Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/eCKBUIrjx0dMXQYqeS-sRx6Ui50.roa
File: eCKBUIrjx0dMXQYqeS-sRx6Ui50.roa (raw, json)
Hash identifier: NeiHHUTkhJnOy8biNQgbWju5VMFFFx24omUexRoKaSE=
Subject key identifier: 78:22:81:50:8A:E3:C7:47:4C:5D:06:2A:79:2F:AC:47:1E:94:8B:9D
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 0190F35C82C99CA3ABD2B282E8A280DD0E2D
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/eCKBUIrjx0dMXQYqeS-sRx6Ui50.roa
Signing time: Sat 27 Jul 2024 08:44:04 +0000
ROA not before: Sat 27 Jul 2024 08:44:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200436
IP address blocks: 89.42.44.0/24 maxlen: 24
89.42.45.0/24 maxlen: 24
89.42.46.0/24 maxlen: 24
89.42.47.0/24 maxlen: 24
185.3.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 03 Aug 2024 15:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:f3:5c:82:c9:9c:a3:ab:d2:b2:82:e8:a2:80:dd:0e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Jul 27 08:44:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=782281508ae3c7474c5d062a792fac471e948b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:be:98:7e:d8:8a:12:c3:35:e9:cc:be:e5:dc:
ff:33:e8:78:61:cc:89:a0:f3:2b:04:4e:7f:3d:d2:
4e:20:5a:5d:fd:dc:67:a8:7f:be:a8:61:d5:1a:f9:
f3:73:60:2a:68:5b:82:b5:38:18:2e:ae:ca:cf:24:
0c:2d:3a:08:1b:4e:3a:1c:9a:b5:ee:74:32:0f:aa:
2b:a5:14:28:23:c3:6b:42:95:24:b1:35:99:59:fe:
ae:0c:55:1b:90:19:d9:3f:a9:27:6c:f8:b1:ed:45:
fa:08:f4:90:5c:37:f7:a3:d5:d9:c0:13:4b:55:5a:
48:7e:31:f4:20:92:e6:c0:21:26:5c:a8:1b:61:1f:
7b:dd:82:55:d9:9e:ba:a2:07:07:df:99:02:a0:de:
03:43:67:a2:c3:2f:6b:e7:b8:4d:14:aa:2d:9a:e0:
1c:3c:25:4c:9f:84:ae:0a:6f:e3:d3:13:15:6a:b8:
75:3d:f1:c6:c9:09:37:9b:4d:33:e9:bd:91:c4:73:
50:8a:69:99:c6:2d:93:6d:fe:70:8e:b4:f0:ee:02:
26:3b:14:71:d3:31:18:57:41:a5:ac:eb:59:db:38:
a9:1d:8b:b1:a2:69:9a:cb:e5:9c:9e:04:58:ec:b9:
00:9d:ca:2e:2e:91:b1:53:5c:32:78:75:ec:b8:2d:
f7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:22:81:50:8A:E3:C7:47:4C:5D:06:2A:79:2F:AC:47:1E:94:8B:9D
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/eCKBUIrjx0dMXQYqeS-sRx6Ui50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.44.0/22
185.3.200.0/24
Signature Algorithm: sha256WithRSAEncryption
19:49:1f:31:11:be:ce:6a:89:c9:cb:b4:74:67:cb:7f:6e:a5:
9a:54:bf:ac:37:86:b2:f8:0a:0f:90:e9:b1:97:f9:b1:ac:8c:
8b:4b:a0:b5:a0:5c:4f:b7:f0:c0:eb:bb:dd:6b:bd:c0:c3:7f:
d3:f5:34:56:0a:bc:8e:73:c5:7f:7b:d0:cf:36:91:07:1d:9c:
6b:fa:c7:ee:8a:b5:92:eb:b2:76:cc:c2:86:6f:a0:d6:87:0c:
71:b7:70:97:6f:d7:91:5e:b3:31:08:e6:76:b8:15:5a:d2:70:
de:50:fb:f6:b9:fd:82:cc:75:56:20:33:0e:a7:cc:ca:cc:59:
2f:2f:aa:d8:be:30:a0:0f:e3:bb:68:11:17:d1:62:bb:e9:02:
f5:a4:aa:fb:fa:6e:1e:ea:2d:6a:43:6e:66:76:27:87:07:03:
8b:ce:ba:1b:6b:bb:a8:72:57:f1:d4:03:8d:9f:b3:e9:2a:f7:
ae:bd:e4:f0:08:1b:6c:76:20:5e:7a:f7:c8:ee:19:35:03:3b:
f0:76:38:3b:52:41:24:26:14:18:9d:8c:96:f1:fc:ac:4f:b0:
89:64:67:d6:6c:2d:10:7b:05:52:ea:f7:f3:d5:bc:52:6e:e5:
80:af:76:39:06:52:df:a5:26:b6:3f:e2:6f:36:95:29:f3:96:
27:6d:5d:1b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZDzXILJnKOr0rKC6KKA3Q4tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZGIzOGIzNDNkYTJkMTE5MzA5ZWRhYTE5YzdhNzg4NzAz
MjdlYmUwHhcNMjQwNzI3MDg0NDA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODIyODE1MDhhZTNjNzQ3NGM1ZDA2MmE3OTJmYWM0NzFlOTQ4YjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb6YftiKEsM16cy+5dz/M+h4YcyJ
oPMrBE5/PdJOIFpd/dxnqH++qGHVGvnzc2AqaFuCtTgYLq7KzyQMLToIG046HJq1
7nQyD6orpRQoI8NrQpUksTWZWf6uDFUbkBnZP6knbPix7UX6CPSQXDf3o9XZwBNL
VVpIfjH0IJLmwCEmXKgbYR973YJV2Z66ogcH35kCoN4DQ2eiwy9r57hNFKotmuAc
PCVMn4SuCm/j0xMVarh1PfHGyQk3m00z6b2RxHNQimmZxi2Tbf5wjrTw7gImOxRx
0zEYV0GlrOtZ2zipHYuxommay+WcngRY7LkAncouLpGxU1wyeHXsuC33QwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHgigVCK48dHTF0GKnkvrEcelIudMB8GA1UdIwQY
MBaAFG3bOLND2i0RkwntqhnHp4hwMn6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQt
M2RmYTUxMGQ2YjE2LzEvZUNLQlVJcmp4MGRNWFFZcWVTLXNSeDZVaTUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQtM2RmYTUxMGQ2YjE2
LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCWSosAwQA
uQPIMA0GCSqGSIb3DQEBCwUAA4IBAQAZSR8xEb7OaonJy7R0Z8t/bqWaVL+sN4ay
+AoPkOmxl/mxrIyLS6C1oFxPt/DA67vda73Aw3/T9TRWCryOc8V/e9DPNpEHHZxr
+sfuirWS67J2zMKGb6DWhwxxt3CXb9eRXrMxCOZ2uBVa0nDeUPv2uf2CzHVWIDMO
p8zKzFkvL6rYvjCgD+O7aBEX0WK76QL1pKr7+m4e6i1qQ25mdieHBwOLzroba7uo
clfx1AONn7PpKveuveTwCBtsdiBeevfI7hk1Azvwdjg7UkEkJhQYnYyW8fysT7CJ
ZGfWbC0QewVS6vfz1bxSbuWAr3Y5BlLfpSa2P+JvNpUp85YnbV0b
-----END CERTIFICATE-----
Generated at Sat Aug 3 18:05:19 2024 by rpki-client on console-ams.rpki-client.org