Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/kiUZc4_-VoewPYvbDAWnntZR7pQ.roa
File: kiUZc4_-VoewPYvbDAWnntZR7pQ.roa (raw, json)
Hash identifier: PK4uiaNzcycsGaf2p00kO6Ys0IT8PerDfzMoZZ5ON3o=
Subject key identifier: 92:25:19:73:8F:FE:56:87:B0:3D:8B:DB:0C:05:A7:9E:D6:51:EE:94
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0189492B034707E18AF4FA0A2BFBB78BF559
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/kiUZc4_-VoewPYvbDAWnntZR7pQ.roa
Signing time: Wed 12 Jul 2023 08:15:02 +0000
ROA not before: Wed 12 Jul 2023 08:15:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51722
IP address blocks: 89.37.194.0/24 maxlen: 24
94.198.171.0/24 maxlen: 24
188.208.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Aug 2023 15:22:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:49:2b:03:47:07:e1:8a:f4:fa:0a:2b:fb:b7:8b:f5:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 12 08:15:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=922519738ffe5687b03d8bdb0c05a79ed651ee94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9a:91:ed:f9:70:fe:3d:9a:67:ca:03:1a:4e:
e6:8a:05:e3:c8:fa:70:6e:58:ae:cb:b7:d3:85:f9:
91:f8:6f:ed:47:30:2d:e0:c8:ed:db:1c:8f:db:ea:
da:8c:fa:58:91:c7:68:1a:47:6f:71:f9:30:53:57:
8b:e7:d3:02:4c:53:3d:0e:08:98:28:0a:53:d5:a8:
bb:dd:a4:8b:84:13:96:37:44:ec:7e:c0:9a:a5:b8:
5e:9f:8b:6a:43:5e:47:33:8a:25:74:bd:1d:f7:ec:
a4:eb:52:32:25:08:12:00:4b:0e:fe:15:0f:e8:4b:
a1:b6:14:cf:e1:b4:50:7f:93:5e:eb:56:87:8a:d3:
fb:8e:15:45:3a:a8:61:92:3e:bd:3a:b9:29:58:62:
6f:cf:78:23:56:38:a1:4c:a6:e2:17:98:28:df:e2:
73:2b:ce:82:04:4f:2b:59:8f:64:8e:c2:8c:a8:bb:
a1:78:9c:b1:3f:25:f8:62:86:e3:1d:54:5a:aa:9d:
c3:95:3a:45:a0:be:09:c2:82:f2:d1:40:7c:c6:98:
6d:e4:f2:d9:a7:92:c5:23:5b:8e:be:83:e9:db:5f:
ed:ee:19:dc:72:f1:97:22:5e:ff:ad:7c:6b:f7:46:
77:73:a6:d9:2c:0e:12:a3:fd:28:af:db:af:95:1a:
07:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:25:19:73:8F:FE:56:87:B0:3D:8B:DB:0C:05:A7:9E:D6:51:EE:94
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/kiUZc4_-VoewPYvbDAWnntZR7pQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.194.0/24
94.198.171.0/24
188.208.103.0/24
Signature Algorithm: sha256WithRSAEncryption
67:77:d4:77:7b:a2:e9:c1:99:3f:24:71:6a:01:01:87:ff:26:
0e:4a:aa:ef:f1:1e:ec:9a:56:7e:5c:4e:ea:02:47:05:26:3b:
47:c0:05:dc:6c:92:e0:6b:47:dc:b1:9d:10:67:5f:a3:94:28:
ae:d0:aa:5b:dc:66:7f:6c:af:bb:33:17:31:82:81:4b:0a:d9:
4b:54:40:4d:de:88:c0:79:e4:4e:ca:36:fc:f9:40:50:c9:f1:
77:d7:cc:fb:5b:6f:a5:9e:5c:ed:8e:cc:d0:89:91:f2:4c:bc:
12:8e:f9:d6:6a:d9:e3:67:41:6b:ce:6a:02:cf:e5:31:48:10:
b7:a0:2c:32:b1:fa:d9:e1:b3:a6:7a:0c:d4:fe:4d:15:be:ea:
dc:dc:94:25:9c:b3:e2:33:5a:68:59:f2:12:ec:df:af:29:e1:
92:aa:b4:3a:d7:97:44:83:d0:cd:a3:5e:a1:76:2b:90:d5:ce:
17:2d:70:54:5a:a9:19:61:fd:ab:d5:ff:f8:0e:fc:18:69:8e:
e8:70:9c:0b:d8:07:f1:1a:14:1e:73:40:1a:89:7f:d8:d8:fe:
01:5a:a5:67:b4:e1:79:ca:5a:7b:19:d8:0a:b0:75:42:db:32:
b4:6e:45:f5:eb:43:f1:cf:74:3a:34:37:14:4b:16:45:a9:29:
8f:1f:62:4e
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYlJKwNHB+GK9PoKK/u3i/VZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjMwNzEyMDgxNTAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MjI1MTk3MzhmZmU1Njg3YjAzZDhiZGIwYzA1YTc5ZWQ2NTFlZTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZqR7flw/j2aZ8oDGk7migXjyPpw
bliuy7fThfmR+G/tRzAt4Mjt2xyP2+rajPpYkcdoGkdvcfkwU1eL59MCTFM9DgiY
KApT1ai73aSLhBOWN0TsfsCapbhen4tqQ15HM4oldL0d9+yk61IyJQgSAEsO/hUP
6EuhthTP4bRQf5Ne61aHitP7jhVFOqhhkj69OrkpWGJvz3gjVjihTKbiF5go3+Jz
K86CBE8rWY9kjsKMqLuheJyxPyX4YobjHVRaqp3DlTpFoL4JwoLy0UB8xpht5PLZ
p5LFI1uOvoPp21/t7hnccvGXIl7/rXxr90Z3c6bZLA4So/0or9uvlRoHbwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFJIlGXOP/laHsD2L2wwFp57WUe6UMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEva2lVWmM0Xy1Wb2V3UFl2YkRBV25udFpSN3BRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWSXCAwQA
XsarAwQAvNBnMA0GCSqGSIb3DQEBCwUAA4IBAQBnd9R3e6LpwZk/JHFqAQGH/yYO
Sqrv8R7smlZ+XE7qAkcFJjtHwAXcbJLga0fcsZ0QZ1+jlCiu0Kpb3GZ/bK+7Mxcx
goFLCtlLVEBN3ojAeeROyjb8+UBQyfF318z7W2+lnlztjszQiZHyTLwSjvnWatnj
Z0FrzmoCz+UxSBC3oCwysfrZ4bOmegzU/k0Vvurc3JQlnLPiM1poWfIS7N+vKeGS
qrQ615dEg9DNo16hdiuQ1c4XLXBUWqkZYf2r1f/4DvwYaY7ocJwL2AfxGhQec0Aa
iX/Y2P4BWqVntOF5ylp7GdgKsHVC2zK0bkX160Pxz3Q6NDcUSxZFqSmPH2JO
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:10 2024 by rpki-client on console-fra.rpki-client.org