Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/AmBfX2Y3Sg9BYYISpkJsoKlaDds.roa
File: AmBfX2Y3Sg9BYYISpkJsoKlaDds.roa (raw, json)
Hash identifier: DKeEuufc2o/Z71CvwZh74QRR6KK7XlQPx9hHUDIGIl0=
Subject key identifier: 02:60:5F:5F:66:37:4A:0F:41:61:82:12:A6:42:6C:A0:A9:5A:0D:DB
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018DA8D49AE8A457CC72CCF1455A3B2D6C62
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/AmBfX2Y3Sg9BYYISpkJsoKlaDds.roa
Signing time: Wed 14 Feb 2024 18:15:22 +0000
ROA not before: Wed 14 Feb 2024 18:15:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 89.37.192.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Feb 2024 14:46:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a8:d4:9a:e8:a4:57:cc:72:cc:f1:45:5a:3b:2d:6c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Feb 14 18:15:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=02605f5f66374a0f41618212a6426ca0a95a0ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cb:84:78:10:29:97:01:cb:c6:89:f0:4a:44:
4c:65:79:e8:79:2b:53:77:2e:cb:75:d7:e0:6d:e8:
e9:eb:cb:4f:56:39:b0:14:fa:2c:be:1b:34:59:45:
ef:6d:f9:87:d8:14:de:29:e6:df:70:8b:04:bc:b0:
12:01:79:95:a9:61:cb:b4:6d:0e:0a:5b:c7:a1:04:
53:fb:64:12:a5:c5:8d:6d:55:88:56:22:0e:76:b7:
93:79:59:40:0f:f0:96:05:ec:e2:90:0a:e0:c1:a3:
97:fa:b8:7e:60:45:27:69:b4:84:6b:ef:2d:24:18:
c2:3e:85:06:b8:df:ab:42:b3:e3:0c:65:c6:ef:b1:
f8:5e:73:4c:92:e1:38:1b:4e:24:f9:cd:d2:36:88:
70:9e:55:b2:af:41:ad:57:32:5a:4e:02:6a:be:cf:
3f:43:21:81:79:50:54:82:8e:fa:d8:9e:c7:9e:4a:
ec:c1:83:b3:56:93:cc:a5:a3:41:43:b1:5f:7e:92:
00:88:eb:3f:40:8f:0c:fa:8c:4c:6a:cb:9f:bb:05:
ea:60:e3:92:77:a1:21:d2:d3:3d:98:a1:30:e3:f1:
a0:90:78:85:18:85:f7:ca:55:df:94:56:bf:28:ad:
d6:67:dd:c7:92:e3:3a:e7:79:5f:67:14:ce:f5:26:
95:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:60:5F:5F:66:37:4A:0F:41:61:82:12:A6:42:6C:A0:A9:5A:0D:DB
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/AmBfX2Y3Sg9BYYISpkJsoKlaDds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.192.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:86:eb:4d:ee:eb:0a:bf:3f:d9:41:c6:33:e0:26:7a:a7:44:
d7:82:2b:90:48:e2:18:87:05:c8:d4:07:f3:dc:b4:44:94:22:
7e:de:45:19:0a:f6:66:be:f5:6a:ba:ab:3f:5c:14:89:ee:6f:
71:ee:32:f5:6e:0c:2d:5d:37:60:bf:66:d6:8f:fe:ce:49:4b:
6e:42:22:cb:aa:0c:ca:33:c0:53:0a:10:16:2e:cd:8c:f4:fc:
ac:4f:af:a4:6a:80:f0:80:d9:ac:ee:b5:03:e8:37:71:bd:4a:
b8:b6:c1:44:0d:30:f7:1b:06:51:b5:45:39:a3:89:e1:98:2b:
f6:b6:09:1f:5c:ba:a7:34:25:db:09:18:3b:6f:ba:d6:6f:44:
71:00:a9:11:e5:ec:80:c2:95:a6:c2:61:c8:58:e7:27:f5:30:
74:8a:9d:86:d3:2f:c5:ff:98:12:64:31:b2:52:88:0e:23:ee:
5b:e7:c6:12:a2:44:f1:f9:c6:10:4d:4a:0c:9d:35:f5:ee:c6:
76:e9:38:53:fc:b5:49:a1:10:da:0d:4f:76:c4:d0:3a:e0:87:
61:b4:50:a5:e5:17:83:31:ea:97:97:2c:52:f1:5f:df:34:aa:
09:a9:44:64:b8:e6:e0:f9:ef:45:41:9d:93:60:26:3d:74:c6:
d1:3b:fd:85
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY2o1JropFfMcszxRVo7LWxiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjQwMjE0MTgxNTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjYwNWY1ZjY2Mzc0YTBmNDE2MTgyMTJhNjQyNmNhMGE5NWEwZGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsuEeBAplwHLxonwSkRMZXnoeStT
dy7Lddfgbejp68tPVjmwFPosvhs0WUXvbfmH2BTeKebfcIsEvLASAXmVqWHLtG0O
ClvHoQRT+2QSpcWNbVWIViIOdreTeVlAD/CWBezikArgwaOX+rh+YEUnabSEa+8t
JBjCPoUGuN+rQrPjDGXG77H4XnNMkuE4G04k+c3SNohwnlWyr0GtVzJaTgJqvs8/
QyGBeVBUgo762J7HnkrswYOzVpPMpaNBQ7FffpIAiOs/QI8M+oxMasufuwXqYOOS
d6Eh0tM9mKEw4/GgkHiFGIX3ylXflFa/KK3WZ93HkuM653lfZxTO9SaVxwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAJgX19mN0oPQWGCEqZCbKCpWg3bMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvQW1CZlgyWTNTZzlCWVlJU3BrSnNvS2xhRGRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSXAMA0G
CSqGSIb3DQEBCwUAA4IBAQB/hutN7usKvz/ZQcYz4CZ6p0TXgiuQSOIYhwXI1Afz
3LRElCJ+3kUZCvZmvvVquqs/XBSJ7m9x7jL1bgwtXTdgv2bWj/7OSUtuQiLLqgzK
M8BTChAWLs2M9PysT6+kaoDwgNms7rUD6DdxvUq4tsFEDTD3GwZRtUU5o4nhmCv2
tgkfXLqnNCXbCRg7b7rWb0RxAKkR5eyAwpWmwmHIWOcn9TB0ip2G0y/F/5gSZDGy
UogOI+5b58YSokTx+cYQTUoMnTX17sZ26ThT/LVJoRDaDU92xNA64IdhtFCl5ReD
MeqXlyxS8V/fNKoJqURkuObg+e9FQZ2TYCY9dMbRO/2F
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org