Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/aTRdjpR9NKiJAzGs3js1x9lBJic.roa
File: aTRdjpR9NKiJAzGs3js1x9lBJic.roa (raw, json)
Hash identifier: LrjD7oZMBJr62mr2KaoVaJDQn6VI/AyrC/gebkQ2FQM=
Subject key identifier: 69:34:5D:8E:94:7D:34:A8:89:03:31:AC:DE:3B:35:C7:D9:41:26:27
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018CC794D535A3D5F46CA379C58C821B469C
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/aTRdjpR9NKiJAzGs3js1x9lBJic.roa
Signing time: Tue 02 Jan 2024 00:31:09 +0000
ROA not before: Tue 02 Jan 2024 00:31:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 212.23.206.0/24 maxlen: 24
89.251.30.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Jan 2024 17:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:d5:35:a3:d5:f4:6c:a3:79:c5:8c:82:1b:46:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 2 00:31:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69345d8e947d34a8890331acde3b35c7d9412627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:88:a9:42:b9:c3:88:b4:dd:ee:de:63:95:a5:
14:e3:c0:c9:9f:26:93:26:9c:de:b9:02:83:d5:d8:
71:8b:a0:c9:2b:45:e8:f4:8b:45:a1:f4:70:4a:0d:
36:48:7b:a7:51:83:d0:05:73:91:d9:0b:31:92:28:
e5:d0:c8:fc:4c:fb:23:eb:22:f1:f0:21:5e:d0:ff:
72:e1:4c:50:d7:e5:3a:b7:67:83:34:9f:6e:73:a3:
cb:f8:d0:db:e8:70:eb:cb:cb:47:60:39:49:27:1a:
6d:b5:5c:c5:f7:35:20:68:52:ad:2e:cb:40:3d:3f:
10:ad:37:78:2e:09:45:62:98:7c:1c:ff:b9:9c:f9:
50:6e:a7:6e:ac:3b:fd:d4:d8:09:5c:cb:2d:0c:28:
f2:bd:52:64:01:c7:57:8a:b7:8f:cf:f8:f8:68:ba:
59:c5:bc:99:55:c7:6e:38:67:31:be:36:ed:92:66:
2f:1e:b4:f0:4a:a9:e7:ce:6c:d5:5f:77:aa:cc:c9:
e7:fe:81:82:ff:d3:a2:5e:54:58:8a:c7:db:7f:76:
0d:36:8e:30:7c:38:74:cd:20:58:d6:4e:19:65:8c:
a4:79:47:d0:c9:8e:1e:68:9a:1b:aa:98:09:ef:33:
19:a2:87:54:a1:36:5d:9d:0a:a3:b2:7a:9c:57:e5:
a5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:34:5D:8E:94:7D:34:A8:89:03:31:AC:DE:3B:35:C7:D9:41:26:27
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/aTRdjpR9NKiJAzGs3js1x9lBJic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.30.0/24
212.23.206.0/24
Signature Algorithm: sha256WithRSAEncryption
35:79:3f:fd:34:cf:94:7a:e2:66:e0:a7:3a:eb:ea:4e:52:0f:
c9:f8:05:ee:e4:31:65:9a:95:3c:e5:aa:55:85:ef:af:e9:5f:
1b:29:e6:74:e1:1c:a8:5d:28:a6:2f:16:9e:cf:61:c3:ff:8b:
9c:64:92:df:2c:6c:a7:97:cb:a4:94:3a:7a:7a:32:9d:31:20:
ab:03:90:d4:b8:06:5b:45:cb:51:49:27:2c:5e:09:7b:40:3b:
3e:a0:07:a3:52:73:84:74:c3:7c:aa:2e:cd:1c:ad:60:12:f7:
bf:9b:e2:3d:64:b2:22:4e:dc:6d:80:f0:7a:b8:a3:55:d4:ed:
98:3b:16:b5:10:de:a9:a5:a5:4b:8c:5b:1e:71:c6:b1:3f:b5:
fc:8a:6d:cb:e0:40:12:a9:cf:b1:84:a4:44:82:9c:fd:a6:35:
76:11:87:0f:dc:e9:6f:0a:31:50:c3:1c:47:0c:7a:06:f0:70:
d4:6e:10:2e:ee:44:13:a0:2c:bf:f3:0c:bf:70:c2:06:3a:ea:
74:79:48:38:22:2d:df:63:22:24:80:20:05:8a:34:aa:84:51:
ad:6e:ef:df:d4:76:c5:85:ed:8c:24:5a:51:ef:20:cd:bb:b8:
5c:12:1c:66:75:74:78:f3:93:70:03:a5:7d:98:c3:66:c1:94:
17:b6:51:94
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzHlNU1o9X0bKN5xYyCG0acMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjQwMTAyMDAzMTA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTM0NWQ4ZTk0N2QzNGE4ODkwMzMxYWNkZTNiMzVjN2Q5NDEyNjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloipQrnDiLTd7t5jlaUU48DJnyaT
JpzeuQKD1dhxi6DJK0Xo9ItFofRwSg02SHunUYPQBXOR2Qsxkijl0Mj8TPsj6yLx
8CFe0P9y4UxQ1+U6t2eDNJ9uc6PL+NDb6HDry8tHYDlJJxpttVzF9zUgaFKtLstA
PT8QrTd4LglFYph8HP+5nPlQbqdurDv91NgJXMstDCjyvVJkAcdXirePz/j4aLpZ
xbyZVcduOGcxvjbtkmYvHrTwSqnnzmzVX3eqzMnn/oGC/9OiXlRYisfbf3YNNo4w
fDh0zSBY1k4ZZYykeUfQyY4eaJobqpgJ7zMZoodUoTZdnQqjsnqcV+WlQwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGk0XY6UfTSoiQMxrN47NcfZQSYnMB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvYVRSZGpwUjlOS2lKQXpHczNqczF4OWxCSmljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWfseAwQA
1BfOMA0GCSqGSIb3DQEBCwUAA4IBAQA1eT/9NM+UeuJm4Kc66+pOUg/J+AXu5DFl
mpU85apVhe+v6V8bKeZ04RyoXSimLxaez2HD/4ucZJLfLGynl8uklDp6ejKdMSCr
A5DUuAZbRctRSScsXgl7QDs+oAejUnOEdMN8qi7NHK1gEve/m+I9ZLIiTtxtgPB6
uKNV1O2YOxa1EN6ppaVLjFseccaxP7X8im3L4EASqc+xhKREgpz9pjV2EYcP3Olv
CjFQwxxHDHoG8HDUbhAu7kQToCy/8wy/cMIGOup0eUg4Ii3fYyIkgCAFijSqhFGt
bu/f1HbFhe2MJFpR7yDNu7hcEhxmdXR485NwA6V9mMNmwZQXtlGU
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:36 2024 by rpki-client on console-fra.rpki-client.org