Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/RvRdYARlE98PqQCLLeTqE5p7x4s.roa
File: RvRdYARlE98PqQCLLeTqE5p7x4s.roa (raw, json)
Hash identifier: kOcBTBQNIPZMcgYl/arnRmW70Y91Ob24+sZZ9yuKMJY=
Subject key identifier: 46:F4:5D:60:04:65:13:DF:0F:A9:00:8B:2D:E4:EA:13:9A:7B:C7:8B
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01892C0E050177CD4CC28D00875AB454B3EF
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/RvRdYARlE98PqQCLLeTqE5p7x4s.roa
Signing time: Thu 06 Jul 2023 16:34:23 +0000
ROA not before: Thu 06 Jul 2023 16:34:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35409
IP address blocks: 89.213.179.0/24 maxlen: 24
89.213.175.0/24 maxlen: 24
89.213.140.0/24 maxlen: 24
109.176.240.0/24 maxlen: 24
109.176.241.0/24 maxlen: 24
109.176.242.0/24 maxlen: 24
109.176.248.0/24 maxlen: 24
109.176.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Jul 2023 15:10:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2c:0e:05:01:77:cd:4c:c2:8d:00:87:5a:b4:54:b3:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 6 16:34:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46f45d60046513df0fa9008b2de4ea139a7bc78b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:81:29:af:6b:5f:da:ff:d5:14:3c:ae:ca:2f:
76:c6:4f:35:c7:2c:ff:5a:74:b9:57:40:b9:99:db:
73:74:31:a0:b8:4d:15:e6:ae:3a:0c:68:01:8c:32:
62:67:0d:4e:fb:88:88:bf:39:26:c2:cd:0e:ca:61:
7e:cf:41:47:e3:a4:78:cc:10:ea:85:f6:73:e0:e2:
52:eb:37:d6:33:2d:81:a0:01:71:06:f7:b0:2b:06:
71:68:f2:48:0c:af:2b:82:41:9e:5d:d6:9b:f9:8a:
c0:c5:3b:6d:16:8c:13:d1:b3:6c:83:a0:1d:8d:5b:
43:4b:64:49:57:33:21:01:dd:18:47:da:1b:4e:ac:
83:76:cf:fb:48:33:42:5f:4b:61:b8:59:13:63:92:
24:6f:ec:32:ba:34:f2:50:2a:38:5b:d0:01:7a:c6:
7c:e7:a1:f4:17:e6:83:0b:a4:09:34:2f:2d:ee:cd:
fc:3b:ab:74:7b:d8:cd:51:99:0d:20:d7:0e:09:e1:
b5:3c:76:3c:fd:10:42:d9:d9:1d:f4:99:2e:37:33:
d2:75:49:34:5a:fb:e6:73:41:79:e3:59:c8:57:18:
72:2b:59:a2:10:58:f3:d3:00:7d:81:e5:c1:cb:15:
60:ba:aa:bc:b7:ed:db:95:a0:12:f8:02:99:ec:47:
0c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F4:5D:60:04:65:13:DF:0F:A9:00:8B:2D:E4:EA:13:9A:7B:C7:8B
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/RvRdYARlE98PqQCLLeTqE5p7x4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.140.0/24
89.213.175.0/24
89.213.179.0/24
109.176.240.0-109.176.242.255
109.176.248.0/24
109.176.250.0/24
Signature Algorithm: sha256WithRSAEncryption
03:52:05:39:4b:e1:a2:f5:b7:09:6e:ce:f1:0d:e7:ec:1e:bb:
05:96:17:01:81:c6:7a:bc:0f:f0:33:ca:6a:58:4c:ca:23:65:
2f:51:1f:f4:4c:96:e9:8d:13:0e:0c:f5:c1:f0:f8:c6:7b:23:
2f:63:33:61:f1:e0:37:ff:19:32:67:5b:38:83:ae:f0:9e:bc:
64:40:7e:74:b3:74:d6:69:bc:38:cc:31:d7:ad:40:93:1d:85:
a1:0c:16:e9:ba:6a:c7:c0:b9:4b:8d:f3:7b:f7:c8:8c:81:da:
f3:83:f3:91:b0:27:02:84:6f:7c:e5:79:9b:de:7c:cd:e1:38:
1a:32:ef:45:87:14:08:43:56:d2:82:67:eb:fa:45:5e:0e:41:
de:98:d2:b9:f2:9b:45:80:30:d3:c6:84:a2:fa:99:ed:70:a8:
11:79:b7:69:30:72:b9:8f:64:ea:da:9e:94:fa:e5:d0:1a:6e:
da:09:05:2f:8a:47:2c:18:8f:b7:5e:33:c6:4e:5c:7b:67:c0:
8b:d5:e1:d4:3b:2d:12:49:c4:d0:b9:63:02:96:07:e1:59:49:
94:36:4e:7a:2e:ba:05:a8:a9:ac:4b:fb:30:f6:e6:6e:2e:34:
20:05:f8:3a:f0:13:21:90:8a:76:55:ce:1e:73:63:4b:a8:1f:
0a:38:c2:40
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAYksDgUBd81Mwo0Ah1q0VLPvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjMwNzA2MTYzNDIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NmY0NWQ2MDA0NjUxM2RmMGZhOTAwOGIyZGU0ZWExMzlhN2JjNzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIEpr2tf2v/VFDyuyi92xk81xyz/
WnS5V0C5mdtzdDGguE0V5q46DGgBjDJiZw1O+4iIvzkmws0OymF+z0FH46R4zBDq
hfZz4OJS6zfWMy2BoAFxBvewKwZxaPJIDK8rgkGeXdab+YrAxTttFowT0bNsg6Ad
jVtDS2RJVzMhAd0YR9obTqyDds/7SDNCX0thuFkTY5Ikb+wyujTyUCo4W9ABesZ8
56H0F+aDC6QJNC8t7s38O6t0e9jNUZkNINcOCeG1PHY8/RBC2dkd9JkuNzPSdUk0
Wvvmc0F541nIVxhyK1miEFjz0wB9geXByxVguqq8t+3blaAS+AKZ7EcMJQIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFEb0XWAEZRPfD6kAiy3k6hOae8eLMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvUnZSZFlBUmxFOThQcVFDTExlVHFFNXA3eDRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQAWdWMAwQA
WdWvAwQAWdWzMAwDBARtsPADBABtsPIDBABtsPgDBABtsPowDQYJKoZIhvcNAQEL
BQADggEBAANSBTlL4aL1twluzvEN5+weuwWWFwGBxnq8D/AzympYTMojZS9RH/RM
lumNEw4M9cHw+MZ7Iy9jM2Hx4Df/GTJnWziDrvCevGRAfnSzdNZpvDjMMdetQJMd
haEMFum6asfAuUuN83v3yIyB2vOD85GwJwKEb3zleZvefM3hOBoy70WHFAhDVtKC
Z+v6RV4OQd6Y0rnym0WAMNPGhKL6me1wqBF5t2kwcrmPZOranpT65dAabtoJBS+K
RywYj7deM8ZOXHtnwIvV4dQ7LRJJxNC5YwKWB+FZSZQ2TnouugWoqaxL+zD25m4u
NCAF+DrwEyGQinZVzh5zY0uoHwo4wkA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:23 2024 by rpki-client on console-ams.rpki-client.org