Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/b33cYt0nPGSTY6yrkK1oc8iC6ZY.roa
File: b33cYt0nPGSTY6yrkK1oc8iC6ZY.roa (raw, json)
Hash identifier: lpzs3YIsgCQlP+3s5j6LSbRJgjDbm4zMRc6OzyZRqJY=
Subject key identifier: 6F:7D:DC:62:DD:27:3C:64:93:63:AC:AB:90:AD:68:73:C8:82:E9:96
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0191FBDE80A8FEB8F941973FA7FB05B9B1C3
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/b33cYt0nPGSTY6yrkK1oc8iC6ZY.roa
Signing time: Mon 16 Sep 2024 17:25:48 +0000
ROA not before: Mon 16 Sep 2024 17:25:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 89.251.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 22 Sep 2024 18:35:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fb:de:80:a8:fe:b8:f9:41:97:3f:a7:fb:05:b9:b1:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Sep 16 17:25:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f7ddc62dd273c649363acab90ad6873c882e996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f0:81:af:8d:7e:ab:9b:4c:5b:93:c0:8c:2f:
ad:be:b0:2c:6f:b8:81:1f:4c:23:b3:15:c5:f8:b2:
6b:c9:26:4e:6f:a5:9a:b8:0e:8e:00:1a:ae:d3:61:
91:f7:5f:6a:b5:43:6a:f1:7f:67:45:d3:92:64:0c:
16:1a:6e:1c:22:ce:b8:78:4b:f3:0a:56:b3:96:a3:
1e:61:9a:84:86:27:af:0b:aa:bd:aa:6a:fb:d7:76:
c9:7f:bf:1d:b7:3d:33:15:c3:fc:f5:c5:b4:9f:ec:
e8:c3:91:5a:8c:db:9f:de:e6:9a:d9:75:79:e1:d6:
cf:af:6f:44:e5:65:03:28:98:2b:8d:ed:04:a6:03:
e7:b3:f3:90:c4:8e:ca:dd:85:a6:7c:63:e0:bb:d8:
bf:50:51:69:f9:72:a3:28:1a:fe:40:bb:53:70:7c:
23:95:a9:e6:06:e7:82:78:87:a0:fa:0f:3b:46:04:
71:63:ab:72:09:0b:ab:51:f4:b0:79:e1:f9:dc:67:
53:22:42:6f:8b:0d:c5:52:9d:d9:8f:f9:b4:42:fe:
22:a3:90:6a:e4:74:63:3a:96:dd:3a:a5:a2:1b:9f:
9d:68:15:b9:d5:59:12:69:ae:af:15:20:10:b4:4d:
76:d7:6e:cd:16:b3:f1:1f:20:4d:fe:34:e2:00:b7:
dd:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:7D:DC:62:DD:27:3C:64:93:63:AC:AB:90:AD:68:73:C8:82:E9:96
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/b33cYt0nPGSTY6yrkK1oc8iC6ZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.24.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:d7:5b:28:96:8d:84:8d:f8:cd:83:2a:60:24:9e:dc:13:16:
36:67:67:c6:f3:4f:66:f3:40:d0:13:53:ca:c1:26:d5:d7:8b:
74:04:70:69:cb:3f:90:1b:42:cd:d2:e1:29:0f:9b:96:ad:39:
8c:81:b4:1c:f8:7c:13:b8:51:c5:aa:78:b9:5d:d6:02:c0:0f:
c5:fe:65:61:f5:7e:d9:a3:4e:56:6c:e7:92:fc:a4:38:7b:04:
ed:c3:e2:76:ab:ed:8b:06:e2:86:4c:d1:53:32:d4:5e:cd:f7:
75:1d:40:97:3a:62:14:dd:a5:68:af:44:5d:da:4a:f1:4c:3e:
91:ca:c1:7f:4e:cf:4a:8c:73:7a:4f:6b:bb:6e:99:68:83:bd:
be:4b:e2:50:46:5e:8a:1b:ad:3f:ed:00:44:8e:ed:fc:b2:a6:
46:76:fa:3d:1a:ca:b5:e6:72:ff:58:04:eb:20:60:98:ce:e3:
d2:68:b4:b7:ca:9b:8a:d6:af:2c:df:1f:06:50:b3:bb:f8:36:
9f:84:38:a8:d9:08:09:1e:1f:fd:ca:22:2f:2e:30:a4:c5:b0:
45:2a:c1:f6:12:53:4e:b0:8f:87:60:57:f6:1e:ca:5e:9d:2b:
d3:ab:f4:68:90:85:81:7a:3c:f2:7e:cb:a2:95:d1:1d:90:b8:
b4:d9:6b:b4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZH73oCo/rj5QZc/p/sFubHDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjQwOTE2MTcyNTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjdkZGM2MmRkMjczYzY0OTM2M2FjYWI5MGFkNjg3M2M4ODJlOTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPCBr41+q5tMW5PAjC+tvrAsb7iB
H0wjsxXF+LJrySZOb6WauA6OABqu02GR919qtUNq8X9nRdOSZAwWGm4cIs64eEvz
ClazlqMeYZqEhievC6q9qmr713bJf78dtz0zFcP89cW0n+zow5FajNuf3uaa2XV5
4dbPr29E5WUDKJgrje0EpgPns/OQxI7K3YWmfGPgu9i/UFFp+XKjKBr+QLtTcHwj
lanmBueCeIeg+g87RgRxY6tyCQurUfSweeH53GdTIkJviw3FUp3Zj/m0Qv4io5Bq
5HRjOpbdOqWiG5+daBW51VkSaa6vFSAQtE12127NFrPxHyBN/jTiALfdgwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG993GLdJzxkk2Osq5CtaHPIgumWMB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvYjMzY1l0MG5QR1NUWTZ5cmtLMW9jOGlDNlpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWfsYMA0G
CSqGSIb3DQEBCwUAA4IBAQAP11solo2EjfjNgypgJJ7cExY2Z2fG809m80DQE1PK
wSbV14t0BHBpyz+QG0LN0uEpD5uWrTmMgbQc+HwTuFHFqni5XdYCwA/F/mVh9X7Z
o05WbOeS/KQ4ewTtw+J2q+2LBuKGTNFTMtRezfd1HUCXOmIU3aVor0Rd2krxTD6R
ysF/Ts9KjHN6T2u7bplog72+S+JQRl6KG60/7QBEju38sqZGdvo9Gsq15nL/WATr
IGCYzuPSaLS3ypuK1q8s3x8GULO7+DafhDio2QgJHh/9yiIvLjCkxbBFKsH2ElNO
sI+HYFf2HspenSvTq/RokIWBejzyfsuildEdkLi02Wu0
-----END CERTIFICATE-----
Generated at Sun Sep 22 22:34:31 2024 by rpki-client on console-fra.rpki-client.org