Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/abx8vdePzIUX_XDRf2-3Ebc6fSY.roa
File: abx8vdePzIUX_XDRf2-3Ebc6fSY.roa (raw, json)
Hash identifier: uLYjHZFBoI2u9cKZSBlxAsM+ebqFzCoiIsi4yXKkMp4=
Subject key identifier: 69:BC:7C:BD:D7:8F:CC:85:17:FD:70:D1:7F:6F:B7:11:B7:3A:7D:26
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 0190ABBA0A1A661BB9A594FA7E409F240AEF
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/abx8vdePzIUX_XDRf2-3Ebc6fSY.roa
Signing time: Sat 13 Jul 2024 10:53:34 +0000
ROA not before: Sat 13 Jul 2024 10:53:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198154
IP address blocks: 89.44.241.0/24 maxlen: 24
89.44.242.0/24 maxlen: 24
89.46.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 03 Aug 2024 15:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ab:ba:0a:1a:66:1b:b9:a5:94:fa:7e:40:9f:24:0a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Jul 13 10:53:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69bc7cbdd78fcc8517fd70d17f6fb711b73a7d26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c2:de:9d:ea:b5:25:c7:0e:c8:e3:5f:7d:b6:
54:28:2d:4f:a3:80:d5:7a:3e:18:fc:30:42:36:aa:
3a:ac:5e:f5:1b:38:b0:91:28:45:bc:84:da:a1:d6:
56:9a:ed:99:0e:ec:d8:e8:15:8f:33:5e:98:25:ca:
f5:d0:e1:65:3b:cc:1c:46:02:58:b2:0d:5c:9c:ec:
08:fb:2e:90:27:e3:76:4a:b8:47:27:12:36:19:77:
aa:49:04:a2:58:12:41:4c:41:8f:29:98:f4:c5:32:
1e:c5:cb:e5:09:e6:3f:b7:2b:f1:18:f5:03:d8:5d:
ba:14:b8:32:19:1b:7d:a3:e7:b8:66:52:ef:46:c6:
a3:97:40:a3:34:de:73:2f:ed:a2:5f:51:7b:d2:94:
48:64:df:9c:56:78:41:40:ab:8e:21:01:e8:4e:13:
12:f8:7d:9d:49:0f:65:0e:64:e6:88:5f:c3:c8:0b:
60:a5:8e:d3:19:81:25:ec:b8:45:9d:7b:37:4c:ea:
27:7f:79:07:5f:d3:80:41:75:c7:56:85:7f:4c:75:
c2:d9:22:96:28:54:d9:91:6a:fb:07:81:4c:f9:de:
20:14:58:7c:7b:e1:fe:e5:14:02:87:13:f4:9f:ea:
70:7f:18:3f:06:37:d4:4a:79:c8:14:b7:2b:18:4e:
5b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:BC:7C:BD:D7:8F:CC:85:17:FD:70:D1:7F:6F:B7:11:B7:3A:7D:26
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/abx8vdePzIUX_XDRf2-3Ebc6fSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.241.0-89.44.242.255
89.46.217.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:8e:9f:96:4d:7d:c7:08:a1:11:16:9a:2e:d4:36:f6:15:a5:
18:20:d9:ed:c6:68:23:ea:39:83:db:cb:c8:23:e6:ce:f9:97:
20:31:06:cb:be:3d:db:26:74:f5:11:c2:68:70:6a:2f:d5:26:
25:36:fc:d3:79:11:e9:dc:94:93:ed:de:2d:39:9a:5f:ac:38:
55:57:89:f6:aa:5e:98:29:73:e1:b5:b2:3b:ad:a9:14:6a:35:
4f:19:df:7a:80:da:20:38:96:2c:b2:1b:71:f5:56:fc:71:99:
20:c6:fc:99:46:ab:76:06:a7:47:54:05:88:81:dd:4e:e3:53:
e0:94:fd:f0:6d:3a:5a:94:33:22:39:6b:3c:74:03:40:69:c9:
6d:c4:95:06:80:9e:0c:39:dc:f6:89:60:bd:55:70:51:6e:05:
ef:e6:dc:54:e6:96:c4:cd:ab:a7:82:d1:23:d7:99:17:3e:8a:
51:ee:52:d2:9e:eb:d5:b7:79:90:eb:fe:e1:dd:0f:fc:01:cc:
67:e5:1b:e4:17:35:e6:d9:c7:f2:a0:2a:00:cd:91:a9:fc:6c:
2c:3c:ae:00:e5:fd:8e:49:c9:61:f0:53:d5:e4:8f:c1:49:57:
c9:e8:74:bd:d3:c0:cb:1e:c5:69:18:50:87:22:59:2c:a0:31:
a5:29:c8:34
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZCrugoaZhu5pZT6fkCfJArvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZGIzOGIzNDNkYTJkMTE5MzA5ZWRhYTE5YzdhNzg4NzAz
MjdlYmUwHhcNMjQwNzEzMTA1MzM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OWJjN2NiZGQ3OGZjYzg1MTdmZDcwZDE3ZjZmYjcxMWI3M2E3ZDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcLeneq1JccOyONffbZUKC1Po4DV
ej4Y/DBCNqo6rF71GziwkShFvITaodZWmu2ZDuzY6BWPM16YJcr10OFlO8wcRgJY
sg1cnOwI+y6QJ+N2SrhHJxI2GXeqSQSiWBJBTEGPKZj0xTIexcvlCeY/tyvxGPUD
2F26FLgyGRt9o+e4ZlLvRsajl0CjNN5zL+2iX1F70pRIZN+cVnhBQKuOIQHoThMS
+H2dSQ9lDmTmiF/DyAtgpY7TGYEl7LhFnXs3TOonf3kHX9OAQXXHVoV/THXC2SKW
KFTZkWr7B4FM+d4gFFh8e+H+5RQChxP0n+pwfxg/BjfUSnnIFLcrGE5b1QIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFGm8fL3Xj8yFF/1w0X9vtxG3On0mMB8GA1UdIwQY
MBaAFG3bOLND2i0RkwntqhnHp4hwMn6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQt
M2RmYTUxMGQ2YjE2LzEvYWJ4OHZkZVB6SVVYX1hEUmYyLTNFYmM2ZlNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQtM2RmYTUxMGQ2YjE2
LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBABZLPED
BABZLPIDBABZLtkwDQYJKoZIhvcNAQELBQADggEBAB6On5ZNfccIoREWmi7UNvYV
pRgg2e3GaCPqOYPby8gj5s75lyAxBsu+PdsmdPURwmhwai/VJiU2/NN5EenclJPt
3i05ml+sOFVXifaqXpgpc+G1sjutqRRqNU8Z33qA2iA4liyyG3H1VvxxmSDG/JlG
q3YGp0dUBYiB3U7jU+CU/fBtOlqUMyI5azx0A0BpyW3ElQaAngw53PaJYL1VcFFu
Be/m3FTmlsTNq6eC0SPXmRc+ilHuUtKe69W3eZDr/uHdD/wBzGflG+QXNebZx/Kg
KgDNkan8bCw8rgDl/Y5JyWHwU9Xkj8FJV8nodL3TwMsexWkYUIciWSygMaUpyDQ=
-----END CERTIFICATE-----
Generated at Sat Aug 3 17:37:48 2024 by rpki-client on console-fra.rpki-client.org