Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/46W00Mda2jHCu6pppsY1M3hhMTg.roa
File: 46W00Mda2jHCu6pppsY1M3hhMTg.roa (raw, json)
Hash identifier: 5oH0NfJW/+pltXlfku5uky7BBefkPA/D05c5PTStg0U=
Subject key identifier: E3:A5:B4:D0:C7:5A:DA:31:C2:BB:AA:69:A6:C6:35:33:78:61:31:38
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018E9DC9166BD8DEB953D5AB61BFD260C3B4
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/46W00Mda2jHCu6pppsY1M3hhMTg.roa
Signing time: Tue 02 Apr 2024 07:49:45 +0000
ROA not before: Tue 02 Apr 2024 07:49:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210542
IP address blocks: 89.213.129.0/24 maxlen: 24
213.218.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Apr 2024 07:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9d:c9:16:6b:d8:de:b9:53:d5:ab:61:bf:d2:60:c3:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 2 07:49:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e3a5b4d0c75ada31c2bbaa69a6c6353378613138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:40:30:be:94:a5:87:de:7f:70:5f:71:04:1f:
37:f4:b3:e1:5a:09:3a:dc:0c:5a:16:e4:42:6c:ba:
d4:0a:4a:3e:71:44:7a:c3:a7:aa:b0:9e:ea:b5:22:
b9:82:b9:26:8d:0e:bb:ab:e1:19:4b:27:61:d2:90:
4b:42:f0:a6:17:c8:c2:a4:a5:38:c2:f0:9b:8f:ac:
c8:d5:fd:5b:f6:d9:f0:62:91:16:15:ee:40:24:a3:
37:87:de:f5:67:f2:5f:ec:80:b2:39:3f:d0:6f:fa:
f3:5d:41:60:65:62:34:21:0d:b8:35:9b:32:79:21:
ec:c9:96:a3:64:01:9a:bd:7c:6a:cb:ce:97:2c:e0:
93:24:55:0f:2b:5e:04:9e:cf:14:d5:74:cb:6f:8c:
ee:1f:b1:2d:73:54:c9:e0:95:87:9f:3a:33:c9:5b:
b6:df:49:cb:c7:28:5f:69:60:a2:cf:4a:fa:9a:68:
76:89:c9:22:c9:f8:be:0a:4c:05:69:6d:0f:62:36:
1b:f0:e7:b4:62:0d:5d:15:92:6e:f8:db:dc:db:31:
2e:d1:85:71:55:8b:72:d9:53:c0:f7:19:c6:45:7f:
01:89:ef:34:54:84:88:95:82:3f:ef:1b:2d:d9:f5:
18:7f:81:91:c9:bf:27:3f:5b:ac:e4:ad:b4:7d:90:
a0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A5:B4:D0:C7:5A:DA:31:C2:BB:AA:69:A6:C6:35:33:78:61:31:38
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/46W00Mda2jHCu6pppsY1M3hhMTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.129.0/24
213.218.237.0/24
Signature Algorithm: sha256WithRSAEncryption
74:83:51:cf:be:91:78:f7:0b:e3:66:21:11:a6:5d:6d:25:25:
f2:e2:0f:22:b2:77:8a:7e:a9:1e:5e:3c:51:ae:5d:6c:ca:e2:
2c:f8:e5:2e:1b:38:25:d6:10:b9:a5:ee:68:e6:b7:e2:9d:61:
a6:d0:e3:3d:fb:00:a3:da:f2:30:9a:8a:98:1b:77:18:e8:7f:
80:0f:b7:19:b5:74:2b:ae:cf:fb:fa:ec:4a:dc:2f:4d:a0:9a:
2f:94:6a:43:6b:80:c6:2f:de:63:f8:0e:bb:6a:69:ad:3a:47:
08:c4:2f:fd:64:6b:9e:1d:81:b5:08:a7:14:be:51:3b:ef:b3:
30:a4:e2:7e:47:0c:b7:a6:91:14:96:0d:e5:41:8c:30:20:5f:
e3:6e:5c:08:ab:36:1e:a1:72:f5:b7:1a:39:71:47:d3:b4:50:
5f:13:36:06:d8:df:b7:b3:36:db:a6:41:63:13:df:f5:69:09:
e4:3b:35:6d:55:1e:cb:01:9f:08:94:4e:e4:3f:3d:f5:12:bf:
b7:cb:83:30:c7:88:86:d2:61:a6:d3:5f:8b:fa:fc:80:53:86:
f0:66:cd:37:94:e0:55:c1:ae:5b:53:68:f7:b0:55:41:43:11:
11:91:73:a4:e7:b1:c4:2f:f8:9d:f3:e6:65:da:2b:19:80:17:
26:c2:9f:c8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY6dyRZr2N65U9WrYb/SYMO0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQwNDAyMDc0OTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlM2E1YjRkMGM3NWFkYTMxYzJiYmFhNjlhNmM2MzUzMzc4NjEzMTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEAwvpSlh95/cF9xBB839LPhWgk6
3AxaFuRCbLrUCko+cUR6w6eqsJ7qtSK5grkmjQ67q+EZSydh0pBLQvCmF8jCpKU4
wvCbj6zI1f1b9tnwYpEWFe5AJKM3h971Z/Jf7ICyOT/Qb/rzXUFgZWI0IQ24NZsy
eSHsyZajZAGavXxqy86XLOCTJFUPK14Ens8U1XTLb4zuH7Etc1TJ4JWHnzozyVu2
30nLxyhfaWCiz0r6mmh2ickiyfi+CkwFaW0PYjYb8Oe0Yg1dFZJu+Nvc2zEu0YVx
VYty2VPA9xnGRX8Bie80VISIlYI/7xst2fUYf4GRyb8nP1us5K20fZCg+wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOOltNDHWtoxwruqaabGNTN4YTE4MB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvNDZXMDBNZGEyakhDdTZwcHBzWTFNM2hoTVRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWdWBAwQA
1drtMA0GCSqGSIb3DQEBCwUAA4IBAQB0g1HPvpF49wvjZiERpl1tJSXy4g8isneK
fqkeXjxRrl1syuIs+OUuGzgl1hC5pe5o5rfinWGm0OM9+wCj2vIwmoqYG3cY6H+A
D7cZtXQrrs/7+uxK3C9NoJovlGpDa4DGL95j+A67ammtOkcIxC/9ZGueHYG1CKcU
vlE777MwpOJ+Rwy3ppEUlg3lQYwwIF/jblwIqzYeoXL1txo5cUfTtFBfEzYG2N+3
szbbpkFjE9/1aQnkOzVtVR7LAZ8IlE7kPz31Er+3y4Mwx4iG0mGm01+L+vyAU4bw
Zs03lOBVwa5bU2j3sFVBQxERkXOk57HEL/id8+Zl2isZgBcmwp/I
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:13 2024 by rpki-client on console-fra.rpki-client.org