Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/f92nkdMMxkBo3h2ReWED0F0Jd4w.roa
File: f92nkdMMxkBo3h2ReWED0F0Jd4w.roa (raw, json)
Hash identifier: 2EVKeiGBZTXIc52N+nd5mysP32BIO0N+aMxNfyi0zWk=
Subject key identifier: 7F:DD:A7:91:D3:0C:C6:40:68:DE:1D:91:79:61:03:D0:5D:09:77:8C
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 0188959D4A3D8E50C6B1417941882839415E
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/f92nkdMMxkBo3h2ReWED0F0Jd4w.roa
Signing time: Wed 07 Jun 2023 11:28:13 +0000
ROA not before: Wed 07 Jun 2023 11:28:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205570
IP address blocks: 178.254.168.0/24 maxlen: 24
89.23.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Aug 2023 07:23:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:95:9d:4a:3d:8e:50:c6:b1:41:79:41:88:28:39:41:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Jun 7 11:28:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7fdda791d30cc64068de1d91796103d05d09778c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c6:3e:e4:e8:b8:7e:7d:a2:6e:0b:e4:09:05:
f0:e2:08:b4:ac:9b:fa:ce:2d:b6:d0:0c:8c:02:5a:
27:76:55:13:ae:25:57:8c:6c:c7:27:be:72:4f:47:
2f:07:09:6c:3d:be:28:a8:07:54:2d:78:8e:0b:d8:
d5:88:bc:79:65:c9:86:f0:8b:e2:1e:42:3f:23:de:
e7:ee:d7:2c:37:04:4d:88:db:e0:96:47:f2:f5:5c:
e6:dd:61:7e:9f:16:a0:0a:45:42:da:dc:f5:1a:8f:
69:6f:27:87:78:c3:4c:61:12:17:58:27:d1:3b:ad:
38:aa:05:6d:47:12:43:ef:43:a2:d5:2e:43:e5:5f:
03:e7:fc:34:32:4c:37:05:69:ba:9f:bc:e7:65:a5:
04:e0:a3:4f:cb:25:8a:b1:59:c9:3c:ec:f0:3c:ab:
19:28:98:6e:b5:cf:f0:cf:4f:c7:7d:74:16:3c:41:
87:b0:78:12:40:fe:51:4e:8f:71:07:40:f9:02:16:
5a:83:77:be:88:42:c7:88:e3:eb:37:9a:f9:ca:6e:
bd:a6:74:e6:46:50:96:a3:a0:5a:17:7b:e9:be:f2:
af:22:10:5e:02:a9:7b:59:bc:4e:e3:9e:85:f6:74:
ae:cb:6d:fa:01:26:66:ed:ac:6d:47:2f:5e:d2:77:
81:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:DD:A7:91:D3:0C:C6:40:68:DE:1D:91:79:61:03:D0:5D:09:77:8C
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/f92nkdMMxkBo3h2ReWED0F0Jd4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.90.0/24
178.254.168.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:32:2f:9f:be:f7:c9:6b:8f:1e:f2:ef:e4:70:71:3e:f4:f8:
ab:d1:86:f1:ad:ea:6b:91:8c:d1:17:02:0d:21:26:99:45:b3:
05:1b:66:30:c0:5e:83:19:6f:34:cf:a2:46:08:de:19:b9:6f:
3c:58:32:08:df:73:d1:67:a0:92:ad:25:c2:6e:e8:ff:7e:f5:
34:ee:86:29:ec:42:03:c2:cc:3d:c5:8b:f4:fa:1a:5a:87:ab:
24:4e:f0:a0:85:1f:a1:2e:37:58:d9:26:45:7b:15:73:11:4d:
21:4f:88:3a:88:e4:2f:1e:2d:dc:97:ba:cf:68:53:fd:3b:78:
a8:3e:df:04:b9:4c:05:ea:41:4a:8e:7e:9c:31:7f:e6:6b:44:
10:2b:fc:06:af:c7:69:44:14:b7:3b:d5:25:69:db:52:f2:31:
90:eb:c8:f5:a4:a9:c1:5f:59:6a:17:ce:0f:26:00:72:05:c2:
f8:e6:f6:02:10:cf:26:02:1d:46:fc:08:79:80:57:21:c2:71:
b4:5b:e0:aa:47:07:e8:5a:a3:3e:d8:4e:6b:2f:45:f1:9a:c3:
03:ec:85:41:11:96:4a:50:e3:3c:45:5b:1b:64:7b:e8:4a:4f:
b7:9e:9e:3e:97:9a:53:b5:00:38:3d:45:a3:14:eb:a2:d5:fd:
a6:6d:39:12
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYiVnUo9jlDGsUF5QYgoOUFeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5NzEzZWYyNTI3N2UxM2RkNzNmNDQxOTZmZGE1Y2VjMGZk
OWNlMTYwHhcNMjMwNjA3MTEyODEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmRkYTc5MWQzMGNjNjQwNjhkZTFkOTE3OTYxMDNkMDVkMDk3NzhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisY+5Oi4fn2ibgvkCQXw4gi0rJv6
zi220AyMAlondlUTriVXjGzHJ75yT0cvBwlsPb4oqAdULXiOC9jViLx5ZcmG8Ivi
HkI/I97n7tcsNwRNiNvglkfy9Vzm3WF+nxagCkVC2tz1Go9pbyeHeMNMYRIXWCfR
O604qgVtRxJD70Oi1S5D5V8D5/w0Mkw3BWm6n7znZaUE4KNPyyWKsVnJPOzwPKsZ
KJhutc/wz0/HfXQWPEGHsHgSQP5RTo9xB0D5AhZag3e+iELHiOPrN5r5ym69pnTm
RlCWo6BaF3vpvvKvIhBeAql7WbxO456F9nSuy236ASZm7axtRy9e0neBhQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFH/dp5HTDMZAaN4dkXlhA9BdCXeMMB8GA1UdIwQY
MBaAFOlxPvJSd+E91z9EGW/aXOwP2c4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEt
MGY2NmMxODg3OTE2LzEvZjkybmtkTU14a0JvM2gyUmVXRUQwRjBKZDR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEtMGY2NmMxODg3OTE2
LzEvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWRdaAwQA
sv6oMA0GCSqGSIb3DQEBCwUAA4IBAQBOMi+fvvfJa48e8u/kcHE+9Pir0Ybxrepr
kYzRFwINISaZRbMFG2YwwF6DGW80z6JGCN4ZuW88WDII33PRZ6CSrSXCbuj/fvU0
7oYp7EIDwsw9xYv0+hpah6skTvCghR+hLjdY2SZFexVzEU0hT4g6iOQvHi3cl7rP
aFP9O3ioPt8EuUwF6kFKjn6cMX/ma0QQK/wGr8dpRBS3O9UladtS8jGQ68j1pKnB
X1lqF84PJgByBcL45vYCEM8mAh1G/Ah5gFchwnG0W+CqRwfoWqM+2E5rL0XxmsMD
7IVBEZZKUOM8RVsbZHvoSk+3np4+l5pTtQA4PUWjFOui1f2mbTkS
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:41 2024 by rpki-client on console-ams.rpki-client.org