Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/bfizcjvVmcC_gSyXJ9NRj2_g1po.roa
File: bfizcjvVmcC_gSyXJ9NRj2_g1po.roa (raw, json)
Hash identifier: 4O/iYlknCRM4J+/QXFq6J8KOynJ8WiX6FklVbTZI+3g=
Subject key identifier: 6D:F8:B3:72:3B:D5:99:C0:BF:81:2C:97:27:D3:51:8F:6F:E0:D6:9A
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018953CCBA419455269446EE1D0D74A87DA9
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/bfizcjvVmcC_gSyXJ9NRj2_g1po.roa
Signing time: Fri 14 Jul 2023 09:47:53 +0000
ROA not before: Fri 14 Jul 2023 09:47:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 23470
IP address blocks: 89.35.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Aug 2023 07:59:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:53:cc:ba:41:94:55:26:94:46:ee:1d:0d:74:a8:7d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 14 09:47:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6df8b3723bd599c0bf812c9727d3518f6fe0d69a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c0:67:2a:4f:8c:25:0c:8a:3b:8b:e7:5b:64:
d3:5c:14:41:a3:ac:c4:b0:2a:ff:0c:14:64:05:2e:
1b:ec:0d:77:3c:19:cc:99:a6:0a:56:2b:dd:c5:4b:
93:67:37:71:47:c2:4b:b1:2f:0a:8d:5b:ec:4d:1c:
8e:3f:8f:ad:0c:8b:e4:b5:15:61:9c:d0:3d:a6:39:
d8:76:2b:3e:86:2c:09:02:13:d1:40:3a:77:bd:e1:
94:2f:bb:39:0c:b1:8b:55:18:17:b2:36:88:6d:53:
06:84:0c:f8:8b:e6:8b:af:4c:e0:1b:5a:f9:13:5c:
d3:a5:95:fd:13:f4:34:6b:19:d9:8b:5d:24:03:a2:
87:34:ed:d2:4c:e4:3f:7c:43:86:cf:90:27:55:f0:
0b:7e:3e:71:bb:dd:55:8b:75:cd:d8:4e:fb:23:1a:
92:4e:24:99:b1:73:3a:7c:e6:42:cb:9f:ce:53:6f:
d3:81:21:ee:fe:5b:b0:fd:09:55:d8:cb:b4:ae:52:
a3:d6:18:5b:ad:b1:76:d3:0b:59:a6:94:89:21:08:
d1:fe:2e:57:a1:33:c6:ed:ce:5d:7f:41:47:0b:af:
fb:27:a6:47:0f:3d:4d:56:69:7d:af:e7:4c:aa:ad:
7d:28:fc:7d:6d:36:cd:0a:c7:d9:52:5f:5e:69:73:
22:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F8:B3:72:3B:D5:99:C0:BF:81:2C:97:27:D3:51:8F:6F:E0:D6:9A
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/bfizcjvVmcC_gSyXJ9NRj2_g1po.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.119.0/24
Signature Algorithm: sha256WithRSAEncryption
52:6b:09:4b:6a:b2:71:54:a7:b2:cd:4a:11:80:cc:a5:87:b4:
26:3c:cf:f3:c2:7a:34:4f:43:4b:95:fd:54:c2:6d:fe:36:0c:
57:51:a0:14:c0:a8:aa:13:6e:6a:cc:16:1e:cb:2c:86:31:62:
43:64:c5:f0:b2:11:8a:4a:eb:6d:07:83:2f:a0:cd:03:99:f8:
c7:38:5b:50:f5:cf:e2:6b:d5:65:ec:3f:28:55:48:1b:cc:03:
39:4d:0d:cb:1a:60:8b:06:a2:36:a7:0a:12:b5:6b:cb:52:2a:
9f:c7:e0:fc:c4:ca:89:9a:be:0f:0d:16:c2:4b:40:11:66:bf:
33:c7:9b:13:25:a2:16:9c:3f:94:9f:91:6d:b4:84:1c:e8:a8:
b2:19:81:d1:41:86:e9:b5:c3:b6:4f:b7:7b:af:d4:17:a3:8a:
c7:51:4c:6f:e1:a1:bc:40:9a:a7:63:b8:9a:af:65:59:13:67:
5c:e4:e8:e2:7a:a6:43:02:74:8d:bb:f0:c6:14:c7:83:5d:11:
ac:ad:2e:4e:b0:a2:9b:7d:b6:1b:36:2f:ba:fc:88:2a:8f:b3:
74:e1:5b:64:c1:e0:a0:7f:1f:42:c4:fb:43:d4:c7:28:d5:09:
f1:3e:9d:75:a4:b9:ab:85:02:8b:9c:43:37:a4:00:e0:41:e4:
88:9b:0d:32
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYlTzLpBlFUmlEbuHQ10qH2pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjMwNzE0MDk0NzUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZGY4YjM3MjNiZDU5OWMwYmY4MTJjOTcyN2QzNTE4ZjZmZTBkNjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMBnKk+MJQyKO4vnW2TTXBRBo6zE
sCr/DBRkBS4b7A13PBnMmaYKVivdxUuTZzdxR8JLsS8KjVvsTRyOP4+tDIvktRVh
nNA9pjnYdis+hiwJAhPRQDp3veGUL7s5DLGLVRgXsjaIbVMGhAz4i+aLr0zgG1r5
E1zTpZX9E/Q0axnZi10kA6KHNO3STOQ/fEOGz5AnVfALfj5xu91Vi3XN2E77IxqS
TiSZsXM6fOZCy5/OU2/TgSHu/luw/QlV2Mu0rlKj1hhbrbF20wtZppSJIQjR/i5X
oTPG7c5df0FHC6/7J6ZHDz1NVml9r+dMqq19KPx9bTbNCsfZUl9eaXMiOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG34s3I71ZnAv4EslyfTUY9v4NaaMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvYmZpemNqdlZtY0NfZ1N5WEo5TlJqMl9nMXBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSN3MA0G
CSqGSIb3DQEBCwUAA4IBAQBSawlLarJxVKeyzUoRgMylh7QmPM/zwno0T0NLlf1U
wm3+NgxXUaAUwKiqE25qzBYeyyyGMWJDZMXwshGKSuttB4MvoM0DmfjHOFtQ9c/i
a9Vl7D8oVUgbzAM5TQ3LGmCLBqI2pwoStWvLUiqfx+D8xMqJmr4PDRbCS0ARZr8z
x5sTJaIWnD+Un5FttIQc6KiyGYHRQYbptcO2T7d7r9QXo4rHUUxv4aG8QJqnY7ia
r2VZE2dc5OjieqZDAnSNu/DGFMeDXRGsrS5OsKKbfbYbNi+6/Igqj7N04VtkweCg
fx9CxPtD1Mco1QnxPp11pLmrhQKLnEM3pADgQeSImw0y
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:13 2024 by rpki-client on console-ams.rpki-client.org