Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/G4Q59VLPldX_3uRhz_bKmkwINKg.roa
File: G4Q59VLPldX_3uRhz_bKmkwINKg.roa (raw, json)
Hash identifier: l1QSCvtrmTIjWWqhGYsmBNsNP8SC2qat+BXT63J3tIQ=
Subject key identifier: 1B:84:39:F5:52:CF:95:D5:FF:DE:E4:61:CF:F6:CA:9A:4C:08:34:A8
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01881EB307518FA186099BE3D53E46EEB34F
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/G4Q59VLPldX_3uRhz_bKmkwINKg.roa
Signing time: Mon 15 May 2023 09:17:09 +0000
ROA not before: Mon 15 May 2023 09:17:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198883
IP address blocks: 89.35.130.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1e:b3:07:51:8f:a1:86:09:9b:e3:d5:3e:46:ee:b3:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: May 15 09:17:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b8439f552cf95d5ffdee461cff6ca9a4c0834a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:05:19:c7:95:30:dc:df:24:aa:e7:d4:de:36:
28:89:36:fc:e5:cf:62:9e:1b:b1:59:e7:a4:9c:c5:
92:d0:9e:1a:22:89:53:8a:8d:cd:17:84:c2:24:fc:
41:cb:8a:a0:6d:6f:75:75:1e:4a:2c:b7:2e:7a:9e:
11:05:56:08:f2:bc:f3:72:cd:36:21:61:7c:5e:7a:
9c:da:35:29:85:b0:40:ec:a1:17:46:34:b6:a2:b7:
3d:50:c4:f9:76:d3:87:de:3b:24:84:32:a8:af:ea:
66:76:33:fc:43:18:67:15:d5:d6:4b:d3:46:71:14:
0c:4f:88:de:0b:f8:48:33:e8:d9:6b:df:d0:20:1b:
f0:3c:ea:cb:9b:4a:17:c0:f9:59:15:ea:57:c9:21:
af:75:2f:4e:17:cb:ea:71:e7:30:8c:6c:ee:73:96:
5f:12:2e:3e:a4:d4:a3:3b:51:f4:a1:8e:5f:6c:bd:
50:9e:33:ab:9f:82:b4:8e:83:96:8e:57:7e:78:a9:
9a:1e:bc:4d:7b:e6:cf:68:1a:cb:6e:91:62:74:79:
f9:b1:4f:38:fd:55:2c:76:64:1d:22:d2:a2:53:76:
47:ac:80:96:88:10:98:16:28:7c:1f:b2:e3:42:0f:
c1:dd:e8:fa:e3:1f:79:a2:34:23:b6:26:90:db:e9:
48:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:84:39:F5:52:CF:95:D5:FF:DE:E4:61:CF:F6:CA:9A:4C:08:34:A8
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/G4Q59VLPldX_3uRhz_bKmkwINKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.130.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:f6:d2:0f:54:7e:6d:98:11:8e:d8:03:0f:5d:e4:ab:73:76:
08:34:f1:bf:5b:c7:98:16:18:07:fe:f4:0d:95:17:11:52:82:
b1:2d:c8:bb:47:5f:24:d8:0a:f6:ce:13:8e:e3:c7:00:11:eb:
80:2f:13:82:ea:90:50:c3:cf:0e:d5:5d:e2:dd:a2:e0:9b:54:
7e:a1:92:f0:a0:38:a6:ca:e2:21:d6:02:b3:02:5c:b3:fa:80:
1c:82:b3:de:5b:40:66:92:9c:3d:2d:62:34:c0:3f:d3:e6:9a:
43:18:f5:e3:39:5f:5e:34:7b:f6:4c:80:1c:ee:ab:df:cb:be:
8c:9a:28:6b:3a:e6:dd:3c:f9:6f:64:98:59:d7:a2:75:20:5c:
ec:6e:1a:56:d3:3d:01:d0:01:4e:1c:c5:84:47:8d:26:10:4c:
df:74:91:f1:bb:ea:68:3b:48:d9:77:92:c0:aa:df:17:42:c5:
2d:ad:a6:df:a0:fa:de:84:c4:f4:8a:83:ad:7d:3b:90:b4:68:
7d:8c:e7:bd:44:d0:e3:c4:e9:80:57:81:53:e7:ec:cb:ed:5d:
27:dd:32:9f:c9:02:fc:b2:44:bd:7a:dd:1e:75:b0:61:b6:e3:
cf:c1:a2:33:8c:1c:31:de:5c:6b:73:11:e4:01:65:7d:dc:85:
f3:35:62:63
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgeswdRj6GGCZvj1T5G7rNPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjMwNTE1MDkxNzA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjg0MzlmNTUyY2Y5NWQ1ZmZkZWU0NjFjZmY2Y2E5YTRjMDgzNGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAUZx5Uw3N8kqufU3jYoiTb85c9i
nhuxWeeknMWS0J4aIolTio3NF4TCJPxBy4qgbW91dR5KLLcuep4RBVYI8rzzcs02
IWF8Xnqc2jUphbBA7KEXRjS2orc9UMT5dtOH3jskhDKor+pmdjP8QxhnFdXWS9NG
cRQMT4jeC/hIM+jZa9/QIBvwPOrLm0oXwPlZFepXySGvdS9OF8vqcecwjGzuc5Zf
Ei4+pNSjO1H0oY5fbL1QnjOrn4K0joOWjld+eKmaHrxNe+bPaBrLbpFidHn5sU84
/VUsdmQdItKiU3ZHrICWiBCYFih8H7LjQg/B3ej64x95ojQjtiaQ2+lIqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBuEOfVSz5XV/97kYc/2yppMCDSoMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvRzRRNTlWTFBsZFhfM3VSaHpfYktta3dJTktnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSOCMA0G
CSqGSIb3DQEBCwUAA4IBAQAs9tIPVH5tmBGO2AMPXeSrc3YINPG/W8eYFhgH/vQN
lRcRUoKxLci7R18k2Ar2zhOO48cAEeuALxOC6pBQw88O1V3i3aLgm1R+oZLwoDim
yuIh1gKzAlyz+oAcgrPeW0Bmkpw9LWI0wD/T5ppDGPXjOV9eNHv2TIAc7qvfy76M
mihrOubdPPlvZJhZ16J1IFzsbhpW0z0B0AFOHMWER40mEEzfdJHxu+poO0jZd5LA
qt8XQsUtrabfoPrehMT0ioOtfTuQtGh9jOe9RNDjxOmAV4FT5+zL7V0n3TKfyQL8
skS9et0edbBhtuPPwaIzjBwx3lxrcxHkAWV93IXzNWJj
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org