Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/JXcP_wzd3_tIJv3EgYqiD5A8jSU.roa
File: JXcP_wzd3_tIJv3EgYqiD5A8jSU.roa (raw, json)
Hash identifier: eIxT5DEViLeb/iQ8Ir0/OjBqNduN1Nz7QBty53Gum3Q=
Subject key identifier: 25:77:0F:FF:0C:DD:DF:FB:48:26:FD:C4:81:8A:A2:0F:90:3C:8D:25
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 0189C0655644876ADFF60B074C34134EEA7D
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/JXcP_wzd3_tIJv3EgYqiD5A8jSU.roa
Signing time: Fri 04 Aug 2023 11:53:33 +0000
ROA not before: Fri 04 Aug 2023 11:53:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 89.117.241.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c0:65:56:44:87:6a:df:f6:0b:07:4c:34:13:4e:ea:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Aug 4 11:53:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25770fff0cdddffb4826fdc4818aa20f903c8d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:17:0d:72:c1:a1:59:37:66:21:fa:d0:cf:5a:
9f:5e:dd:00:e6:67:60:23:cd:d1:52:5f:a5:ca:30:
10:fe:85:04:28:22:39:f1:82:47:16:76:19:2d:2d:
35:66:7b:e6:dd:18:7c:4e:8a:d1:a5:69:1b:35:c1:
5b:50:d3:c7:57:c5:0c:9d:b2:1b:b7:af:39:a8:55:
32:12:15:31:b9:57:33:87:b5:9b:f2:bf:e8:75:ee:
b8:d0:3a:51:6f:48:66:b9:03:f2:57:0b:2b:57:c2:
4d:6f:f3:58:1e:bc:4d:f3:c2:39:77:db:9d:2d:25:
9c:95:81:a8:97:cd:51:a6:08:ff:6e:c2:15:1c:d3:
f6:74:67:39:b6:67:4f:20:6d:d8:2a:8c:97:0a:22:
42:4a:11:2e:5a:4b:e4:a8:9d:d9:fa:a4:2d:44:e2:
78:b9:ad:29:57:59:b9:3a:7d:65:53:ef:e3:77:b3:
a0:c6:78:33:15:cf:be:ed:be:aa:b9:d9:52:ae:69:
e3:86:b0:76:59:28:94:63:82:65:b4:d8:31:36:b3:
e8:6b:c5:a5:b4:3e:bf:59:fb:c5:80:48:1d:6d:20:
29:e8:d8:64:ac:81:c4:fd:ad:be:3e:73:60:de:f8:
0a:a5:8b:17:44:ca:35:4f:8e:03:68:6b:06:03:d1:
79:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:77:0F:FF:0C:DD:DF:FB:48:26:FD:C4:81:8A:A2:0F:90:3C:8D:25
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/JXcP_wzd3_tIJv3EgYqiD5A8jSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.117.241.0/24
Signature Algorithm: sha256WithRSAEncryption
59:31:1a:a1:a9:d8:d9:e7:61:76:63:c2:57:19:19:f3:be:08:
53:c7:93:77:fd:0f:52:ce:76:92:f4:ac:2e:c1:2f:a7:41:0d:
25:9e:63:dd:04:8e:90:81:20:39:03:0a:0a:94:fd:b0:74:3b:
cc:63:b6:64:69:5a:e4:df:53:79:c0:30:e5:32:cc:d2:ce:b9:
37:e2:a3:c5:47:49:6b:30:fc:fb:69:25:75:4f:63:9d:48:0c:
84:37:6f:17:fd:e1:fa:3d:e1:2e:f4:b1:fc:c0:d1:32:d9:d5:
4e:9e:29:a5:28:89:7e:d7:b0:9e:aa:5c:b8:b9:38:ef:8c:66:
5b:e2:ff:af:f6:32:35:50:2b:97:19:b3:fc:a3:8e:6d:a8:ef:
26:b1:b6:29:2a:20:38:3d:ee:22:48:de:30:68:19:23:30:1b:
a0:f2:b6:dd:51:15:e1:f8:06:c8:39:3a:68:07:6f:ca:87:df:
3a:5e:c1:95:a8:62:28:63:76:a7:39:43:1c:8d:d3:48:fc:f3:
57:81:82:d2:7e:ae:c0:17:0c:8b:b4:38:e2:9c:ed:33:d0:0c:
66:e7:48:97:be:67:91:f7:8b:8f:a1:bc:de:9d:f5:00:05:64:
08:10:3c:6f:3d:b7:50:c6:a3:3f:41:3b:9b:c5:71:7f:ab:64:
43:dc:af:6c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYnAZVZEh2rf9gsHTDQTTup9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZGQ4MWE4MzNkOWIwNDNjN2ZmZDYzNWE1OTg3ZjUzNjk3
MTE4MGQwHhcNMjMwODA0MTE1MzMzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTc3MGZmZjBjZGRkZmZiNDgyNmZkYzQ4MThhYTIwZjkwM2M4ZDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRcNcsGhWTdmIfrQz1qfXt0A5mdg
I83RUl+lyjAQ/oUEKCI58YJHFnYZLS01Znvm3Rh8TorRpWkbNcFbUNPHV8UMnbIb
t685qFUyEhUxuVczh7Wb8r/ode640DpRb0hmuQPyVwsrV8JNb/NYHrxN88I5d9ud
LSWclYGol81Rpgj/bsIVHNP2dGc5tmdPIG3YKoyXCiJCShEuWkvkqJ3Z+qQtROJ4
ua0pV1m5On1lU+/jd7OgxngzFc++7b6qudlSrmnjhrB2WSiUY4JltNgxNrPoa8Wl
tD6/WfvFgEgdbSAp6NhkrIHE/a2+PnNg3vgKpYsXRMo1T44DaGsGA9F5XwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCV3D/8M3d/7SCb9xIGKog+QPI0lMB8GA1UdIwQY
MBaAFPDdgagz2bBDx//WNaWYf1NpcRgNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUt
MDQ2ODA0MjQ4NmRjLzEvSlhjUF93emQzX3RJSnYzRWdZcWlENUE4alNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUtMDQ2ODA0MjQ4NmRj
LzEvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWXXxMA0G
CSqGSIb3DQEBCwUAA4IBAQBZMRqhqdjZ52F2Y8JXGRnzvghTx5N3/Q9SznaS9Kwu
wS+nQQ0lnmPdBI6QgSA5AwoKlP2wdDvMY7ZkaVrk31N5wDDlMszSzrk34qPFR0lr
MPz7aSV1T2OdSAyEN28X/eH6PeEu9LH8wNEy2dVOnimlKIl+17Ceqly4uTjvjGZb
4v+v9jI1UCuXGbP8o45tqO8msbYpKiA4Pe4iSN4waBkjMBug8rbdURXh+AbIOTpo
B2/Kh986XsGVqGIoY3anOUMcjdNI/PNXgYLSfq7AFwyLtDjinO0z0Axm50iXvmeR
94uPobzenfUABWQIEDxvPbdQxqM/QTubxXF/q2RD3K9s
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:19 2024 by rpki-client on console-ams.rpki-client.org