Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/REWQ7Z21FpthjgwNdDhSF91T-8I.roa
File: REWQ7Z21FpthjgwNdDhSF91T-8I.roa (raw, json)
Hash identifier: nd4VtZkGhOYc3Z8CPhxE3OTV1RtEYUGAUbIZe7Pdizc=
Subject key identifier: 44:45:90:ED:9D:B5:16:9B:61:8E:0C:0D:74:38:52:17:DD:53:FB:C2
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0188AF33D1D4F5CBEE4683294B4DD8237BD4
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/REWQ7Z21FpthjgwNdDhSF91T-8I.roa
Signing time: Mon 12 Jun 2023 10:43:08 +0000
ROA not before: Mon 12 Jun 2023 10:43:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211256
IP address blocks: 89.39.125.0/24 maxlen: 24
188.215.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Jun 2023 13:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:af:33:d1:d4:f5:cb:ee:46:83:29:4b:4d:d8:23:7b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 12 10:43:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=444590ed9db5169b618e0c0d74385217dd53fbc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:91:10:8a:df:97:dd:3c:a8:e6:de:49:8a:9d:
92:e8:1d:59:cb:db:2a:5a:7a:a4:0f:84:1b:e1:85:
59:2d:a1:4b:67:20:2a:02:8b:d2:0c:ad:db:71:29:
04:48:84:7e:b5:06:8e:d9:ce:24:76:5b:fa:dd:c2:
4d:76:d9:d0:ad:7a:2a:4e:c2:40:1e:15:b0:c2:68:
84:96:16:25:03:2e:1f:68:d8:e4:9d:0c:08:ff:8f:
75:ad:7b:09:53:fc:41:b6:de:15:7d:81:7f:83:3a:
5b:f8:5f:ab:06:1e:bb:3d:01:84:dc:e6:25:4f:52:
a2:07:e6:8c:4c:fa:b2:29:60:09:a3:1c:86:69:cd:
1a:76:f8:10:90:3a:c0:54:51:7c:6b:96:21:39:8c:
17:c5:53:32:d2:75:f7:9b:e7:79:ca:17:67:e6:cc:
64:25:58:6c:4a:25:e1:05:bc:4e:6e:9e:7c:03:c8:
10:cd:7f:4f:9c:e5:3f:48:46:5b:76:90:b7:32:a8:
07:75:6c:e5:4e:88:11:46:f6:7a:ca:33:83:e7:94:
97:67:8b:b9:3b:2c:45:1d:0f:5b:8b:d0:5e:27:68:
b4:b7:19:fe:c4:58:75:56:dc:40:98:14:86:a2:4f:
43:a3:e5:d3:b4:e8:c6:c7:4a:ef:32:18:6a:0d:2e:
06:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:45:90:ED:9D:B5:16:9B:61:8E:0C:0D:74:38:52:17:DD:53:FB:C2
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/REWQ7Z21FpthjgwNdDhSF91T-8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.125.0/24
188.215.31.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:40:c4:eb:d4:fe:7b:65:76:69:5d:6a:9d:5e:67:03:81:91:
4c:78:3b:e4:12:e0:99:c5:68:8d:fd:f3:f9:9c:b3:0e:5d:f4:
ce:ee:49:7f:f4:3a:64:84:b2:de:4d:97:4d:67:3a:4f:ed:b4:
89:c7:98:e0:34:f6:e4:08:54:f9:5a:00:7e:2b:cc:46:d8:9d:
53:79:8a:da:6a:2a:c5:9f:fa:20:2b:6f:be:fd:a7:cd:5b:b2:
51:14:63:a4:93:f3:de:5b:f2:85:f7:5a:ae:c7:32:a9:0d:b5:
ad:8b:30:d0:a8:b0:47:da:76:3f:38:16:a8:1a:69:ee:f8:1a:
de:58:47:17:77:67:e2:6d:1a:de:6a:fc:85:bc:f0:28:99:57:
72:33:a0:2c:5d:c1:8f:78:c6:79:a3:86:e9:2b:cd:67:6c:26:
6a:14:74:2d:bb:35:77:66:c8:22:45:73:14:29:38:f4:a2:b2:
f5:93:62:94:86:1e:66:80:8c:1d:0d:57:14:e8:c8:91:c7:bc:
ef:d1:4f:71:9e:07:c5:95:20:c7:16:15:47:04:f8:b9:93:08:
06:6d:e2:98:9d:89:5f:03:ec:d2:84:a2:40:cd:1d:c4:93:62:
3c:0f:b2:08:c1:ed:cb:bd:50:89:eb:c2:c1:b7:5a:15:b2:99:
49:86:e2:98
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYivM9HU9cvuRoMpS03YI3vUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjMwNjEyMTA0MzA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDQ1OTBlZDlkYjUxNjliNjE4ZTBjMGQ3NDM4NTIxN2RkNTNmYmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpEQit+X3Tyo5t5Jip2S6B1Zy9sq
WnqkD4Qb4YVZLaFLZyAqAovSDK3bcSkESIR+tQaO2c4kdlv63cJNdtnQrXoqTsJA
HhWwwmiElhYlAy4faNjknQwI/491rXsJU/xBtt4VfYF/gzpb+F+rBh67PQGE3OYl
T1KiB+aMTPqyKWAJoxyGac0advgQkDrAVFF8a5YhOYwXxVMy0nX3m+d5yhdn5sxk
JVhsSiXhBbxObp58A8gQzX9PnOU/SEZbdpC3MqgHdWzlTogRRvZ6yjOD55SXZ4u5
OyxFHQ9bi9BeJ2i0txn+xFh1VtxAmBSGok9Do+XTtOjGx0rvMhhqDS4GuwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFERFkO2dtRabYY4MDXQ4UhfdU/vCMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvUkVXUTdaMjFGcHRoamd3TmREaFNGOTFULThJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWSd9AwQA
vNcfMA0GCSqGSIb3DQEBCwUAA4IBAQA8QMTr1P57ZXZpXWqdXmcDgZFMeDvkEuCZ
xWiN/fP5nLMOXfTO7kl/9DpkhLLeTZdNZzpP7bSJx5jgNPbkCFT5WgB+K8xG2J1T
eYraairFn/ogK2++/afNW7JRFGOkk/PeW/KF91quxzKpDbWtizDQqLBH2nY/OBao
Gmnu+BreWEcXd2fibRreavyFvPAomVdyM6AsXcGPeMZ5o4bpK81nbCZqFHQtuzV3
ZsgiRXMUKTj0orL1k2KUhh5mgIwdDVcU6MiRx7zv0U9xngfFlSDHFhVHBPi5kwgG
beKYnYlfA+zShKJAzR3Ek2I8D7IIwe3LvVCJ68LBt1oVsplJhuKY
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org