Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/0Mzk3Ch2BvAGTXN9KVqkGIkZxuc.roa
File: 0Mzk3Ch2BvAGTXN9KVqkGIkZxuc.roa (raw, json)
Hash identifier: ZGloVOy7LGhUkbwhMStraoQtiIP83dpS2PO1IXIPicU=
Subject key identifier: D0:CC:E4:DC:28:76:06:F0:06:4D:73:7D:29:5A:A4:18:89:19:C6:E7
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 0191BC67275EF8E6DC6002F081E980277A58
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/0Mzk3Ch2BvAGTXN9KVqkGIkZxuc.roa
Signing time: Wed 04 Sep 2024 09:39:22 +0000
ROA not before: Wed 04 Sep 2024 09:39:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 89.187.20.0/24 maxlen: 24
89.187.24.0/24 maxlen: 24
89.187.25.0/24 maxlen: 24
89.187.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Sep 2024 15:23:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:bc:67:27:5e:f8:e6:dc:60:02:f0:81:e9:80:27:7a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: Sep 4 09:39:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0cce4dc287606f0064d737d295aa4188919c6e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5b:30:66:e6:85:82:cc:b2:0f:d6:d4:23:2f:
c7:23:50:12:a2:29:42:27:50:e6:da:65:c9:05:8e:
30:fb:24:2b:54:3b:f8:62:9a:8d:f1:3b:00:88:7c:
6e:b2:cc:eb:32:71:dc:79:ab:01:ee:1c:4d:38:31:
db:b8:2e:9e:8c:71:86:9e:96:66:2d:8e:59:7e:49:
98:62:f9:17:7c:e7:ae:54:d2:0f:b3:47:75:ea:b1:
28:7d:ba:e4:8c:ae:75:ff:9e:1c:d2:f9:b8:7d:c3:
56:28:99:4a:bc:ce:a1:0e:1a:19:98:73:f3:63:2b:
34:8e:03:22:38:31:fe:df:0c:69:c3:99:42:9d:56:
41:00:74:af:c3:7f:1e:27:07:8c:5c:17:71:8e:8f:
2e:fe:04:a2:86:fa:0f:25:b4:aa:97:26:c9:a6:f5:
fd:74:a2:76:26:c5:df:e3:b6:b1:ca:0f:be:86:7f:
cd:a0:3f:a9:09:b5:8a:12:61:03:b5:96:5e:75:41:
b4:5b:b0:ad:fe:71:21:8d:2e:e3:66:1d:62:b9:c1:
c8:76:61:f5:ec:78:c0:d0:a0:59:45:19:89:63:6a:
0a:86:d3:77:d1:4f:5d:2a:4b:ab:74:7f:a4:3e:e5:
f6:6f:f2:b9:e6:98:20:7d:f3:19:c2:68:f9:cb:72:
91:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:CC:E4:DC:28:76:06:F0:06:4D:73:7D:29:5A:A4:18:89:19:C6:E7
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/0Mzk3Ch2BvAGTXN9KVqkGIkZxuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.20.0/24
89.187.24.0-89.187.26.255
Signature Algorithm: sha256WithRSAEncryption
3e:ef:e2:49:ab:55:a3:76:25:a9:39:4a:09:8c:0f:b1:d7:07:
a1:c1:2e:41:3b:86:7a:e3:38:c0:ed:0a:98:a8:b1:e3:ac:ee:
cc:98:27:5b:3d:ef:b6:24:2f:df:81:6f:09:7b:3c:19:62:ac:
e8:12:ba:ed:52:96:68:f4:8d:ea:8b:59:96:bd:79:42:91:ee:
7a:0e:36:b7:a1:41:d1:1d:fb:2a:44:2b:55:ce:68:1f:05:a5:
98:e3:d0:95:6c:1e:84:15:bb:d8:0a:f5:f9:4b:f2:2b:25:00:
71:eb:ec:10:7e:7e:7e:a2:5f:e9:db:30:02:74:b6:63:02:45:
75:06:08:d3:73:79:ce:0f:79:9d:32:18:c7:38:88:ce:8a:ee:
2e:ae:6b:2c:5f:28:88:0e:f9:26:7b:8b:f3:77:5a:26:9a:6c:
d9:45:77:a4:2a:0b:b8:5f:ff:43:43:08:fb:8c:34:40:4b:bd:
d5:36:1d:15:11:62:00:df:8d:6f:f2:37:fd:28:27:b6:2d:7b:
14:17:4d:a4:aa:d4:a3:85:00:e8:93:c7:a3:f1:0f:a5:64:46:
fb:f3:30:3f:9b:d3:c2:45:0e:6b:75:d5:31:b3:69:50:b0:78:
34:c2:72:52:89:f0:5c:e7:0a:29:fa:b3:15:54:7c:7c:60:d6:
cc:43:50:ec
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZG8Zyde+ObcYALwgemAJ3pYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MWVjN2NjZjBmYTc2MWVkOTliYzVhN2E5ZWMwZDBlZWIw
YmYwNTUwHhcNMjQwOTA0MDkzOTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMGNjZTRkYzI4NzYwNmYwMDY0ZDczN2QyOTVhYTQxODg5MTljNmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1swZuaFgsyyD9bUIy/HI1ASoilC
J1Dm2mXJBY4w+yQrVDv4YpqN8TsAiHxusszrMnHceasB7hxNODHbuC6ejHGGnpZm
LY5ZfkmYYvkXfOeuVNIPs0d16rEofbrkjK51/54c0vm4fcNWKJlKvM6hDhoZmHPz
Yys0jgMiODH+3wxpw5lCnVZBAHSvw38eJweMXBdxjo8u/gSihvoPJbSqlybJpvX9
dKJ2JsXf47axyg++hn/NoD+pCbWKEmEDtZZedUG0W7Ct/nEhjS7jZh1iucHIdmH1
7HjA0KBZRRmJY2oKhtN30U9dKkurdH+kPuX2b/K55pggffMZwmj5y3KRkQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFNDM5NwodgbwBk1zfSlapBiJGcbnMB8GA1UdIwQY
MBaAFAkex8zw+nYe2ZvFp6nsDQ7rC/BVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQt
NDVjZmM4NTdkZGRkLzEvME16azNDaDJCdkFHVFhOOUtWcWtHSWtaeHVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQtNDVjZmM4NTdkZGRk
LzEvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAWbsUMAwD
BANZuxgDBABZuxowDQYJKoZIhvcNAQELBQADggEBAD7v4kmrVaN2Jak5SgmMD7HX
B6HBLkE7hnrjOMDtCpioseOs7syYJ1s977YkL9+Bbwl7PBlirOgSuu1Slmj0jeqL
WZa9eUKR7noONrehQdEd+ypEK1XOaB8FpZjj0JVsHoQVu9gK9flL8islAHHr7BB+
fn6iX+nbMAJ0tmMCRXUGCNNzec4PeZ0yGMc4iM6K7i6uayxfKIgO+SZ7i/N3Wiaa
bNlFd6QqC7hf/0NDCPuMNEBLvdU2HRURYgDfjW/yN/0oJ7YtexQXTaSq1KOFAOiT
x6PxD6VkRvvzMD+b08JFDmt11TGzaVCweDTCclKJ8FznCin6sxVUfHxg1sxDUOw=
-----END CERTIFICATE-----
Generated at Thu Sep 5 18:38:46 2024 by rpki-client on console-ams.rpki-client.org