Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Xpa0eFdsbx7qIrbq-izmUwakpwo.roa
File: Xpa0eFdsbx7qIrbq-izmUwakpwo.roa (raw, json)
Hash identifier: BJxu5UsH/nXNUXI/0KpIkGGXz6TjrDl48puYbSERMxo=
Subject key identifier: 5E:96:B4:78:57:6C:6F:1E:EA:22:B6:EA:FA:2C:E6:53:06:A4:A7:0A
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018F0F79254D87E5AEF2FEAE8024179B117C
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Xpa0eFdsbx7qIrbq-izmUwakpwo.roa
Signing time: Wed 24 Apr 2024 09:39:08 +0000
ROA not before: Wed 24 Apr 2024 09:39:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57271
IP address blocks: 89.36.140.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 Apr 2024 04:03:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0f:79:25:4d:87:e5:ae:f2:fe:ae:80:24:17:9b:11:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 24 09:39:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e96b478576c6f1eea22b6eafa2ce65306a4a70a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0f:b8:e9:8e:93:2f:2f:29:5b:80:af:da:e6:
12:31:eb:dc:70:c5:d0:c2:4a:1c:05:77:e7:bc:7b:
a2:fd:7b:54:32:ff:96:4c:5c:31:cf:63:10:0e:51:
56:18:64:46:b9:fa:01:7f:f1:7b:e6:31:e6:8f:d8:
77:d5:b8:78:bb:e4:6e:18:d6:6b:14:dd:76:96:e4:
96:8b:50:51:4e:67:8c:fb:02:0e:90:51:b0:e6:e6:
7a:b9:95:8c:a8:b5:d2:bf:af:29:aa:42:fe:56:5b:
9e:aa:9b:89:c4:16:c2:21:eb:90:ba:cc:9c:6c:58:
28:70:f5:d1:c8:53:54:08:75:f1:f3:ea:78:a3:d5:
5d:00:a2:61:d3:cd:b0:47:43:5f:9f:30:00:ba:c6:
3b:10:69:79:47:98:3a:9d:16:29:be:8f:18:41:d8:
3f:0e:08:e2:56:2b:ed:bc:a4:be:b4:af:43:33:a2:
cc:15:36:11:c0:3a:8e:2a:df:ad:5c:24:d0:24:d1:
7a:37:77:0f:95:e7:be:79:dc:41:fa:1a:27:7a:5a:
d8:1d:99:81:55:a2:e3:cf:3b:a2:6c:40:21:03:1b:
9d:f5:c1:a3:61:47:01:ae:15:04:fb:25:6d:5a:ae:
c7:fc:0a:f9:2f:58:fe:b5:78:16:8f:f2:44:9d:8f:
ae:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:96:B4:78:57:6C:6F:1E:EA:22:B6:EA:FA:2C:E6:53:06:A4:A7:0A
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Xpa0eFdsbx7qIrbq-izmUwakpwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.36.140.0/24
Signature Algorithm: sha256WithRSAEncryption
30:c7:ec:c8:ac:3f:b6:b5:60:d3:f5:5d:d8:52:8f:ba:78:3b:
3e:20:af:db:03:6f:eb:ed:72:cf:0f:c7:e0:16:de:3e:94:e8:
00:07:47:97:4d:11:74:56:9d:ea:c1:94:fb:1d:f0:a3:d5:b7:
b1:f0:12:da:2e:38:fe:76:3d:89:3a:87:46:ca:96:55:95:e4:
3c:82:0a:25:36:f9:18:cf:94:f9:c2:4c:14:16:ee:9e:f9:c3:
b1:a7:83:4b:5a:0b:b5:b1:af:bd:17:d1:50:fe:e4:e0:e4:24:
3b:f0:c3:7b:6c:7d:21:da:48:8b:87:02:a7:7b:b4:b7:52:61:
8d:3f:fd:78:fa:38:38:01:76:86:a4:c3:f2:b0:36:b0:ea:eb:
76:2e:7b:15:9c:ed:91:81:4e:b8:ff:73:6b:12:57:e6:48:f1:
83:57:e6:86:92:b1:1d:1a:d0:50:9c:d7:d3:31:09:43:be:3e:
e2:b9:e0:ea:15:00:58:c3:ee:a0:48:00:99:6c:8b:b3:1c:96:
94:9d:9c:35:eb:b0:e3:62:12:b3:74:6e:60:4b:0b:af:a9:a8:
19:56:a7:a2:68:a2:34:4c:08:1e:a9:93:da:da:5a:9c:3f:90:
5f:54:7d:de:a8:30:07:49:8b:74:ba:1f:73:83:51:36:d0:12:
4c:a2:d1:21
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY8PeSVNh+Wu8v6ugCQXmxF8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjQwNDI0MDkzOTA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZTk2YjQ3ODU3NmM2ZjFlZWEyMmI2ZWFmYTJjZTY1MzA2YTRhNzBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmg+46Y6TLy8pW4Cv2uYSMevccMXQ
wkocBXfnvHui/XtUMv+WTFwxz2MQDlFWGGRGufoBf/F75jHmj9h31bh4u+RuGNZr
FN12luSWi1BRTmeM+wIOkFGw5uZ6uZWMqLXSv68pqkL+VlueqpuJxBbCIeuQusyc
bFgocPXRyFNUCHXx8+p4o9VdAKJh082wR0NfnzAAusY7EGl5R5g6nRYpvo8YQdg/
DgjiVivtvKS+tK9DM6LMFTYRwDqOKt+tXCTQJNF6N3cPlee+edxB+honelrYHZmB
VaLjzzuibEAhAxud9cGjYUcBrhUE+yVtWq7H/Ar5L1j+tXgWj/JEnY+uuQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF6WtHhXbG8e6iK26vos5lMGpKcKMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvWHBhMGVGZHNieDdxSXJicS1pem1Vd2FrcHdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSSMMA0G
CSqGSIb3DQEBCwUAA4IBAQAwx+zIrD+2tWDT9V3YUo+6eDs+IK/bA2/r7XLPD8fg
Ft4+lOgAB0eXTRF0Vp3qwZT7HfCj1bex8BLaLjj+dj2JOodGypZVleQ8ggolNvkY
z5T5wkwUFu6e+cOxp4NLWgu1sa+9F9FQ/uTg5CQ78MN7bH0h2kiLhwKne7S3UmGN
P/14+jg4AXaGpMPysDaw6ut2LnsVnO2RgU64/3NrElfmSPGDV+aGkrEdGtBQnNfT
MQlDvj7iueDqFQBYw+6gSACZbIuzHJaUnZw167DjYhKzdG5gSwuvqagZVqeiaKI0
TAgeqZPa2lqcP5BfVH3eqDAHSYt0uh9zg1E20BJMotEh
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:07 2024 by rpki-client on console-fra.rpki-client.org