Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/ptVTBRwHOZOIU2Va-2pUjwnQRT4.roa
File: ptVTBRwHOZOIU2Va-2pUjwnQRT4.roa (raw, json)
Hash identifier: 7PMfrBkSCKt44pqDxrICgGJ01aWMgI+2X1hBGWjndHI=
Subject key identifier: A6:D5:53:05:1C:07:39:93:88:53:65:5A:FB:6A:54:8F:09:D0:45:3E
Certificate issuer: /CN=c4cc02f8fa74cf0da81e8ce2943ea7f9ed2a85f4
Certificate serial: 018B0BB970CE705DDE6FB4F3C212188FF92A
Authority key identifier: C4:CC:02:F8:FA:74:CF:0D:A8:1E:8C:E2:94:3E:A7:F9:ED:2A:85:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/ptVTBRwHOZOIU2Va-2pUjwnQRT4.roa
Signing time: Sat 07 Oct 2023 19:59:44 +0000
ROA not before: Sat 07 Oct 2023 19:59:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212325
IP address blocks: 89.22.65.0/24 maxlen: 24
89.22.80.0/23 maxlen: 23
89.22.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 30 Dec 2023 11:14:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:0b:b9:70:ce:70:5d:de:6f:b4:f3:c2:12:18:8f:f9:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4cc02f8fa74cf0da81e8ce2943ea7f9ed2a85f4
Validity
Not Before: Oct 7 19:59:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6d553051c0739938853655afb6a548f09d0453e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1b:5e:31:a2:67:e4:53:b4:0d:62:92:6a:8c:
45:f3:89:af:fb:dd:6f:bd:71:35:5e:e2:2d:37:89:
20:12:5a:df:15:85:a4:d5:e2:55:a0:b1:70:59:67:
0d:72:7d:cd:bb:9c:31:44:28:ab:27:b2:e6:94:7a:
99:ff:a3:41:77:74:9c:95:16:24:7a:9b:fd:d0:79:
62:bc:a8:59:8a:a8:82:42:b7:c3:e5:24:30:f3:26:
5a:75:45:a9:77:bd:0c:9d:dc:44:cc:12:f6:4a:f8:
92:51:ab:dc:36:45:93:6a:c5:8a:47:e9:55:2f:84:
68:f6:0f:a8:0d:ff:ce:8e:8e:6f:5b:f7:c5:9b:fc:
ea:92:be:2d:bf:45:72:0f:f1:d6:fb:b2:b0:e7:d3:
2c:ed:7e:ce:86:76:77:6b:5b:d0:5a:68:f8:bb:0a:
cc:95:30:4a:f0:35:0b:43:a0:9b:1c:a9:19:34:b4:
07:07:d0:aa:26:7a:62:83:31:10:8b:ec:10:ca:76:
e2:20:05:98:a5:db:e2:fb:46:d7:60:b8:b8:8e:80:
a9:1f:7b:25:40:1f:40:d4:bb:bc:49:5a:ce:db:ea:
ab:53:bb:b7:91:c5:d7:fc:a6:13:e9:b9:d8:70:48:
21:17:9c:37:05:8c:91:b0:65:71:9a:9f:27:d6:4d:
86:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D5:53:05:1C:07:39:93:88:53:65:5A:FB:6A:54:8F:09:D0:45:3E
X509v3 Authority Key Identifier:
keyid:C4:CC:02:F8:FA:74:CF:0D:A8:1E:8C:E2:94:3E:A7:F9:ED:2A:85:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/ptVTBRwHOZOIU2Va-2pUjwnQRT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.22.65.0/24
89.22.80.0-89.22.82.255
Signature Algorithm: sha256WithRSAEncryption
b0:44:b8:07:7e:4f:49:8b:c1:60:06:15:ba:4a:e8:3b:5a:ee:
95:4c:97:23:e0:17:93:0d:dd:04:5d:07:b1:ab:42:ba:62:a7:
8e:77:3b:25:44:52:82:86:17:0f:37:f6:35:3d:fa:58:01:98:
23:59:cc:a2:54:48:a6:c4:cb:22:45:12:6d:e1:f0:55:e4:3c:
97:8a:8c:04:65:b4:a1:46:d8:2b:81:0f:80:ed:2b:a6:11:a3:
25:d4:8a:93:b0:08:99:11:ae:86:3f:28:6b:d5:ae:4b:71:ca:
4f:d2:27:28:12:9a:c0:fb:99:83:ed:6f:4e:24:a3:2f:80:9c:
e7:9a:60:2a:8c:de:b2:e8:b2:d9:a8:7d:52:2b:6d:27:0a:33:
e4:da:65:c9:dc:e3:58:dd:dd:ef:68:23:bc:8c:17:59:9a:eb:
af:c1:8d:ac:09:5f:ef:97:8a:32:fc:a3:3e:47:f1:90:41:89:
bc:8b:7a:ff:d8:27:e4:97:3d:ed:98:90:07:fb:22:db:f9:27:
9d:e2:56:27:3c:d8:1c:65:e2:25:5e:06:52:56:06:2e:dc:17:
d0:5e:97:b5:01:97:95:08:79:ce:fd:e7:df:4d:bb:8b:59:51:
ae:cb:c2:74:34:01:17:ae:8c:3e:ab:2c:88:f2:f1:62:45:51:
d5:1e:aa:aa
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYsLuXDOcF3eb7TzwhIYj/kqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0Y2MwMmY4ZmE3NGNmMGRhODFlOGNlMjk0M2VhN2Y5ZWQy
YTg1ZjQwHhcNMjMxMDA3MTk1OTQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNmQ1NTMwNTFjMDczOTkzODg1MzY1NWFmYjZhNTQ4ZjA5ZDA0NTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBteMaJn5FO0DWKSaoxF84mv+91v
vXE1XuItN4kgElrfFYWk1eJVoLFwWWcNcn3Nu5wxRCirJ7LmlHqZ/6NBd3SclRYk
epv90HlivKhZiqiCQrfD5SQw8yZadUWpd70MndxEzBL2SviSUavcNkWTasWKR+lV
L4Ro9g+oDf/Ojo5vW/fFm/zqkr4tv0VyD/HW+7Kw59Ms7X7OhnZ3a1vQWmj4uwrM
lTBK8DULQ6CbHKkZNLQHB9CqJnpigzEQi+wQynbiIAWYpdvi+0bXYLi4joCpH3sl
QB9A1Lu8SVrO2+qrU7u3kcXX/KYT6bnYcEghF5w3BYyRsGVxmp8n1k2GQwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFKbVUwUcBzmTiFNlWvtqVI8J0EU+MB8GA1UdIwQY
MBaAFMTMAvj6dM8NqB6M4pQ+p/ntKoX0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE13Qy1QcDB6dzJvSG96aWxENm4tZTBxaGZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9lMzQ4ZjEtYmI3MC00YjM0LWJlMTIt
MjE5ZTc5ZDg0ZTQzLzEvcHRWVEJSd0hPWk9JVTJWYS0ycFVqd25RUlQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9lMzQ4ZjEtYmI3MC00YjM0LWJlMTItMjE5ZTc5ZDg0ZTQz
LzEveE13Qy1QcDB6dzJvSG96aWxENm4tZTBxaGZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAWRZBMAwD
BARZFlADBABZFlIwDQYJKoZIhvcNAQELBQADggEBALBEuAd+T0mLwWAGFbpK6Dta
7pVMlyPgF5MN3QRdB7GrQrpip453OyVEUoKGFw839jU9+lgBmCNZzKJUSKbEyyJF
Em3h8FXkPJeKjARltKFG2CuBD4DtK6YRoyXUipOwCJkRroY/KGvVrktxyk/SJygS
msD7mYPtb04koy+AnOeaYCqM3rLostmofVIrbScKM+TaZcnc41jd3e9oI7yMF1ma
66/BjawJX++XijL8oz5H8ZBBibyLev/YJ+SXPe2YkAf7Itv5J53iVic82Bxl4iVe
BlJWBi7cF9Bel7UBl5UIec79599Nu4tZUa7LwnQ0AReujD6rLIjy8WJFUdUeqqo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:07 2024 by rpki-client on console-ams.rpki-client.org