Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/2Tk8LFf8WaL4vx6CPQn8nEnyevM.roa
File: 2Tk8LFf8WaL4vx6CPQn8nEnyevM.roa (raw, json)
Hash identifier: HVETFJy5Cl0rZoXHQedRNEVLJy690rGL8KW6Ol5KkEo=
Subject key identifier: D9:39:3C:2C:57:FC:59:A2:F8:BF:1E:82:3D:09:FC:9C:49:F2:7A:F3
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 0185ED38B0C23C7077F09C480F160A1C5D23
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/2Tk8LFf8WaL4vx6CPQn8nEnyevM.roa
Signing time: Thu 26 Jan 2023 08:36:33 +0000
ROA not before: Thu 26 Jan 2023 08:36:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 89.43.45.0/24 maxlen: 24
89.43.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Mar 2023 12:54:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ed:38:b0:c2:3c:70:77:f0:9c:48:0f:16:0a:1c:5d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jan 26 08:36:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9393c2c57fc59a2f8bf1e823d09fc9c49f27af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:25:ae:88:b2:30:17:e0:93:0d:0d:90:aa:2d:
b2:02:23:d0:ba:6d:48:54:68:8b:7c:b0:d3:00:5e:
84:54:71:fb:5e:d8:cb:8c:cc:f3:e1:9b:76:f7:9c:
7c:ae:aa:67:a2:47:52:bf:d6:bd:df:d9:1f:96:b3:
6c:24:4a:57:30:23:33:0e:1b:50:5f:bc:f7:f0:9f:
e4:40:2d:eb:3e:e1:bc:12:e9:ca:a5:35:23:ec:c6:
ff:d1:0e:e2:38:d4:c3:ec:97:79:b2:b4:d3:b6:86:
d8:37:ff:8d:ea:38:32:34:c1:c9:b2:d8:9b:1a:c8:
65:c9:23:52:4c:d2:8f:21:80:a7:15:25:2b:26:8e:
0e:b2:b6:49:ad:b5:10:4e:50:5f:05:87:57:be:db:
64:ff:b7:ab:47:fc:83:c9:2b:ef:ba:36:66:38:95:
a9:d1:2d:e1:29:c4:cf:65:8f:fd:40:1b:3d:42:84:
03:a3:8e:b6:db:1d:b8:26:35:c8:a7:be:35:9c:b5:
ad:9c:21:35:26:1e:16:a7:cb:d9:1f:b0:ce:29:a7:
56:c1:d3:97:41:17:90:55:1f:a0:18:91:54:f6:c7:
d1:5a:d2:8f:eb:28:d6:df:b8:0c:88:73:06:22:6b:
1a:79:42:83:a1:75:76:08:af:9c:51:e2:8e:88:6a:
e1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:39:3C:2C:57:FC:59:A2:F8:BF:1E:82:3D:09:FC:9C:49:F2:7A:F3
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/2Tk8LFf8WaL4vx6CPQn8nEnyevM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.43.45.0-89.43.46.255
Signature Algorithm: sha256WithRSAEncryption
b9:b6:9e:7c:f9:a8:bb:cd:55:0e:75:8a:4e:7e:8b:96:63:3c:
59:f3:c1:9b:2c:32:b6:ca:4f:52:f6:1f:3e:a0:7a:03:7e:dd:
6d:5f:fa:e8:75:b1:a8:52:ad:32:5a:90:5c:db:6b:fa:f3:58:
df:9e:8f:83:ba:3f:3d:42:69:d0:e6:d4:65:93:f6:26:68:fd:
96:df:7c:62:da:81:2d:59:60:38:54:ff:77:34:f7:15:95:f7:
32:b5:7c:16:d6:88:86:1e:61:d1:0e:ed:7f:db:9e:fe:21:ab:
4c:69:ae:8a:b5:64:9d:7e:cb:61:1e:74:84:49:44:a7:25:b9:
9a:a1:e1:bc:ea:1f:36:49:ba:1a:01:74:78:45:1e:f5:8a:1a:
3f:20:64:03:2b:52:08:86:05:10:bc:4f:86:ae:f0:48:7b:fe:
57:20:fc:43:2d:e3:68:05:18:33:be:87:30:29:87:0d:49:ed:
4a:cd:0c:e9:39:d3:01:bd:76:bb:34:e0:c9:2c:c6:cf:29:ff:
34:16:e7:ff:25:0b:f9:aa:87:37:cc:3c:17:13:ca:a0:ef:ea:
db:c3:0d:ab:cc:60:0a:b3:d8:87:00:6e:63:9d:3d:5b:62:1d:
39:aa:b5:f5:58:5c:b4:4c:95:c1:bd:c8:ed:f0:c7:e8:53:91:
37:6f:25:71
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYXtOLDCPHB38JxIDxYKHF0jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNTg5NTJkMzkzOTM1ZjBkM2JjZTgxNGZkOTE3OGQwNDY5
M2FlYjkwHhcNMjMwMTI2MDgzNjMzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTM5M2MyYzU3ZmM1OWEyZjhiZjFlODIzZDA5ZmM5YzQ5ZjI3YWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyWuiLIwF+CTDQ2Qqi2yAiPQum1I
VGiLfLDTAF6EVHH7XtjLjMzz4Zt295x8rqpnokdSv9a939kflrNsJEpXMCMzDhtQ
X7z38J/kQC3rPuG8EunKpTUj7Mb/0Q7iONTD7Jd5srTTtobYN/+N6jgyNMHJstib
GshlySNSTNKPIYCnFSUrJo4OsrZJrbUQTlBfBYdXvttk/7erR/yDySvvujZmOJWp
0S3hKcTPZY/9QBs9QoQDo4622x24JjXIp741nLWtnCE1Jh4Wp8vZH7DOKadWwdOX
QReQVR+gGJFU9sfRWtKP6yjW37gMiHMGImsaeUKDoXV2CK+cUeKOiGrhLwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFNk5PCxX/Fmi+L8egj0J/JxJ8nrzMB8GA1UdIwQY
MBaAFP5YlS05OTXw07zoFP2ReNBGk665MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUt
NWQ0OGI2NWNlNTczLzEvMlRrOExGZjhXYUw0dng2Q1BRbjhuRW55ZXZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUtNWQ0OGI2NWNlNTcz
LzEvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABZKy0D
BABZKy4wDQYJKoZIhvcNAQELBQADggEBALm2nnz5qLvNVQ51ik5+i5ZjPFnzwZss
MrbKT1L2Hz6gegN+3W1f+uh1sahSrTJakFzba/rzWN+ej4O6Pz1CadDm1GWT9iZo
/ZbffGLagS1ZYDhU/3c09xWV9zK1fBbWiIYeYdEO7X/bnv4hq0xproq1ZJ1+y2Ee
dIRJRKcluZqh4bzqHzZJuhoBdHhFHvWKGj8gZAMrUgiGBRC8T4au8Eh7/lcg/EMt
42gFGDO+hzAphw1J7UrNDOk50wG9drs04Mksxs8p/zQW5/8lC/mqhzfMPBcTyqDv
6tvDDavMYAqz2IcAbmOdPVtiHTmqtfVYXLRMlcG9yO3wx+hTkTdvJXE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:38 2024 by rpki-client on console-ams.rpki-client.org