Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/ud--42nllPmmF_4Ftmn-5QHdrWw.roa
File: ud--42nllPmmF_4Ftmn-5QHdrWw.roa (raw, json)
Hash identifier: 1mYUBoONvw4Mk0BPuZE2SA0KKvy+iWbVOzcOjZt0Jj0=
Subject key identifier: B9:DF:BE:E3:69:E5:94:F9:A6:17:FE:05:B6:69:FE:E5:01:DD:AD:6C
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018AB94899C83CD0410C119FD47555AE5E71
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/ud--42nllPmmF_4Ftmn-5QHdrWw.roa
Signing time: Thu 21 Sep 2023 19:47:37 +0000
ROA not before: Thu 21 Sep 2023 19:47:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 89.251.17.0/24 maxlen: 24
193.93.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b9:48:99:c8:3c:d0:41:0c:11:9f:d4:75:55:ae:5e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Sep 21 19:47:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9dfbee369e594f9a617fe05b669fee501ddad6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:fb:d6:ca:1b:d0:cb:3d:24:fd:35:79:58:63:
08:47:d5:29:5d:25:4d:d8:1b:ef:ac:92:34:22:26:
27:ff:82:bc:af:13:ec:e9:2b:bf:52:f8:80:14:ec:
ad:4d:42:e1:ba:54:59:84:97:2d:a9:43:94:84:48:
40:d0:3f:9c:02:e4:ef:57:26:62:61:9c:b9:77:4b:
f1:4e:2a:bf:01:63:ee:00:ef:14:a5:a6:ae:df:21:
1e:ba:76:e9:5d:34:8f:14:52:a1:59:4e:89:75:e3:
06:3d:b5:66:ea:fd:83:7a:76:92:f6:cb:05:69:c9:
58:35:19:7e:3c:3d:5b:12:14:d7:8e:b2:de:1b:53:
b6:22:85:c0:e1:08:a5:1b:9d:32:59:09:8d:24:3e:
8e:85:2f:ae:f7:b5:e0:4f:11:95:a9:3e:42:cf:67:
33:c4:e6:c8:d5:1c:bd:d8:98:bd:35:82:c8:c7:12:
84:8b:b9:a9:00:15:4b:22:a9:d5:06:8e:8e:6c:06:
e1:85:e5:99:74:fb:ea:21:d9:14:16:33:02:2e:71:
b0:0b:e2:06:5e:ae:14:dd:55:f2:9d:f8:21:0c:79:
5d:99:b3:7f:96:c7:63:8b:44:23:e8:58:4c:55:1f:
43:1d:cc:45:8a:94:be:c9:e1:c2:f3:2c:05:4f:8a:
54:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:DF:BE:E3:69:E5:94:F9:A6:17:FE:05:B6:69:FE:E5:01:DD:AD:6C
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/ud--42nllPmmF_4Ftmn-5QHdrWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.17.0/24
193.93.53.0/24
Signature Algorithm: sha256WithRSAEncryption
17:7a:de:90:5e:be:a3:24:14:83:a9:10:91:49:9f:b5:ea:74:
4d:4b:72:d7:59:e9:2e:f0:3e:06:a9:97:1c:8d:d3:28:b8:f1:
b8:58:94:9a:5b:e0:f2:19:6d:7b:94:44:92:07:fe:4d:c6:67:
ae:40:cc:6c:52:8b:2c:8b:2e:85:12:b3:e2:4d:71:62:de:db:
d4:19:86:90:53:e3:a1:91:31:c4:81:5e:dd:7d:3d:35:10:2a:
f8:8c:65:2f:58:dc:3e:a7:62:ac:e4:29:24:bc:bb:bb:ce:8d:
ef:70:04:8a:39:60:95:0d:ff:0a:cb:d8:5f:cd:e2:61:be:86:
73:13:b6:c0:08:d2:d3:58:db:c5:06:07:5d:0f:66:7f:5e:3b:
7a:68:b2:f6:08:73:c3:56:fd:a1:a8:42:f0:bb:82:cb:6f:17:
9f:12:3f:8b:65:d1:bc:bb:95:3d:c0:3d:7f:1a:16:ee:43:e1:
08:ce:39:b3:51:ad:9e:dd:40:58:fa:51:47:78:fb:36:a0:9c:
7d:66:13:2d:9a:93:e4:db:ef:86:8b:d8:1e:71:e7:ef:02:4a:
db:7b:76:c7:ff:ed:a0:73:3f:90:89:5d:d2:5d:67:8c:72:9e:
12:b1:47:b1:51:38:ee:1e:4e:2e:83:ab:ce:02:dc:8f:13:24:
43:30:1a:79
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYq5SJnIPNBBDBGf1HVVrl5xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjMwOTIxMTk0NzM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOWRmYmVlMzY5ZTU5NGY5YTYxN2ZlMDViNjY5ZmVlNTAxZGRhZDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifvWyhvQyz0k/TV5WGMIR9UpXSVN
2BvvrJI0IiYn/4K8rxPs6Su/UviAFOytTULhulRZhJctqUOUhEhA0D+cAuTvVyZi
YZy5d0vxTiq/AWPuAO8Upaau3yEeunbpXTSPFFKhWU6JdeMGPbVm6v2DenaS9ssF
aclYNRl+PD1bEhTXjrLeG1O2IoXA4QilG50yWQmNJD6OhS+u97XgTxGVqT5Cz2cz
xObI1Ry92Ji9NYLIxxKEi7mpABVLIqnVBo6ObAbhheWZdPvqIdkUFjMCLnGwC+IG
Xq4U3VXynfghDHldmbN/lsdji0Qj6FhMVR9DHcxFipS+yeHC8ywFT4pUXQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLnfvuNp5ZT5phf+BbZp/uUB3a1sMB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvdWQtLTQybmxsUG1tRl80RnRtbi01UUhkcld3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWfsRAwQA
wV01MA0GCSqGSIb3DQEBCwUAA4IBAQAXet6QXr6jJBSDqRCRSZ+16nRNS3LXWeku
8D4GqZccjdMouPG4WJSaW+DyGW17lESSB/5NxmeuQMxsUossiy6FErPiTXFi3tvU
GYaQU+OhkTHEgV7dfT01ECr4jGUvWNw+p2Ks5CkkvLu7zo3vcASKOWCVDf8Ky9hf
zeJhvoZzE7bACNLTWNvFBgddD2Z/Xjt6aLL2CHPDVv2hqELwu4LLbxefEj+LZdG8
u5U9wD1/GhbuQ+EIzjmzUa2e3UBY+lFHePs2oJx9ZhMtmpPk2++Gi9gecefvAkrb
e3bH/+2gcz+QiV3SXWeMcp4SsUexUTjuHk4ug6vOAtyPEyRDMBp5
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:37 2024 by rpki-client on console-fra.rpki-client.org