Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/9ThCWDCAOUftA9ZgVSCNrOmFqAA.roa
File: 9ThCWDCAOUftA9ZgVSCNrOmFqAA.roa (raw, json)
Hash identifier: URsPBO2hLvVNaXCw3vgHgI7LDQJUZ4vZX/vf1GXVogU=
Subject key identifier: F5:38:42:58:30:80:39:47:ED:03:D6:60:55:20:8D:AC:E9:85:A8:00
Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial: 0185712791832396ACD6525211D4A006E792
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/9ThCWDCAOUftA9ZgVSCNrOmFqAA.roa
Signing time: Mon 02 Jan 2023 06:24:56 +0000
ROA not before: Mon 02 Jan 2023 06:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209096
IP address blocks: 80.249.189.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:91:83:23:96:ac:d6:52:52:11:d4:a0:06:e7:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
Validity
Not Before: Jan 2 06:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f538425830803947ed03d66055208dace985a800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a4:d8:29:ff:90:55:2c:09:4d:cf:c8:9a:75:
89:ee:41:70:87:a2:db:2c:f2:3a:f7:de:22:2d:2a:
b3:9d:74:b7:80:34:c9:6f:e5:a6:4b:77:14:1d:d6:
47:2f:13:47:a9:e9:63:db:d6:c9:9a:c0:66:a1:31:
19:7e:13:80:86:6d:fe:b5:87:42:ef:81:01:bf:59:
22:14:63:12:00:bf:e4:7c:0a:f4:7f:c1:60:cb:de:
ba:45:18:bc:53:3c:5c:0a:4f:74:8d:b0:e1:1f:69:
c7:8d:df:b6:e4:67:32:ea:67:a0:f8:fb:09:6a:10:
25:57:8e:47:74:f7:aa:31:b2:d2:95:db:1a:0e:fe:
14:f4:1c:14:e1:c0:9a:27:f3:8b:fc:ab:01:3e:55:
26:8b:26:80:8c:a3:cb:db:2d:a4:a0:c1:0f:4a:6b:
df:01:21:e8:d8:7e:c8:bb:ca:fa:92:f0:0b:d6:26:
58:4b:df:0c:12:29:59:bd:b7:f2:37:29:df:dd:cf:
f8:f4:18:0f:f4:5e:0e:59:06:72:94:96:bc:32:5a:
65:c2:03:97:ac:23:f5:41:39:58:7d:c9:93:ca:d2:
e4:63:30:ce:15:93:d1:f0:22:95:a3:26:4f:81:f8:
ad:c0:a2:14:41:ec:76:8c:5c:75:28:11:06:c6:27:
d0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:38:42:58:30:80:39:47:ED:03:D6:60:55:20:8D:AC:E9:85:A8:00
X509v3 Authority Key Identifier:
keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/9ThCWDCAOUftA9ZgVSCNrOmFqAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.249.189.0/24
Signature Algorithm: sha256WithRSAEncryption
99:99:92:87:01:a2:34:5c:8b:b6:be:59:14:02:51:76:6a:1c:
44:88:6a:3e:33:80:53:2c:8b:8f:a9:65:25:40:c3:8d:62:49:
ff:97:da:ba:30:f6:e6:8f:fb:36:1b:15:3f:e2:d1:be:6b:16:
19:8d:4c:50:a6:a8:7a:ed:46:2b:e0:8d:61:e4:a3:6b:46:14:
55:78:4c:53:03:fb:c3:c3:4c:de:8b:a1:ca:d3:9a:0d:00:79:
fd:fd:69:f6:73:af:58:83:a3:a3:f2:ff:c9:be:3c:36:56:b3:
33:80:61:7a:ee:20:5c:af:03:70:6c:36:aa:c4:ad:3e:cf:96:
2b:08:bf:95:c5:a4:28:d3:aa:1c:2e:ba:37:24:7d:1b:3b:f0:
1b:b3:77:9d:f1:a8:94:50:77:71:b3:e2:4d:4b:28:be:e1:79:
45:85:d3:b7:99:c4:4e:4e:a2:a9:29:ed:8b:81:50:a6:14:9b:
c9:33:27:a9:22:e0:e6:32:a5:46:4d:bd:75:d2:90:b5:96:c5:
62:c1:1d:b5:8f:d3:5c:b1:d0:51:a6:d1:d4:56:4d:00:81:54:
09:0a:1e:14:1e:38:89:92:13:95:75:5d:9b:38:be:36:a0:1d:
5b:e3:ec:8c:15:f0:58:c0:47:a2:05:58:c2:8e:5e:2f:35:00:
c2:87:70:58
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxJ5GDI5as1lJSEdSgBueSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYmE0OGM3ZTJjOWUwNWVkYTU0NmQ4OTkxNDZiODlmNzk5
ZGY4NWQwHhcNMjMwMTAyMDYyNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTM4NDI1ODMwODAzOTQ3ZWQwM2Q2NjA1NTIwOGRhY2U5ODVhODAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaTYKf+QVSwJTc/ImnWJ7kFwh6Lb
LPI6994iLSqznXS3gDTJb+WmS3cUHdZHLxNHqelj29bJmsBmoTEZfhOAhm3+tYdC
74EBv1kiFGMSAL/kfAr0f8Fgy966RRi8UzxcCk90jbDhH2nHjd+25Gcy6meg+PsJ
ahAlV45HdPeqMbLSldsaDv4U9BwU4cCaJ/OL/KsBPlUmiyaAjKPL2y2koMEPSmvf
ASHo2H7Iu8r6kvAL1iZYS98MEilZvbfyNynf3c/49BgP9F4OWQZylJa8MlplwgOX
rCP1QTlYfcmTytLkYzDOFZPR8CKVoyZPgfitwKIUQex2jFx1KBEGxifQ7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPU4QlgwgDlH7QPWYFUgjazphagAMB8GA1UdIwQY
MBaAFL66SMfiyeBe2lRtiZFGuJ95nfhdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnJwSXgtTEo0RjdhVkcySmtVYTRuM21kLUYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC83Zjg4MjEtMTU2Ni00M2Y0LWFiMjYt
M2Q1MjIxODFhMmM0LzEvOVRoQ1dEQ0FPVWZ0QTlaZ1ZTQ05yT21GcUFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC83Zjg4MjEtMTU2Ni00M2Y0LWFiMjYtM2Q1MjIxODFhMmM0
LzEvdnJwSXgtTEo0RjdhVkcySmtVYTRuM21kLUYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUPm9MA0G
CSqGSIb3DQEBCwUAA4IBAQCZmZKHAaI0XIu2vlkUAlF2ahxEiGo+M4BTLIuPqWUl
QMONYkn/l9q6MPbmj/s2GxU/4tG+axYZjUxQpqh67UYr4I1h5KNrRhRVeExTA/vD
w0zei6HK05oNAHn9/Wn2c69Yg6Oj8v/Jvjw2VrMzgGF67iBcrwNwbDaqxK0+z5Yr
CL+VxaQo06ocLro3JH0bO/Abs3ed8aiUUHdxs+JNSyi+4XlFhdO3mcROTqKpKe2L
gVCmFJvJMyepIuDmMqVGTb110pC1lsViwR21j9NcsdBRptHUVk0AgVQJCh4UHjiJ
khOVdV2bOL42oB1b4+yMFfBYwEeiBVjCjl4vNQDCh3BY
-----END CERTIFICATE-----
Generated at Mon Jan 1 23:29:59 2024 by rpki-client on console-ams.rpki-client.org