Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/aMa7bB6fXkZSIqp0ORF_u5G_HXM.roa
File: aMa7bB6fXkZSIqp0ORF_u5G_HXM.roa (raw, json)
Hash identifier: LbzdaQQSrfbaFwRzo5kis/GjzafWxBD0ntc9suufpQo=
Subject key identifier: 68:C6:BB:6C:1E:9F:5E:46:52:22:AA:74:39:11:7F:BB:91:BF:1D:73
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018AFB73169A16336A8EBAD5E3BDDC7B862B
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/aMa7bB6fXkZSIqp0ORF_u5G_HXM.roa
Signing time: Wed 04 Oct 2023 16:08:58 +0000
ROA not before: Wed 04 Oct 2023 16:08:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60528
IP address blocks: 89.213.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 08 Oct 2023 15:57:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fb:73:16:9a:16:33:6a:8e:ba:d5:e3:bd:dc:7b:86:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Oct 4 16:08:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=68c6bb6c1e9f5e465222aa7439117fbb91bf1d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9b:3d:00:41:7f:27:d5:df:f8:9d:04:fd:58:
82:1f:44:44:0f:bf:35:ec:4c:aa:fb:cb:05:d9:d8:
eb:73:bd:ae:2b:ea:2b:2a:2c:54:71:a0:5d:79:e5:
cd:6e:a4:27:0d:ed:92:b6:af:78:a1:60:1f:68:76:
13:33:20:bd:c2:d8:9d:ad:ef:fc:4a:23:49:28:67:
6e:90:3f:27:67:e5:cb:c9:21:f4:62:04:8d:bf:56:
41:06:93:a7:c0:d8:b3:fc:f3:1c:ac:f0:56:d1:dc:
44:48:8d:fc:cd:97:03:cb:89:93:11:c3:34:89:72:
a4:f1:3d:e0:ec:ec:90:ba:c8:1d:32:fb:c9:2e:d5:
97:7b:98:ad:36:9a:67:12:f8:de:50:c2:86:42:bc:
58:5d:62:5d:8c:1a:67:9f:26:c8:17:8b:cb:3e:3d:
03:f3:fc:87:fb:f8:6f:5d:65:8c:50:28:15:d9:1e:
83:8f:ae:cc:cf:c4:58:40:e9:67:91:be:be:1d:22:
83:61:3e:90:02:19:ec:a6:9c:61:7a:af:0e:a7:ae:
ac:f4:03:88:43:05:20:d4:4f:e1:d4:87:20:3a:69:
5e:c3:65:16:d2:d6:fa:b1:00:b3:71:f5:be:b9:a3:
3c:12:c1:b8:55:78:d5:b8:65:92:a7:6f:5c:30:7d:
55:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C6:BB:6C:1E:9F:5E:46:52:22:AA:74:39:11:7F:BB:91:BF:1D:73
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/aMa7bB6fXkZSIqp0ORF_u5G_HXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.42.0/24
Signature Algorithm: sha256WithRSAEncryption
02:77:ac:1b:a1:9e:54:ef:5a:27:d6:b8:1f:5b:bb:38:db:a6:
b9:6a:28:50:ac:47:60:d2:ef:54:58:7d:59:23:0f:df:6c:5b:
c5:ba:d6:0b:c0:ae:d5:80:38:76:9e:a5:72:3b:76:4e:38:83:
1a:27:cc:5e:10:04:21:7c:82:41:8c:66:4c:c9:14:43:48:64:
65:82:82:45:e0:66:6c:90:91:2b:54:fb:fe:cc:ec:d3:d0:62:
92:83:a1:55:f4:a7:95:50:d9:21:2d:12:cc:bd:9e:3f:44:46:
0e:f7:a5:0b:5e:f7:27:b3:c8:1a:57:ad:0c:6e:c2:8f:69:a4:
b8:46:e6:86:cb:b1:52:86:c2:60:40:a7:a8:50:3c:cd:64:77:
b2:0a:9a:33:d2:b5:25:4f:6f:c2:62:35:71:e2:e5:87:be:dc:
05:46:26:bc:a7:67:7c:dc:33:4e:55:e6:9f:66:a5:bb:6e:d4:
78:94:6c:ba:c3:76:6e:8d:0e:c9:8c:fa:96:de:c1:b9:41:17:
b6:1d:54:79:45:51:92:3f:4a:2e:30:51:ca:17:6f:3e:45:66:
08:f6:e4:01:e8:39:7c:5e:a8:33:66:dc:f1:a9:24:a0:74:0a:
c2:f0:5a:33:eb:1c:e9:d9:3e:72:e9:7d:34:09:6b:e0:23:a6:
95:eb:e3:c8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYr7cxaaFjNqjrrV473ce4YrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjMxMDA0MTYwODU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OGM2YmI2YzFlOWY1ZTQ2NTIyMmFhNzQzOTExN2ZiYjkxYmYxZDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Js9AEF/J9Xf+J0E/ViCH0RED781
7Eyq+8sF2djrc72uK+orKixUcaBdeeXNbqQnDe2Stq94oWAfaHYTMyC9wtidre/8
SiNJKGdukD8nZ+XLySH0YgSNv1ZBBpOnwNiz/PMcrPBW0dxESI38zZcDy4mTEcM0
iXKk8T3g7OyQusgdMvvJLtWXe5itNppnEvjeUMKGQrxYXWJdjBpnnybIF4vLPj0D
8/yH+/hvXWWMUCgV2R6Dj67Mz8RYQOlnkb6+HSKDYT6QAhnsppxheq8Op66s9AOI
QwUg1E/h1IcgOmlew2UW0tb6sQCzcfW+uaM8EsG4VXjVuGWSp29cMH1V8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGjGu2wen15GUiKqdDkRf7uRvx1zMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvYU1hN2JCNmZYa1pTSXFwME9SRl91NUdfSFhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWdUqMA0G
CSqGSIb3DQEBCwUAA4IBAQACd6wboZ5U71on1rgfW7s426a5aihQrEdg0u9UWH1Z
Iw/fbFvFutYLwK7VgDh2nqVyO3ZOOIMaJ8xeEAQhfIJBjGZMyRRDSGRlgoJF4GZs
kJErVPv+zOzT0GKSg6FV9KeVUNkhLRLMvZ4/REYO96ULXvcns8gaV60MbsKPaaS4
RuaGy7FShsJgQKeoUDzNZHeyCpoz0rUlT2/CYjVx4uWHvtwFRia8p2d83DNOVeaf
ZqW7btR4lGy6w3ZujQ7JjPqW3sG5QRe2HVR5RVGSP0ouMFHKF28+RWYI9uQB6Dl8
XqgzZtzxqSSgdArC8Foz6xzp2T5y6X00CWvgI6aV6+PI
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:16 2024 by rpki-client on console-fra.rpki-client.org