:2f:71:10:83:d0:4c:cf:99:dd:4a:d2:5f:
28:36:cc:25:4f:f1:ad:85:be:cc:48:c2:72:22:55:
1e:6d:ab:f5:fe:ef:9b:0e:b9:15:d5:dc:de:f9:c9:
12:de:c5:65:53:40:c3:90:dc:65:15:68:0c:27:9d:
19:1b:ae:83:c5:3c:f4:1f:c9:90:da:56:d1:1a:e9:
97:97:a2:45:fd:83:b1:cf:01:9e:5b:03:24:d1:c6:
53:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:9E:A0:68:7C:9E:E8:7B:FB:CE:53:1A:7C:50:D1:F7:85:A4:E5:CC
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/VJ6gaHye6Hv7zlMafFDR94Wk5cw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.21.84.0/23
89.251.22.0/24
Signature Algorithm: sha256WithRSAEncryption
06:fb:77:19:e1:e1:7e:f7:02:43:d8:6a:34:ca:38:fa:77:d1:
e7:1f:12:83:ca:4f:86:7d:cf:2c:30:4f:a6:57:50:ca:22:2b:
ac:08:31:e2:5c:22:86:0a:7b:9b:4d:02:c9:ae:a9:9a:a7:39:
90:3e:f1:bd:8b:37:33:5d:3b:fe:eb:3a:a2:33:2b:0f:8e:0c:
9b:af:99:fb:43:ae:79:21:e6:45:7e:2a:b2:6c:87:27:96:2f:
ae:3f:fa:a7:90:2b:90:ad:49:23:66:a9:91:e0:97:4f:c7:43:
4e:13:1f:d1:55:37:de:0c:b5:9e:cf:87:f6:0b:2e:65:77:3c:
e3:33:9d:69:3d:72:6d:dc:74:e3:02:b2:3f:bf:f3:03:ff:13:
8c:b6:10:4b:8d:e6:4f:39:24:54:26:7d:07:58:11:e9:53:d0:
62:e3:c2:2c:f8:15:69:82:eb:ab:e7:02:22:35:29:b4:b2:55:
e1:73:99:71:8f:76:69:07:61:ad:e2:86:23:f4:22:51:32:76:
c2:f5:83:20:d8:7d:ad:63:02:dd:46:76:a5:f4:e9:05:15:6f:
c5:e5:7b:13:61:2a:a6:52:b6:b3:d3:5e:ce:2f:cb:5c:34:8a:
6d:17:fb:73:70:6d:08:f3:5e:90:a7:b7:96:df:1e:8f:b7:ca:
d5:57:47:a9
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZKUt0YPvAivT+dkkDTM4YJkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjQxMDE2MDk0NDUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDllYTA2ODdjOWVlODdiZmJjZTUzMWE3YzUwZDFmNzg1YTRlNWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnKp70y+lK2uwGI/TCXb/YoCYZTn
rGIzAIqjX3aD118i/XXyOBf7rYSw713Tdp6xDNoBTKYQ3Rtj7knGS+M8YcEUIdeP
fm6SheQ3oNb6WSybi0U4TAWwWqxgXXGwQpFNoOjcXpvPTQgO1hQ/1owh27v73uC5
UF4Klaou6oHMals03AtYjotDNEkkq3MDMFutFLmCH1YW/eJjt1ae3+he+IMOXsih
bo8vcRCD0EzPmd1K0l8oNswlT/Gthb7MSMJyIlUebav1/u+bDrkV1dze+ckS3sVl
U0DDkNxlFWgMJ50ZG66DxTz0H8mQ2lbRGumXl6JF/YOxzwGeWwMk0cZTeQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFSeoGh8nuh7+85TGnxQ0feFpOXMMB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvVko2Z2FIeWU2SHY3emxNYWZGRFI5NFdrNWN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBWRVUAwQA
WfsWMA0GCSqGSIb3DQEBCwUAA4IBAQAG+3cZ4eF+9wJD2Go0yjj6d9HnHxKDyk+G
fc8sME+mV1DKIiusCDHiXCKGCnubTQLJrqmapzmQPvG9izczXTv+6zqiMysPjgyb
r5n7Q655IeZFfiqybIcnli+uP/qnkCuQrUkjZqmR4JdPx0NOEx/RVTfeDLWez4f2
Cy5ldzzjM51pPXJt3HTjArI/v/MD/xOMthBLjeZPOSRUJn0HWBHpU9Bi48Is+BVp
guur5wIiNSm0slXhc5lxj3ZpB2Gt4oYj9CJRMnbC9YMg2H2tYwLdRnal9OkFFW/F
5XsTYSqmUraz017OL8tcNIptF/tzcG0I816Qp7eW3x6Pt8rVV0ep
-----END CERTIFICATE-----
Generated at Sun Oct 20 19:59:02 2024 by rpki-client on console-ams.rpki-client.org