Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_yrToCl6fOsLJAiM1IJ6EMAOm8U.roa
File: _yrToCl6fOsLJAiM1IJ6EMAOm8U.roa (raw, json)
Hash identifier: z4H3GyTcwaQAbOfAW0iTJt9TWEtfyAfsmBkYJdSL9Xg=
Subject key identifier: FF:2A:D3:A0:29:7A:7C:EB:0B:24:08:8C:D4:82:7A:10:C0:0E:9B:C5
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018B1F7A1364E2813B24D5C699ACC326624C
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_yrToCl6fOsLJAiM1IJ6EMAOm8U.roa
Signing time: Wed 11 Oct 2023 16:02:55 +0000
ROA not before: Wed 11 Oct 2023 16:02:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30058
IP address blocks: 89.34.219.0/24 maxlen: 24
128.0.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 20 Oct 2023 04:39:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1f:7a:13:64:e2:81:3b:24:d5:c6:99:ac:c3:26:62:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 11 16:02:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff2ad3a0297a7ceb0b24088cd4827a10c00e9bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a2:65:83:93:e3:63:f0:a6:78:4f:fe:ef:1d:
72:8a:b6:c3:d5:ff:74:54:30:fb:1a:fb:37:4e:04:
c2:65:fa:f9:47:6f:43:84:22:84:41:4b:08:36:cf:
72:ee:a9:b4:91:dd:bb:34:23:08:1f:53:88:a3:aa:
ec:b6:78:ea:37:95:44:1f:9a:98:5b:f3:f2:48:6f:
74:0f:6a:6f:ef:d8:f4:41:d0:91:95:05:b6:1a:11:
ba:0a:ae:29:f9:0f:b8:7a:7a:e1:20:b4:f7:cc:1d:
b9:04:a1:31:ef:55:b3:ca:ea:c0:31:80:7f:a9:e6:
79:98:33:65:e1:9a:dc:3e:26:b6:9a:ee:e3:88:85:
4e:74:19:67:b4:a4:9c:39:8b:39:7d:3c:2d:ba:97:
aa:b7:5e:b0:13:af:18:cf:77:36:ed:94:33:5f:f1:
4d:9f:2b:67:54:05:e4:da:6c:86:02:e7:9d:dc:c0:
02:b4:dc:d4:2a:3f:46:79:c9:bb:e3:4e:b0:f4:63:
4c:c6:23:e9:b5:d7:4b:40:ff:ac:f1:e9:aa:12:a2:
3f:6f:7f:a4:d3:74:62:ff:fc:58:3b:c7:d6:67:b2:
87:d8:25:a8:13:72:d0:56:1e:58:ab:31:aa:d3:99:
9f:4a:b8:c5:d9:d3:0b:a8:ee:1a:49:a0:fb:e0:b1:
45:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:2A:D3:A0:29:7A:7C:EB:0B:24:08:8C:D4:82:7A:10:C0:0E:9B:C5
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_yrToCl6fOsLJAiM1IJ6EMAOm8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.219.0/24
128.0.41.0/24
Signature Algorithm: sha256WithRSAEncryption
37:d0:d4:a3:e9:28:78:5d:9f:0e:62:04:55:67:ab:cf:18:df:
91:04:d9:13:f4:0d:5b:55:31:50:9e:6e:21:96:3e:6e:09:84:
7b:25:78:6a:76:8f:c0:12:e4:c0:f0:dd:ea:c7:31:8d:9f:aa:
63:88:d5:b6:b9:f4:c1:51:1a:d4:6d:a4:7e:a5:40:04:d6:ec:
74:13:c8:7c:86:75:dc:25:50:6f:7d:2d:4f:71:0a:e4:30:d4:
93:20:65:14:d2:32:90:5c:bb:5b:59:91:bf:a4:13:39:e0:d5:
38:aa:36:9d:0d:43:93:4f:6a:1f:0e:81:e5:52:13:d3:d9:04:
56:e5:8f:f0:98:a4:3d:69:a4:f9:1b:72:99:ac:23:ef:09:eb:
83:50:f8:38:bc:3c:d2:e2:06:5a:93:62:17:fb:cc:43:25:e8:
d0:a3:79:5f:4c:67:cb:cb:b0:bb:2e:be:43:1f:ee:7c:7e:e8:
74:93:6f:ce:f5:39:a9:ab:fa:bd:29:80:e4:3a:ac:2b:0e:a7:
35:c4:e7:f6:86:02:85:77:0c:11:42:99:1f:d2:90:aa:6b:be:
50:9f:58:da:bd:d6:0c:f4:13:18:35:42:c0:70:6f:da:46:2c:
7e:61:25:4d:c6:fd:43:58:2a:39:14:19:18:51:12:ce:e3:9f:
0e:01:a4:d3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYsfehNk4oE7JNXGmazDJmJMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjMxMDExMTYwMjU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjJhZDNhMDI5N2E3Y2ViMGIyNDA4OGNkNDgyN2ExMGMwMGU5YmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6Jlg5PjY/CmeE/+7x1yirbD1f90
VDD7Gvs3TgTCZfr5R29DhCKEQUsINs9y7qm0kd27NCMIH1OIo6rstnjqN5VEH5qY
W/PySG90D2pv79j0QdCRlQW2GhG6Cq4p+Q+4enrhILT3zB25BKEx71WzyurAMYB/
qeZ5mDNl4ZrcPia2mu7jiIVOdBlntKScOYs5fTwtupeqt16wE68Yz3c27ZQzX/FN
nytnVAXk2myGAued3MACtNzUKj9Gecm7406w9GNMxiPptddLQP+s8emqEqI/b3+k
03Ri//xYO8fWZ7KH2CWoE3LQVh5YqzGq05mfSrjF2dMLqO4aSaD74LFFTQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFP8q06ApenzrCyQIjNSCehDADpvFMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvX3lyVG9DbDZmT3NMSkFpTTFJSjZFTUFPbThVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWSLbAwQA
gAApMA0GCSqGSIb3DQEBCwUAA4IBAQA30NSj6Sh4XZ8OYgRVZ6vPGN+RBNkT9A1b
VTFQnm4hlj5uCYR7JXhqdo/AEuTA8N3qxzGNn6pjiNW2ufTBURrUbaR+pUAE1ux0
E8h8hnXcJVBvfS1PcQrkMNSTIGUU0jKQXLtbWZG/pBM54NU4qjadDUOTT2ofDoHl
UhPT2QRW5Y/wmKQ9aaT5G3KZrCPvCeuDUPg4vDzS4gZak2IX+8xDJejQo3lfTGfL
y7C7Lr5DH+58fuh0k2/O9Tmpq/q9KYDkOqwrDqc1xOf2hgKFdwwRQpkf0pCqa75Q
n1javdYM9BMYNULAcG/aRix+YSVNxv1DWCo5FBkYURLO458OAaTT
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:07 2024 by rpki-client on console-fra.rpki-client.org