Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/Gp2u0jBbTW_RAoTYB8KzRf6HAQk.roa
File: Gp2u0jBbTW_RAoTYB8KzRf6HAQk.roa (raw, json)
Hash identifier: 2NWI05Xzu46PzTlSoezOCe+rSefS3/8BpjV+QwszoB4=
Subject key identifier: 1A:9D:AE:D2:30:5B:4D:6F:D1:02:84:D8:07:C2:B3:45:FE:87:01:09
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 018571F101E7E42A8D520A3E47E2C5D4BEB8
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/Gp2u0jBbTW_RAoTYB8KzRf6HAQk.roa
Signing time: Mon 02 Jan 2023 10:04:58 +0000
ROA not before: Mon 02 Jan 2023 10:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201343
IP address blocks: 89.46.136.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:f1:01:e7:e4:2a:8d:52:0a:3e:47:e2:c5:d4:be:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 10:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a9daed2305b4d6fd10284d807c2b345fe870109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a9:b8:8a:9b:bd:56:c2:02:05:9b:3b:15:d9:
b6:5c:bc:31:19:1e:08:cd:a5:1c:e0:6d:d0:0a:82:
60:4b:3b:06:ce:de:3b:58:0c:e4:39:c2:0c:b8:2a:
03:96:b9:0d:c9:64:06:4b:06:58:e4:21:3f:fb:7a:
cd:9b:61:6d:d9:d9:99:bc:ea:59:31:31:11:3e:b9:
bf:72:2e:1e:36:37:0d:ac:a6:71:6e:32:c8:6c:1f:
ba:de:5f:75:fc:a3:4a:a7:73:71:b4:cb:3c:59:1b:
72:85:0e:7d:47:aa:de:c6:c8:a7:cb:a0:fc:ec:3e:
25:71:9d:c0:b7:81:04:d2:1c:9a:c3:e2:ad:d0:7f:
ae:a4:c2:4f:66:a0:82:7e:52:22:ff:4d:f7:97:57:
01:c9:b5:58:37:ad:26:63:28:3a:98:f5:c3:9e:f1:
14:74:44:ac:c4:27:d2:71:fc:e3:8f:43:3d:ac:c7:
f1:7f:37:5b:55:36:62:ed:e4:0a:ee:e1:61:a5:7e:
4c:b4:0f:53:a5:29:df:62:dd:4e:75:ab:3e:00:f9:
ee:21:96:c3:c2:3a:c7:4c:af:49:8e:2b:db:8f:79:
b7:95:0e:1b:06:45:d3:20:81:fc:01:34:1b:e2:58:
8a:f3:a9:1d:f0:94:a0:41:cc:e4:54:6b:d0:d8:b4:
e4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:9D:AE:D2:30:5B:4D:6F:D1:02:84:D8:07:C2:B3:45:FE:87:01:09
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/Gp2u0jBbTW_RAoTYB8KzRf6HAQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.136.0/21
Signature Algorithm: sha256WithRSAEncryption
01:fb:cc:77:38:e8:35:b7:29:69:d7:fa:f4:bb:6e:64:c9:1d:
25:26:b3:58:64:05:eb:18:9f:75:2e:56:ac:25:b4:2d:62:08:
eb:27:96:c5:eb:14:69:10:2e:2a:dc:bf:d9:0e:3a:ee:08:1f:
ae:64:69:25:79:50:74:56:00:94:3c:cc:ee:85:8a:53:c1:d3:
00:0e:dc:09:61:18:54:8a:6e:86:bc:cc:4b:ee:e8:58:89:3e:
02:33:e3:bb:ba:42:6a:d1:93:d8:28:44:e3:46:65:29:5f:35:
91:2e:59:0f:ce:1f:3e:1c:89:af:1e:50:02:e3:b6:fb:8e:0e:
60:2c:f0:b2:3e:aa:30:3a:93:49:df:7b:d0:aa:ef:62:96:f6:
6b:96:8b:1d:6a:3a:31:6a:02:eb:b8:4d:15:3b:93:14:ba:13:
d9:65:07:6b:32:9e:0b:67:b5:cc:d1:be:72:e5:6d:2f:7f:d5:
3d:52:63:cb:af:a8:9f:94:b7:30:c3:09:4a:f2:2d:02:8d:46:
30:e3:d9:ac:d8:36:98:23:55:a7:1e:29:52:15:75:11:7c:51:
43:e7:d6:6b:3e:21:ec:61:b7:a3:38:9a:14:e0:b1:67:c9:4b:
13:3b:97:c3:0f:6f:77:6b:c4:37:03:74:40:5d:76:6b:dc:b8:
cb:f0:6d:55
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVx8QHn5CqNUgo+R+LF1L64MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy
MGI3M2UwHhcNMjMwMTAyMTAwNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTlkYWVkMjMwNWI0ZDZmZDEwMjg0ZDgwN2MyYjM0NWZlODcwMTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqam4ipu9VsICBZs7Fdm2XLwxGR4I
zaUc4G3QCoJgSzsGzt47WAzkOcIMuCoDlrkNyWQGSwZY5CE/+3rNm2Ft2dmZvOpZ
MTERPrm/ci4eNjcNrKZxbjLIbB+63l91/KNKp3NxtMs8WRtyhQ59R6rexsiny6D8
7D4lcZ3At4EE0hyaw+Kt0H+upMJPZqCCflIi/033l1cBybVYN60mYyg6mPXDnvEU
dESsxCfScfzjj0M9rMfxfzdbVTZi7eQK7uFhpX5MtA9TpSnfYt1Odas+APnuIZbD
wjrHTK9Jjivbj3m3lQ4bBkXTIIH8ATQb4liK86kd8JSgQczkVGvQ2LTkbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBqdrtIwW01v0QKE2AfCs0X+hwEJMB8GA1UdIwQY
MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt
Y2YwNmQxOTgzYmExLzEvR3AydTBqQmJUV19SQW9UWUI4S3pSZjZIQVFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx
LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDWS6IMA0G
CSqGSIb3DQEBCwUAA4IBAQAB+8x3OOg1tylp1/r0u25kyR0lJrNYZAXrGJ91Llas
JbQtYgjrJ5bF6xRpEC4q3L/ZDjruCB+uZGkleVB0VgCUPMzuhYpTwdMADtwJYRhU
im6GvMxL7uhYiT4CM+O7ukJq0ZPYKETjRmUpXzWRLlkPzh8+HImvHlAC47b7jg5g
LPCyPqowOpNJ33vQqu9ilvZrlosdajoxagLruE0VO5MUuhPZZQdrMp4LZ7XM0b5y
5W0vf9U9UmPLr6iflLcwwwlK8i0CjUYw49ms2DaYI1WnHilSFXURfFFD59ZrPiHs
YbejOJoU4LFnyUsTO5fDD293a8Q3A3RAXXZr3LjL8G1V
-----END CERTIFICATE-----
Generated at Tue Jan 2 11:51:36 2024 by rpki-client on console-fra.rpki-client.org