Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/dWFqe8zji__sWb5FMQScajbLcjE.roa
File: dWFqe8zji__sWb5FMQScajbLcjE.roa (raw, json)
Hash identifier: 1BLCN84H8M8k+V3QSyfRh94eR3px45qW+8oRGMU+yPk=
Subject key identifier: 75:61:6A:7B:CC:E3:8B:FF:EC:59:BE:45:31:04:9C:6A:36:CB:72:31
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 01856EA6BA466ED14190FD82CEF8EB0D16F7
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/dWFqe8zji__sWb5FMQScajbLcjE.roa
Signing time: Sun 01 Jan 2023 18:44:58 +0000
ROA not before: Sun 01 Jan 2023 18:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39669
IP address blocks: 89.44.225.0/24 maxlen: 24
89.44.224.0/24 maxlen: 24
89.44.227.0/24 maxlen: 24
89.44.230.0/24 maxlen: 24
89.44.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 15 Jul 2023 14:14:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:ba:46:6e:d1:41:90:fd:82:ce:f8:eb:0d:16:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jan 1 18:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=75616a7bcce38bffec59be4531049c6a36cb7231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:80:c1:bb:60:a5:69:b3:f5:35:b6:b3:f8:57:
58:10:a7:98:1f:c8:8b:c4:be:18:15:f4:52:46:68:
13:24:11:a3:38:5b:16:5e:4c:3a:50:a7:23:31:b6:
56:22:41:7c:3d:e7:26:f4:fd:d2:79:51:98:52:db:
ba:7e:ee:47:26:4f:39:70:56:d5:62:7f:ca:98:0e:
f2:8b:d4:be:dc:86:db:3b:5a:e0:af:3a:39:28:8f:
b5:5c:fd:38:65:d0:34:61:5c:50:2e:ff:7e:22:69:
35:8e:94:58:49:f8:55:02:76:02:0e:ef:f8:8a:4a:
38:24:53:7b:31:97:75:99:52:2e:2b:1d:b1:4c:d9:
78:6f:b1:b2:15:a4:ed:e6:c5:e2:e7:74:74:94:d0:
0b:2c:c1:76:c9:2d:b2:7a:77:d7:d2:5a:cf:3b:29:
6b:c2:e8:05:b2:93:50:5d:f0:14:4d:53:94:76:dc:
40:af:ae:0e:c8:03:a9:b5:a3:4c:d6:0a:90:20:c8:
72:4d:b2:3d:88:e9:6d:f8:d6:49:a6:43:31:29:c5:
73:09:e6:a8:d0:e6:93:b3:93:20:2b:6e:45:5d:7f:
1c:79:dc:d0:72:05:82:bf:48:47:f8:11:e8:55:fb:
59:86:09:39:2f:16:7e:46:fb:3e:2d:d7:36:14:52:
df:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:61:6A:7B:CC:E3:8B:FF:EC:59:BE:45:31:04:9C:6A:36:CB:72:31
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/dWFqe8zji__sWb5FMQScajbLcjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.224.0/23
89.44.227.0/24
89.44.230.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:3e:5d:81:12:4a:fc:1a:a6:17:81:51:1e:7f:19:e4:d8:60:
68:08:5c:f7:70:75:45:7f:39:02:04:2c:c0:ad:f2:f6:4b:ab:
45:08:a5:cc:4d:45:ad:e3:a4:0a:49:15:72:b9:13:35:3b:bb:
18:89:e4:fe:7e:76:6d:48:62:ee:88:28:3a:df:50:28:51:42:
cb:84:f4:06:75:d1:46:e9:2a:03:2e:ee:06:4b:b6:5a:83:e1:
b7:cb:e4:e9:3a:55:4d:23:64:2b:32:31:4a:fd:40:e5:a6:a8:
b9:4d:89:b1:0b:e3:2e:f2:45:de:97:76:74:6a:5d:23:81:0f:
8e:15:64:e3:28:e5:b2:a3:7e:f3:2d:b6:78:cb:78:1b:0b:a1:
08:87:d1:87:7e:61:af:5f:5f:d6:33:b8:d4:87:47:47:c6:1b:
df:e4:0c:5e:b8:5f:eb:80:d5:2d:a0:5f:c2:0e:c4:ac:90:f0:
f9:63:10:72:35:30:7e:95:86:fc:72:91:9a:d6:c0:73:fc:fa:
3f:70:98:c4:5d:72:ed:f5:c3:1c:b7:86:ec:e7:bc:9b:af:da:
66:1e:f8:04:57:ad:7e:b3:7d:21:0e:f7:15:5f:02:50:97:8b:
3b:32:b1:1e:b0:60:84:82:d3:f6:20:47:09:63:02:c1:67:e2:
5b:99:a7:70
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVuprpGbtFBkP2CzvjrDRb3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNTg5NTJkMzkzOTM1ZjBkM2JjZTgxNGZkOTE3OGQwNDY5
M2FlYjkwHhcNMjMwMTAxMTg0NDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTYxNmE3YmNjZTM4YmZmZWM1OWJlNDUzMTA0OWM2YTM2Y2I3MjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIDBu2ClabP1Nbaz+FdYEKeYH8iL
xL4YFfRSRmgTJBGjOFsWXkw6UKcjMbZWIkF8Pecm9P3SeVGYUtu6fu5HJk85cFbV
Yn/KmA7yi9S+3IbbO1rgrzo5KI+1XP04ZdA0YVxQLv9+Imk1jpRYSfhVAnYCDu/4
iko4JFN7MZd1mVIuKx2xTNl4b7GyFaTt5sXi53R0lNALLMF2yS2yenfX0lrPOylr
wugFspNQXfAUTVOUdtxAr64OyAOptaNM1gqQIMhyTbI9iOlt+NZJpkMxKcVzCeao
0OaTs5MgK25FXX8cedzQcgWCv0hH+BHoVftZhgk5LxZ+Rvs+Ldc2FFLf4QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHVhanvM44v/7Fm+RTEEnGo2y3IxMB8GA1UdIwQY
MBaAFP5YlS05OTXw07zoFP2ReNBGk665MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUt
NWQ0OGI2NWNlNTczLzEvZFdGcWU4emppX19zV2I1Rk1RU2NhamJMY2pFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUtNWQ0OGI2NWNlNTcz
LzEvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBWSzgAwQA
WSzjAwQBWSzmMA0GCSqGSIb3DQEBCwUAA4IBAQCwPl2BEkr8GqYXgVEefxnk2GBo
CFz3cHVFfzkCBCzArfL2S6tFCKXMTUWt46QKSRVyuRM1O7sYieT+fnZtSGLuiCg6
31AoUULLhPQGddFG6SoDLu4GS7Zag+G3y+TpOlVNI2QrMjFK/UDlpqi5TYmxC+Mu
8kXel3Z0al0jgQ+OFWTjKOWyo37zLbZ4y3gbC6EIh9GHfmGvX1/WM7jUh0dHxhvf
5AxeuF/rgNUtoF/CDsSskPD5YxByNTB+lYb8cpGa1sBz/Po/cJjEXXLt9cMct4bs
57ybr9pmHvgEV61+s30hDvcVXwJQl4s7MrEesGCEgtP2IEcJYwLBZ+Jbmadw
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:38 2024 by rpki-client on console-ams.rpki-client.org