Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/OlZB93Ohd4M87HXmvwfbjpc5ssQ.roa
File: OlZB93Ohd4M87HXmvwfbjpc5ssQ.roa (raw, json)
Hash identifier: ZiWvbvpyJ4fzyDYAcgwHrJoxb8rjGXyE3lEwjw99hZo=
Subject key identifier: 3A:56:41:F7:73:A1:77:83:3C:EC:75:E6:BF:07:DB:8E:97:39:B2:C4
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018AACF6F98A6435DF300335A2B60EA332C0
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/OlZB93Ohd4M87HXmvwfbjpc5ssQ.roa
Signing time: Tue 19 Sep 2023 10:23:01 +0000
ROA not before: Tue 19 Sep 2023 10:23:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 89.34.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Nov 2023 04:23:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ac:f6:f9:8a:64:35:df:30:03:35:a2:b6:0e:a3:32:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 19 10:23:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a5641f773a177833cec75e6bf07db8e9739b2c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c5:2b:dc:13:6d:65:fe:37:6d:09:47:f4:2a:
ee:a1:6b:c0:65:89:23:e9:29:c0:20:68:d0:e2:78:
c4:56:4e:4c:d1:4e:37:d8:5b:b4:1c:33:97:df:7a:
77:72:a4:12:ad:dd:17:7c:e5:6f:b1:75:24:3e:32:
aa:03:ec:e9:50:f3:41:ac:76:c4:1b:5d:e4:1e:3c:
5c:a3:a5:98:60:58:b8:e7:ea:eb:7d:eb:55:ea:1b:
de:24:5d:16:a3:43:47:78:62:14:47:31:a6:d7:f1:
5e:06:df:e7:16:a6:b9:63:e8:f9:6f:33:5b:e4:5c:
66:fa:c1:e2:3f:ff:20:41:4e:1e:8e:f2:94:f1:a9:
ca:59:d0:0c:e6:44:bd:fb:75:4c:b9:61:15:6d:14:
01:5c:b6:56:c7:59:0a:c4:9d:65:b8:95:2e:23:5c:
f5:46:49:14:84:97:17:ea:e4:02:e2:f3:b4:29:7d:
54:d6:f4:27:32:63:ca:e7:02:b1:3c:9d:d1:f3:27:
7c:e7:73:e7:79:e5:9f:fe:55:fa:1c:fd:d7:a1:87:
27:60:10:6a:8e:c7:5d:14:f8:5b:80:a8:98:94:4b:
bc:20:39:2e:8d:4f:78:59:ed:de:42:20:d5:6a:06:
17:da:d5:e8:cf:22:06:88:4b:56:2d:95:65:ad:36:
32:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:56:41:F7:73:A1:77:83:3C:EC:75:E6:BF:07:DB:8E:97:39:B2:C4
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/OlZB93Ohd4M87HXmvwfbjpc5ssQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.202.0/24
Signature Algorithm: sha256WithRSAEncryption
64:ed:0a:70:48:ac:31:b4:7b:a9:40:6a:d0:a5:f3:6d:7a:0a:
3b:d9:97:ff:ff:9a:37:2c:b9:ba:dd:05:83:31:3c:c1:82:53:
ef:0f:06:3e:bb:54:3a:04:cf:ba:48:51:29:e1:a5:99:6e:93:
aa:8c:9e:29:91:3e:ec:44:32:a6:bb:d4:03:46:df:2c:b1:69:
bf:e8:d7:d3:4a:92:00:84:a6:a6:d8:a8:1e:60:59:fa:d3:79:
ad:15:52:38:c3:47:0d:fe:1e:8f:16:69:99:86:f6:a6:e6:0a:
80:a1:fa:8d:ce:a4:b1:7b:e8:ce:dc:67:07:ff:75:04:a1:fc:
67:28:e0:e8:07:54:0c:25:4e:d0:09:1d:41:a1:b2:02:01:af:
28:6f:a2:1d:66:85:08:5b:d6:e5:b7:c7:99:b9:0e:7e:41:3e:
24:ed:5c:b4:09:22:9b:ef:1c:cd:b6:c9:12:11:45:ea:20:c4:
39:18:ee:ca:1e:90:b6:6c:45:7c:a0:9c:7b:7a:23:02:ae:87:
71:6b:26:68:9e:e2:e6:cc:d0:80:56:94:62:50:10:c7:e5:c7:
df:d9:40:40:57:93:3c:ee:6e:c2:c6:62:1e:a9:2f:af:f7:a8:
8f:c4:86:1b:31:22:27:3c:ab:0f:f3:68:8c:09:31:c5:57:11:
ff:dd:17:7e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYqs9vmKZDXfMAM1orYOozLAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjMwOTE5MTAyMzAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYTU2NDFmNzczYTE3NzgzM2NlYzc1ZTZiZjA3ZGI4ZTk3MzliMmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusUr3BNtZf43bQlH9CruoWvAZYkj
6SnAIGjQ4njEVk5M0U432Fu0HDOX33p3cqQSrd0XfOVvsXUkPjKqA+zpUPNBrHbE
G13kHjxco6WYYFi45+rrfetV6hveJF0Wo0NHeGIURzGm1/FeBt/nFqa5Y+j5bzNb
5Fxm+sHiP/8gQU4ejvKU8anKWdAM5kS9+3VMuWEVbRQBXLZWx1kKxJ1luJUuI1z1
RkkUhJcX6uQC4vO0KX1U1vQnMmPK5wKxPJ3R8yd853PneeWf/lX6HP3XoYcnYBBq
jsddFPhbgKiYlEu8IDkujU94We3eQiDVagYX2tXozyIGiEtWLZVlrTYyBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDpWQfdzoXeDPOx15r8H246XObLEMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvT2xaQjkzT2hkNE04N0hYbXZ3ZmJqcGM1c3NRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSLKMA0G
CSqGSIb3DQEBCwUAA4IBAQBk7QpwSKwxtHupQGrQpfNtego72Zf//5o3LLm63QWD
MTzBglPvDwY+u1Q6BM+6SFEp4aWZbpOqjJ4pkT7sRDKmu9QDRt8ssWm/6NfTSpIA
hKam2KgeYFn603mtFVI4w0cN/h6PFmmZhvam5gqAofqNzqSxe+jO3GcH/3UEofxn
KODoB1QMJU7QCR1BobICAa8ob6IdZoUIW9blt8eZuQ5+QT4k7Vy0CSKb7xzNtskS
EUXqIMQ5GO7KHpC2bEV8oJx7eiMCrodxayZonuLmzNCAVpRiUBDH5cff2UBAV5M8
7m7CxmIeqS+v96iPxIYbMSInPKsP82iMCTHFVxH/3Rd+
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org