Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/8n0ceXdKhVkbPjFk44ds7wp1R7g.roa
File: 8n0ceXdKhVkbPjFk44ds7wp1R7g.roa (raw, json)
Hash identifier: JgmEAEQWH4qeET2OYseFNL4G9URv/xgd6zrsUtm7MyA=
Subject key identifier: F2:7D:1C:79:77:4A:85:59:1B:3E:31:64:E3:87:6C:EF:0A:75:47:B8
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0185BBA43F27E0679D9FF889B7E9CEAD3305
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/8n0ceXdKhVkbPjFk44ds7wp1R7g.roa
Signing time: Mon 16 Jan 2023 17:33:01 +0000
ROA not before: Mon 16 Jan 2023 17:33:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 89.36.140.0/24 maxlen: 24
89.40.36.0/24 maxlen: 24
86.105.4.0/24 maxlen: 24
46.102.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Jan 2023 04:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:bb:a4:3f:27:e0:67:9d:9f:f8:89:b7:e9:ce:ad:33:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 16 17:33:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f27d1c79774a85591b3e3164e3876cef0a7547b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8a:47:95:f3:45:1b:9c:35:bb:a3:75:55:8d:
04:ab:05:1a:b6:db:6c:da:6d:f1:09:29:b8:84:5d:
e6:2c:25:7b:18:a6:de:82:3d:cc:eb:db:5d:ea:02:
58:61:e3:36:a9:8d:06:c6:1c:94:47:a1:81:d7:b0:
50:be:de:fe:38:8e:d0:2c:38:6c:83:5d:39:e9:4c:
13:3c:86:ec:62:9b:b9:52:11:55:34:dc:00:33:8c:
3a:f1:86:27:11:d9:9f:99:b3:80:05:7b:17:c0:af:
ee:8c:0d:b6:2c:f0:8e:17:6c:a1:60:0e:b5:fe:9e:
eb:04:9b:a1:5b:5d:90:3c:f8:ba:6a:04:75:07:3c:
41:67:a2:ec:85:9a:89:4d:6f:61:67:0b:5e:83:37:
b9:97:6d:66:83:a1:c7:5c:04:61:1b:0f:6e:25:f5:
aa:87:6f:21:73:90:73:de:44:7f:f4:35:71:8d:e8:
9c:01:8e:07:64:de:af:1c:c8:9e:4f:fc:00:14:2f:
df:56:8a:8e:48:72:dc:21:d0:8a:8e:d7:14:fe:0a:
f1:a9:b4:60:cc:3a:30:3c:8b:5b:dc:c2:97:93:e9:
7f:3c:c6:ed:0d:81:e2:1e:9e:09:93:97:0d:cc:37:
d2:e7:4e:ad:75:52:a4:fd:71:38:8d:18:cd:39:41:
c7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:7D:1C:79:77:4A:85:59:1B:3E:31:64:E3:87:6C:EF:0A:75:47:B8
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/8n0ceXdKhVkbPjFk44ds7wp1R7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.237.0/24
86.105.4.0/24
89.36.140.0/24
89.40.36.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:ca:cc:d6:7e:8a:03:f9:e7:5d:ef:94:80:99:14:12:f0:dd:
28:a3:26:a6:85:00:60:17:ca:7d:89:cc:e2:38:66:fb:09:e0:
37:c9:50:5a:cc:bc:52:d8:9b:91:c1:21:18:5c:9c:a7:ea:f0:
99:99:0b:10:d2:68:d1:73:96:89:ae:2b:c7:82:4e:77:19:23:
f2:43:4f:1d:1a:52:3f:95:b4:dc:a9:2f:0c:2f:a8:1e:a7:77:
27:56:25:98:10:94:c7:8e:e0:f1:0f:f4:91:9e:82:31:1f:bf:
c0:bf:d9:09:ce:79:7b:90:c2:37:76:25:76:2a:e8:17:80:e2:
cb:43:d4:05:ae:9c:b6:bf:ca:a4:60:cc:95:4b:42:93:53:bb:
90:4c:b7:98:0e:9b:50:43:a0:20:c5:8c:2f:a3:fa:36:5d:01:
84:64:34:22:95:4b:d4:cf:39:be:0d:c8:80:4e:0f:c3:cb:be:
3e:b7:c8:8f:df:0a:5e:f8:36:2e:c8:11:26:9e:5e:c7:42:02:
ba:86:f4:92:d7:8c:00:97:f3:bc:52:8a:21:10:38:53:b5:c4:
86:21:af:6d:5a:02:43:7b:b8:29:19:8b:ff:4e:6d:a6:cd:c1:
c6:30:4f:5b:dc:0b:55:7e:88:60:91:02:f4:8b:a1:ff:5c:35:
12:ed:51:20
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYW7pD8n4Gedn/iJt+nOrTMFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjMwMTE2MTczMzAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMjdkMWM3OTc3NGE4NTU5MWIzZTMxNjRlMzg3NmNlZjBhNzU0N2I4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4pHlfNFG5w1u6N1VY0EqwUattts
2m3xCSm4hF3mLCV7GKbegj3M69td6gJYYeM2qY0GxhyUR6GB17BQvt7+OI7QLDhs
g1056UwTPIbsYpu5UhFVNNwAM4w68YYnEdmfmbOABXsXwK/ujA22LPCOF2yhYA61
/p7rBJuhW12QPPi6agR1BzxBZ6LshZqJTW9hZwtegze5l21mg6HHXARhGw9uJfWq
h28hc5Bz3kR/9DVxjeicAY4HZN6vHMieT/wAFC/fVoqOSHLcIdCKjtcU/grxqbRg
zDowPItb3MKXk+l/PMbtDYHiHp4Jk5cNzDfS506tdVKk/XE4jRjNOUHHUQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPJ9HHl3SoVZGz4xZOOHbO8KdUe4MB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvOG4wY2VYZEtoVmtiUGpGazQ0ZHM3d3AxUjdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALmbtAwQA
VmkEAwQAWSSMAwQAWSgkMA0GCSqGSIb3DQEBCwUAA4IBAQBKyszWfooD+edd75SA
mRQS8N0ooyamhQBgF8p9icziOGb7CeA3yVBazLxS2JuRwSEYXJyn6vCZmQsQ0mjR
c5aJrivHgk53GSPyQ08dGlI/lbTcqS8ML6gep3cnViWYEJTHjuDxD/SRnoIxH7/A
v9kJznl7kMI3diV2KugXgOLLQ9QFrpy2v8qkYMyVS0KTU7uQTLeYDptQQ6AgxYwv
o/o2XQGEZDQilUvUzzm+DciATg/Dy74+t8iP3wpe+DYuyBEmnl7HQgK6hvSS14wA
l/O8UoohEDhTtcSGIa9tWgJDe7gpGYv/Tm2mzcHGME9b3AtVfohgkQL0i6H/XDUS
7VEg
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:12 2024 by rpki-client on console-ams.rpki-client.org