Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/YXFkEYTXjyOROH-1zVDwm3afK1M.roa
File: YXFkEYTXjyOROH-1zVDwm3afK1M.roa (raw, json)
Hash identifier: W8EtUtMLkElpNRY5RTC3CU8IQkOX4bU4kbvvprAs1sY=
Subject key identifier: 61:71:64:11:84:D7:8F:23:91:38:7F:B5:CD:50:F0:9B:76:9F:2B:53
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018B41A61BAE5EE8779252BCD7EDB82CD9FB
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/YXFkEYTXjyOROH-1zVDwm3afK1M.roa
Signing time: Wed 18 Oct 2023 07:18:06 +0000
ROA not before: Wed 18 Oct 2023 07:18:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 38186
IP address blocks: 89.213.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Nov 2023 09:13:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:41:a6:1b:ae:5e:e8:77:92:52:bc:d7:ed:b8:2c:d9:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Oct 18 07:18:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6171641184d78f2391387fb5cd50f09b769f2b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7e:68:b3:a4:a1:e5:3b:5c:88:9f:56:7f:d8:
a8:7a:a7:0d:c9:ad:08:48:59:d4:82:2e:e9:34:c3:
55:77:7d:ea:8e:ea:86:1c:8d:8d:1d:fb:7f:3d:5e:
80:8e:bb:28:5f:9f:10:e4:5b:8e:cb:12:ba:1e:a4:
a8:83:81:44:aa:fb:1d:7d:05:da:a4:8d:26:0b:00:
3d:81:0f:77:b2:91:23:1b:fd:ad:54:8a:a5:c5:7e:
e6:80:f1:c9:5c:6b:3b:58:41:37:69:fb:0a:df:12:
94:4d:3f:9f:14:2a:e0:6c:60:cc:cd:5d:ee:29:84:
33:8a:96:c7:3b:47:30:64:96:65:ac:c4:ec:60:00:
e3:d0:1a:eb:f6:55:1f:0e:b4:28:9f:dd:e8:3b:bd:
c5:9a:ce:93:d8:2b:e4:bb:cd:2b:58:6a:31:d0:6f:
5c:b2:eb:de:42:da:20:db:92:83:97:08:5e:3c:4c:
3c:29:4d:58:a0:c1:47:35:02:af:5d:94:be:e6:85:
c1:e4:23:30:7e:72:65:32:d1:07:81:cf:8f:81:96:
c1:87:ed:99:82:9d:6d:a7:8b:59:6c:8e:f7:d1:fc:
3d:d5:c0:42:99:4f:1c:a9:c1:6d:fd:4a:ab:21:9d:
76:df:40:5c:9e:83:73:c8:7e:13:d4:18:f8:8a:ae:
b4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:71:64:11:84:D7:8F:23:91:38:7F:B5:CD:50:F0:9B:76:9F:2B:53
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/YXFkEYTXjyOROH-1zVDwm3afK1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.178.0/24
Signature Algorithm: sha256WithRSAEncryption
89:c5:f0:7a:65:2b:23:88:fd:5b:d4:37:a7:8b:4d:eb:ea:0e:
1a:e6:74:3e:de:eb:4d:ba:2f:de:21:3d:56:a1:82:4b:c2:0f:
a0:d3:98:fa:63:7a:51:e5:4c:ee:bb:a8:91:6c:91:b0:89:0e:
3b:a8:f6:17:23:fd:89:7a:75:4e:ab:79:86:f3:47:b1:b4:54:
c0:56:91:a0:d4:8d:85:8f:ad:64:63:95:9b:d4:f9:1d:48:bb:
e6:cc:7f:12:b9:71:0c:4b:1b:ed:c6:4f:c5:81:7f:ec:4e:98:
d7:ec:55:dd:80:b2:26:b5:86:77:e5:1c:45:06:51:c9:64:05:
99:08:7d:35:5c:18:13:78:36:b6:35:70:b9:ac:6f:d8:9c:9e:
84:ae:01:cc:98:a4:37:42:a8:ad:8d:1a:b4:89:9e:23:92:76:
8f:fa:7d:1b:ed:97:96:51:41:08:8f:39:a8:68:41:d8:e3:09:
2a:68:97:f4:11:87:67:f4:4c:44:d2:7a:7f:3e:29:08:e7:f6:
0d:4b:dc:39:6e:c0:a5:70:73:24:c4:3e:6e:9d:45:5b:32:f1:
22:12:07:ef:7b:db:2e:1a:21:09:26:f3:9b:1f:da:50:47:e1:
35:86:2a:5d:cb:eb:21:cb:ee:af:5f:27:10:c5:32:35:79:fc:
c6:de:9f:8f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYtBphuuXuh3klK81+24LNn7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjMxMDE4MDcxODA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTcxNjQxMTg0ZDc4ZjIzOTEzODdmYjVjZDUwZjA5Yjc2OWYyYjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtH5os6Sh5TtciJ9Wf9ioeqcNya0I
SFnUgi7pNMNVd33qjuqGHI2NHft/PV6AjrsoX58Q5FuOyxK6HqSog4FEqvsdfQXa
pI0mCwA9gQ93spEjG/2tVIqlxX7mgPHJXGs7WEE3afsK3xKUTT+fFCrgbGDMzV3u
KYQzipbHO0cwZJZlrMTsYADj0Brr9lUfDrQon93oO73Fms6T2Cvku80rWGox0G9c
suveQtog25KDlwhePEw8KU1YoMFHNQKvXZS+5oXB5CMwfnJlMtEHgc+PgZbBh+2Z
gp1tp4tZbI730fw91cBCmU8cqcFt/UqrIZ1230BcnoNzyH4T1Bj4iq60uwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGFxZBGE148jkTh/tc1Q8Jt2nytTMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvWVhGa0VZVFhqeU9ST0gtMXpWRHdtM2FmSzFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWdWyMA0G
CSqGSIb3DQEBCwUAA4IBAQCJxfB6ZSsjiP1b1Deni03r6g4a5nQ+3utNui/eIT1W
oYJLwg+g05j6Y3pR5Uzuu6iRbJGwiQ47qPYXI/2JenVOq3mG80extFTAVpGg1I2F
j61kY5Wb1PkdSLvmzH8SuXEMSxvtxk/FgX/sTpjX7FXdgLImtYZ35RxFBlHJZAWZ
CH01XBgTeDa2NXC5rG/YnJ6ErgHMmKQ3QqitjRq0iZ4jknaP+n0b7ZeWUUEIjzmo
aEHY4wkqaJf0EYdn9ExE0np/PikI5/YNS9w5bsClcHMkxD5unUVbMvEiEgfve9su
GiEJJvObH9pQR+E1hipdy+shy+6vXycQxTI1efzG3p+P
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:24 2024 by rpki-client on console-ams.rpki-client.org