Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/TdDFTfT_fulsgdIHN6sLU4AhP1Y.roa
File: TdDFTfT_fulsgdIHN6sLU4AhP1Y.roa (raw, json)
Hash identifier: KkaAb99p5ynfm4AhkE8gWcMNTEIrmegB5xyjSVn4c/E=
Subject key identifier: 4D:D0:C5:4D:F4:FF:7E:E9:6C:81:D2:07:37:AB:0B:53:80:21:3F:56
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0189CEF6AA035DC171416EDEA212F4ED80D8
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/TdDFTfT_fulsgdIHN6sLU4AhP1Y.roa
Signing time: Mon 07 Aug 2023 07:46:59 +0000
ROA not before: Mon 07 Aug 2023 07:46:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397563
IP address blocks: 89.213.183.0/24 maxlen: 24
89.213.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Aug 2023 09:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ce:f6:aa:03:5d:c1:71:41:6e:de:a2:12:f4:ed:80:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 7 07:46:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4dd0c54df4ff7ee96c81d20737ab0b5380213f56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:94:24:de:c9:4b:7d:f0:31:30:d2:a8:b1:57:
b7:d8:5c:6a:a8:22:04:bf:cc:ff:4f:83:d1:ea:9c:
e4:fd:6e:fd:69:89:5f:7d:09:bc:e7:da:0c:14:fe:
dd:33:d9:91:25:f0:05:9e:4d:89:47:4c:d3:cb:e7:
d0:aa:c6:68:62:8c:77:f5:d4:b1:ca:c3:88:da:94:
1c:0b:31:99:c2:26:35:03:b0:53:07:5d:7f:1b:10:
8d:9e:a4:4b:9b:e8:b1:53:e5:a7:23:b8:5f:3c:0f:
34:fc:d2:ea:01:8c:41:a7:0f:1a:10:ed:5b:20:d9:
d1:14:7c:e1:81:73:de:28:29:da:d0:ae:8f:a5:9a:
ed:50:a4:f5:51:4c:04:e4:a6:48:37:e8:c4:58:22:
98:2e:57:24:d2:fb:ce:06:18:1f:ae:eb:d7:86:60:
b6:a2:34:d0:01:d4:ee:99:87:37:82:ab:97:0f:8f:
9b:87:61:e8:ae:0a:30:8b:56:48:4d:5f:10:c7:af:
9e:f4:94:a8:9a:59:9c:28:e0:00:3e:71:40:b6:03:
7b:26:af:4a:99:64:f5:88:22:64:db:72:07:53:66:
47:0f:5a:f0:3b:b7:f5:e8:7a:a1:2f:8f:a7:14:6a:
5b:e7:38:c7:e8:01:c8:f7:57:8b:85:5b:ef:93:83:
76:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D0:C5:4D:F4:FF:7E:E9:6C:81:D2:07:37:AB:0B:53:80:21:3F:56
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/TdDFTfT_fulsgdIHN6sLU4AhP1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.45.0/24
89.213.183.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:ed:d0:fd:30:a6:ee:3b:dc:ed:e1:80:24:41:2f:cd:3a:1d:
53:d9:7e:40:67:07:29:fd:dc:e4:5d:09:1f:f5:85:48:98:eb:
43:40:42:2e:49:9c:31:5a:aa:ab:f4:39:b9:87:cc:b5:f7:a3:
1a:dc:ce:73:af:a2:60:f7:c2:a7:92:b9:62:cd:4d:41:38:27:
0d:fe:c6:62:75:82:d2:de:6c:1c:44:c3:9f:2f:15:aa:c8:c6:
89:6a:7d:6a:e1:8a:78:0d:b6:ab:40:a9:c7:f8:e5:4b:8a:32:
55:53:82:26:d1:f3:7c:a5:4f:bb:c1:c1:59:5b:a8:39:df:64:
3e:9c:35:c4:58:3d:cb:b4:08:59:dc:7e:96:b7:2b:e8:f9:62:
59:e0:1d:c4:d9:6b:4d:91:73:04:41:6d:5a:e6:64:89:f5:7a:
b0:b6:07:72:ec:e6:5a:31:e3:06:61:e3:0c:24:67:b8:b9:90:
7f:b8:c7:2a:0c:c2:00:4c:2a:5c:a1:ab:f5:65:24:fa:54:50:
c4:d1:56:83:de:d2:76:fd:e5:66:01:5e:ce:82:38:d6:53:3c:
c6:28:72:94:ca:fd:7d:3c:81:ec:29:24:f7:f0:75:3d:ef:88:
19:0d:04:80:bb:e8:04:40:8a:3f:99:5c:f7:0d:34:bc:24:78:
6f:1e:28:c4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYnO9qoDXcFxQW7eohL07YDYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjMwODA3MDc0NjU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZGQwYzU0ZGY0ZmY3ZWU5NmM4MWQyMDczN2FiMGI1MzgwMjEzZjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpQk3slLffAxMNKosVe32FxqqCIE
v8z/T4PR6pzk/W79aYlffQm859oMFP7dM9mRJfAFnk2JR0zTy+fQqsZoYox39dSx
ysOI2pQcCzGZwiY1A7BTB11/GxCNnqRLm+ixU+WnI7hfPA80/NLqAYxBpw8aEO1b
INnRFHzhgXPeKCna0K6PpZrtUKT1UUwE5KZIN+jEWCKYLlck0vvOBhgfruvXhmC2
ojTQAdTumYc3gquXD4+bh2Horgowi1ZITV8Qx6+e9JSomlmcKOAAPnFAtgN7Jq9K
mWT1iCJk23IHU2ZHD1rwO7f16HqhL4+nFGpb5zjH6AHI91eLhVvvk4N2+wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFE3QxU30/37pbIHSBzerC1OAIT9WMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvVGRERlRmVF9mdWxzZ2RJSE42c0xVNEFoUDFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWdUtAwQA
WdW3MA0GCSqGSIb3DQEBCwUAA4IBAQAq7dD9MKbuO9zt4YAkQS/NOh1T2X5AZwcp
/dzkXQkf9YVImOtDQEIuSZwxWqqr9Dm5h8y196Ma3M5zr6Jg98KnkrlizU1BOCcN
/sZidYLS3mwcRMOfLxWqyMaJan1q4Yp4DbarQKnH+OVLijJVU4Im0fN8pU+7wcFZ
W6g532Q+nDXEWD3LtAhZ3H6Wtyvo+WJZ4B3E2WtNkXMEQW1a5mSJ9Xqwtgdy7OZa
MeMGYeMMJGe4uZB/uMcqDMIATCpcoav1ZST6VFDE0VaD3tJ2/eVmAV7OgjjWUzzG
KHKUyv19PIHsKST38HU974gZDQSAu+gEQIo/mVz3DTS8JHhvHijE
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:23 2024 by rpki-client on console-ams.rpki-client.org