Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/nLisfCbG_Z7O3t-bokJ9_83u3w4.roa
File: nLisfCbG_Z7O3t-bokJ9_83u3w4.roa (raw, json)
Hash identifier: RMRI2TGIKYyV/4U66UZJN5rpHsmW2FiFXyDNS5y4SoM=
Subject key identifier: 9C:B8:AC:7C:26:C6:FD:9E:CE:DE:DF:9B:A2:42:7D:FF:CD:EE:DF:0E
Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
Certificate serial: 018ADB31798B004B1196E110116F903348FE
Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/nLisfCbG_Z7O3t-bokJ9_83u3w4.roa
Signing time: Thu 28 Sep 2023 09:49:27 +0000
ROA not before: Thu 28 Sep 2023 09:49:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216248
IP address blocks: 89.188.164.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:db:31:79:8b:00:4b:11:96:e1:10:11:6f:90:33:48:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
Validity
Not Before: Sep 28 09:49:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9cb8ac7c26c6fd9ecededf9ba2427dffcdeedf0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:28:55:bd:87:c3:e1:4a:97:80:04:bd:d0:1a:
91:3a:1a:9e:28:62:aa:a5:61:4b:5f:fd:2a:a4:08:
22:81:19:c3:8f:0f:30:7a:cb:f1:78:25:0d:84:5b:
a0:23:fa:42:6c:30:f3:03:39:4d:2b:80:01:13:61:
2f:21:a7:1c:20:ef:10:89:d7:53:e8:57:44:28:26:
c5:d8:24:b6:e1:a9:2b:6f:02:8b:d6:1c:d3:6b:73:
28:49:a9:96:c6:0b:7c:fe:93:77:e1:bf:bc:47:fc:
27:55:54:e3:34:71:ed:e9:e0:36:09:90:c5:66:f0:
c7:98:3d:00:9f:d4:00:ff:81:da:df:1c:d5:83:6f:
69:3a:3b:0e:26:97:d4:b2:1c:d6:d0:70:c2:1a:a1:
5b:ac:a9:8a:76:d9:f0:44:e6:a9:e3:7c:7f:3b:02:
f8:5e:52:2d:04:da:6b:0c:1e:7a:d2:e9:d6:df:18:
88:15:05:6a:10:f8:a0:33:5e:dc:2a:9a:50:b6:0d:
ef:85:4c:d7:68:8c:2c:f7:73:26:ce:5a:3a:8e:01:
34:48:d5:98:4a:68:26:34:43:82:ca:97:90:52:df:
e6:b7:a0:40:51:89:c4:ed:68:84:8c:07:9b:d1:cb:
f5:93:6f:34:08:e6:7b:25:15:96:c5:88:fd:1f:ff:
2f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B8:AC:7C:26:C6:FD:9E:CE:DE:DF:9B:A2:42:7D:FF:CD:EE:DF:0E
X509v3 Authority Key Identifier:
keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/nLisfCbG_Z7O3t-bokJ9_83u3w4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.188.164.0/23
Signature Algorithm: sha256WithRSAEncryption
77:4a:37:4b:ef:37:24:d7:70:8f:78:8a:be:d6:97:fe:24:84:
24:0b:a0:52:d8:7f:36:e1:a7:98:13:a8:0d:c2:b0:9e:64:81:
78:d1:9a:6a:30:de:be:ed:1e:13:0e:df:06:1a:ce:41:9d:63:
2c:90:29:d3:44:d2:07:d2:1f:46:d8:6b:36:06:54:bc:0a:4d:
f9:6d:93:87:75:ef:a3:8e:6e:f6:bb:96:0e:8d:d3:3b:59:ce:
3b:db:d5:37:77:6d:80:2d:5c:5b:b0:c7:79:61:48:ac:ba:36:
b0:19:e0:65:53:b3:ae:70:68:74:c0:c8:86:d2:a3:5f:cf:92:
07:22:90:3d:83:60:c2:6e:17:22:b4:d1:b8:f6:e2:64:04:9d:
8f:90:97:55:7a:21:d7:34:a6:7c:29:a3:d0:95:60:0a:b0:d4:
0f:4d:05:0d:a8:d9:50:7e:3e:ab:b0:88:d6:3c:72:ef:e3:2b:
2e:bd:a7:6e:e1:27:be:f2:d1:4d:49:97:1d:54:37:29:7b:07:
09:ec:aa:2a:57:c3:cf:01:a9:bf:e4:d9:70:bb:19:fe:84:af:
68:af:f6:b3:52:13:b1:8d:35:4b:99:5b:aa:06:db:fb:a3:39:
49:34:90:3c:cc:6d:b1:2d:d5:99:3c:f1:aa:6b:c5:44:e5:c1:
0a:2b:40:e7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYrbMXmLAEsRluEQEW+QM0j+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZTNkOTJiZmUxNjYxOWNhNTAwYzAzMjY3ZWZmYTlhYTdj
YTBjNDcwHhcNMjMwOTI4MDk0OTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Y2I4YWM3YzI2YzZmZDllY2VkZWRmOWJhMjQyN2RmZmNkZWVkZjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyhVvYfD4UqXgAS90BqROhqeKGKq
pWFLX/0qpAgigRnDjw8wesvxeCUNhFugI/pCbDDzAzlNK4ABE2EvIaccIO8QiddT
6FdEKCbF2CS24akrbwKL1hzTa3MoSamWxgt8/pN34b+8R/wnVVTjNHHt6eA2CZDF
ZvDHmD0An9QA/4Ha3xzVg29pOjsOJpfUshzW0HDCGqFbrKmKdtnwROap43x/OwL4
XlItBNprDB560unW3xiIFQVqEPigM17cKppQtg3vhUzXaIws93Mmzlo6jgE0SNWY
SmgmNEOCypeQUt/mt6BAUYnE7WiEjAeb0cv1k280COZ7JRWWxYj9H/8vowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJy4rHwmxv2ezt7fm6JCff/N7t8OMB8GA1UdIwQY
MBaAFCPj2Sv+FmGcpQDAMmfv+pqnygxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYt
ZjFiZjBjMzNhOTA4LzEvbkxpc2ZDYkdfWjdPM3QtYm9rSjlfODN1M3c0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYtZjFiZjBjMzNhOTA4
LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBWbykMA0G
CSqGSIb3DQEBCwUAA4IBAQB3SjdL7zck13CPeIq+1pf+JIQkC6BS2H824aeYE6gN
wrCeZIF40ZpqMN6+7R4TDt8GGs5BnWMskCnTRNIH0h9G2Gs2BlS8Ck35bZOHde+j
jm72u5YOjdM7Wc4729U3d22ALVxbsMd5YUisujawGeBlU7OucGh0wMiG0qNfz5IH
IpA9g2DCbhcitNG49uJkBJ2PkJdVeiHXNKZ8KaPQlWAKsNQPTQUNqNlQfj6rsIjW
PHLv4ysuvadu4Se+8tFNSZcdVDcpewcJ7KoqV8PPAam/5Nlwuxn+hK9or/azUhOx
jTVLmVuqBtv7ozlJNJA8zG2xLdWZPPGqa8VE5cEKK0Dn
-----END CERTIFICATE-----
Generated at Mon Jan 1 17:13:48 2024 by rpki-client on console-ams.rpki-client.org