Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/Encx7OKoZrlsuXnPde22B1wzJNA.roa
File: Encx7OKoZrlsuXnPde22B1wzJNA.roa (raw, json)
Hash identifier: SyfadiKSGuajkD4rNAOhbIzo7zm7jmWr6ZcH+0+hlGE=
Subject key identifier: 12:77:31:EC:E2:A8:66:B9:6C:B9:79:CF:75:ED:B6:07:5C:33:24:D0
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 0190C5B902A2BE2E8989C2A0956EAB89B402
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/Encx7OKoZrlsuXnPde22B1wzJNA.roa
Signing time: Thu 18 Jul 2024 12:02:34 +0000
ROA not before: Thu 18 Jul 2024 12:02:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204203
IP address blocks: 89.44.240.0/24 maxlen: 24
185.239.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 03 Aug 2024 15:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c5:b9:02:a2:be:2e:89:89:c2:a0:95:6e:ab:89:b4:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Jul 18 12:02:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=127731ece2a866b96cb979cf75edb6075c3324d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5d:41:09:fe:85:0a:5b:88:be:7f:03:17:32:
11:b3:60:41:c0:09:b5:4b:3c:e3:c9:7f:3f:a0:fe:
88:43:7e:1e:e7:2b:ae:6d:3f:27:86:30:91:81:89:
2e:72:93:40:23:1f:7f:3f:0f:66:f3:9a:7b:47:fa:
57:55:f1:06:c6:06:83:12:c8:6f:ce:45:4a:c4:14:
62:af:fa:04:6e:a9:c4:67:9f:b7:06:a7:38:61:36:
80:f8:43:e8:d8:27:ea:51:1c:99:e1:4e:96:6e:af:
9e:7e:8c:3c:4c:c0:da:10:ec:91:6c:99:b7:43:cf:
17:21:36:50:8f:e2:48:c8:f3:93:70:a5:46:00:73:
be:3a:64:f9:0e:11:e6:47:2f:61:e8:e2:8c:eb:7f:
98:bb:2b:fe:02:a2:85:17:60:11:d3:9d:95:2a:0a:
72:d5:85:0f:59:11:24:ea:78:b7:3f:a5:06:2e:4f:
4d:63:80:d5:df:07:64:a4:8d:94:91:22:3a:8b:b4:
93:36:14:27:30:0f:7d:06:a8:63:3e:7d:2e:86:e7:
51:61:c6:de:2f:48:1f:8b:d0:0b:75:22:b4:79:ca:
05:15:03:3b:48:ff:ea:5f:a4:64:39:67:85:a4:6f:
66:a4:25:ac:11:cf:28:b3:4c:ac:a5:ae:cb:12:d6:
76:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:77:31:EC:E2:A8:66:B9:6C:B9:79:CF:75:ED:B6:07:5C:33:24:D0
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/Encx7OKoZrlsuXnPde22B1wzJNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.240.0/24
185.239.1.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:40:db:be:ba:a4:0e:ee:60:72:60:66:49:83:7b:ee:76:e3:
1c:c2:97:0e:5e:98:30:5d:f2:3f:b7:59:d2:1d:94:c5:ac:24:
ff:a2:f6:58:e2:fe:42:de:4e:c2:47:11:51:94:bd:0d:b2:da:
61:2a:92:79:60:6e:29:4f:80:d1:2e:2e:52:0b:ac:79:8c:e1:
99:db:77:c8:76:a8:df:a0:99:52:1f:b9:3f:bb:f8:2e:86:2a:
6b:1d:e3:55:2e:f4:b5:72:88:e9:0f:8f:7a:6e:0e:e2:fc:0b:
f3:7d:fe:b5:63:75:9e:8f:6c:38:98:df:c9:0b:5b:d6:87:ea:
0d:70:95:c0:29:9c:ca:10:4f:a3:12:f8:ca:41:62:a6:a4:b5:
2e:68:40:39:08:a9:27:1e:42:56:ce:fd:f4:1c:e4:ff:c3:33:
8a:82:55:b7:a9:11:ed:ea:23:f6:40:9f:d1:ee:2e:dd:e5:ce:
80:77:ef:03:c0:75:3d:3f:dd:8a:c6:cc:f7:8a:aa:ef:36:53:
5e:fa:92:e1:0c:ab:0b:dd:c8:b0:6f:31:2f:c6:ee:05:a0:cd:
02:c9:48:ec:aa:47:8d:ad:08:67:72:13:da:36:68:3b:26:12:
06:d1:53:f5:8b:03:0b:57:d8:77:95:5a:78:91:58:2b:11:56:
cf:bc:66:78
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZDFuQKivi6JicKglW6ribQCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZGIzOGIzNDNkYTJkMTE5MzA5ZWRhYTE5YzdhNzg4NzAz
MjdlYmUwHhcNMjQwNzE4MTIwMjM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjc3MzFlY2UyYTg2NmI5NmNiOTc5Y2Y3NWVkYjYwNzVjMzMyNGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvl1BCf6FCluIvn8DFzIRs2BBwAm1
SzzjyX8/oP6IQ34e5yuubT8nhjCRgYkucpNAIx9/Pw9m85p7R/pXVfEGxgaDEshv
zkVKxBRir/oEbqnEZ5+3Bqc4YTaA+EPo2CfqURyZ4U6Wbq+efow8TMDaEOyRbJm3
Q88XITZQj+JIyPOTcKVGAHO+OmT5DhHmRy9h6OKM63+Yuyv+AqKFF2AR052VKgpy
1YUPWREk6ni3P6UGLk9NY4DV3wdkpI2UkSI6i7STNhQnMA99BqhjPn0uhudRYcbe
L0gfi9ALdSK0ecoFFQM7SP/qX6RkOWeFpG9mpCWsEc8os0yspa7LEtZ2UwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBJ3MeziqGa5bLl5z3XttgdcMyTQMB8GA1UdIwQY
MBaAFG3bOLND2i0RkwntqhnHp4hwMn6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQt
M2RmYTUxMGQ2YjE2LzEvRW5jeDdPS29acmxzdVhuUGRlMjJCMXd6Sk5BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQtM2RmYTUxMGQ2YjE2
LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWSzwAwQA
ue8BMA0GCSqGSIb3DQEBCwUAA4IBAQAqQNu+uqQO7mByYGZJg3vuduMcwpcOXpgw
XfI/t1nSHZTFrCT/ovZY4v5C3k7CRxFRlL0NstphKpJ5YG4pT4DRLi5SC6x5jOGZ
23fIdqjfoJlSH7k/u/guhiprHeNVLvS1cojpD496bg7i/Avzff61Y3Wej2w4mN/J
C1vWh+oNcJXAKZzKEE+jEvjKQWKmpLUuaEA5CKknHkJWzv30HOT/wzOKglW3qRHt
6iP2QJ/R7i7d5c6Ad+8DwHU9P92Kxsz3iqrvNlNe+pLhDKsL3ciwbzEvxu4FoM0C
yUjsqkeNrQhnchPaNmg7JhIG0VP1iwMLV9h3lVp4kVgrEVbPvGZ4
-----END CERTIFICATE-----
Generated at Sat Aug 3 17:37:48 2024 by rpki-client on console-fra.rpki-client.org