Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/gIKmjZ1r2SAGgYglvsITJIntw-c.roa
File: gIKmjZ1r2SAGgYglvsITJIntw-c.roa (raw, json)
Hash identifier: uJlu3n2jtIfmbTSq3eFEY/cE3YlCfvwOVdBKRdiplZ8=
Subject key identifier: 80:82:A6:8D:9D:6B:D9:20:06:81:88:25:BE:C2:13:24:89:ED:C3:E7
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0189E40417475970EBF88CF1A875602547CF
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/gIKmjZ1r2SAGgYglvsITJIntw-c.roa
Signing time: Fri 11 Aug 2023 09:53:40 +0000
ROA not before: Fri 11 Aug 2023 09:53:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208287
IP address blocks: 89.213.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Aug 2023 11:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e4:04:17:47:59:70:eb:f8:8c:f1:a8:75:60:25:47:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 11 09:53:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8082a68d9d6bd92006818825bec2132489edc3e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e9:53:be:02:b1:06:99:32:4b:e0:ba:75:9e:
ac:6c:f9:d6:97:2f:24:8e:a2:30:3a:69:b4:2a:37:
8f:30:06:08:e3:9c:d4:6a:55:51:da:b3:8d:d4:e2:
b9:db:35:c8:b1:b5:cd:e4:08:5a:3a:36:a2:91:80:
b1:cd:4c:fb:fc:46:81:89:a8:8c:36:8b:1e:f8:8e:
0d:b5:02:de:04:82:23:af:8a:de:4c:a8:58:4a:07:
71:dc:ec:1b:ae:13:30:29:72:ab:16:ca:75:78:36:
fe:52:af:2d:bf:45:42:ff:1b:7a:af:ff:19:61:1c:
73:c7:88:d7:04:8e:53:f9:5b:b8:03:ba:6d:40:5c:
77:21:b1:ad:60:f7:bb:71:e1:49:d1:45:3d:41:4a:
a7:ca:95:83:af:53:4c:e2:bc:ee:5c:61:40:70:bc:
f1:bf:13:64:f9:82:ff:61:c1:ef:f3:4b:ff:8f:53:
a1:1d:0c:3e:81:b5:b3:e7:85:a0:27:71:f2:ce:26:
ab:4f:31:06:ee:4a:4e:89:61:9f:34:d0:10:c7:c8:
40:ff:a1:d8:fc:ca:65:26:c4:de:e0:8f:ff:2a:e8:
61:ed:30:19:4c:8c:62:5a:4c:ea:60:88:65:6d:41:
3e:c0:fc:75:e3:ab:cf:8f:76:61:ba:1d:d0:0c:a6:
68:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:82:A6:8D:9D:6B:D9:20:06:81:88:25:BE:C2:13:24:89:ED:C3:E7
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/gIKmjZ1r2SAGgYglvsITJIntw-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.178.0/24
Signature Algorithm: sha256WithRSAEncryption
07:e6:ee:9a:d0:56:e7:a3:6b:d1:33:b5:7d:5a:8b:f6:c7:96:
ed:91:07:a3:57:85:fe:5c:2a:6f:d1:84:66:e5:8b:1f:78:a5:
a2:95:3c:bd:8c:c9:29:94:4b:63:ea:c6:9a:97:14:c1:70:6e:
e7:f9:26:9f:ca:e7:be:4b:c6:4f:61:c4:46:b1:de:40:2d:3b:
46:49:1a:5b:be:7d:72:74:6e:62:a7:95:49:05:8a:4f:98:c9:
e7:ee:20:a2:67:ee:b7:05:6a:f5:43:18:c7:6e:bf:9a:2f:79:
3e:ae:85:aa:5c:7f:a2:49:d1:18:4d:10:73:eb:67:65:6f:d1:
a4:d7:a5:ee:a3:c5:a1:0e:d9:63:b7:4b:52:fb:92:2b:a8:db:
93:e2:7d:55:88:af:1c:0e:86:af:14:b1:5b:02:e4:99:50:5f:
9a:c2:e0:49:01:4d:65:08:17:23:5f:a8:88:69:52:df:58:19:
9e:53:6e:54:36:fe:3e:02:a3:80:68:5e:b8:0a:9b:6e:e3:2d:
e2:60:ba:a5:e9:bd:6f:87:f4:c9:40:bf:b7:93:78:3c:fb:63:
a4:7f:87:5e:7a:1c:1d:28:c7:6e:2d:78:ed:e6:2c:36:5b:90:
f2:6e:4e:ee:b5:c4:cd:14:b4:6b:87:46:f8:af:6c:41:5c:ea:
c2:30:48:ef
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYnkBBdHWXDr+IzxqHVgJUfPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjMwODExMDk1MzQwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDgyYTY4ZDlkNmJkOTIwMDY4MTg4MjViZWMyMTMyNDg5ZWRjM2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmelTvgKxBpkyS+C6dZ6sbPnWly8k
jqIwOmm0KjePMAYI45zUalVR2rON1OK52zXIsbXN5AhaOjaikYCxzUz7/EaBiaiM
Nose+I4NtQLeBIIjr4reTKhYSgdx3OwbrhMwKXKrFsp1eDb+Uq8tv0VC/xt6r/8Z
YRxzx4jXBI5T+Vu4A7ptQFx3IbGtYPe7ceFJ0UU9QUqnypWDr1NM4rzuXGFAcLzx
vxNk+YL/YcHv80v/j1OhHQw+gbWz54WgJ3HyziarTzEG7kpOiWGfNNAQx8hA/6HY
/MplJsTe4I//Kuhh7TAZTIxiWkzqYIhlbUE+wPx146vPj3Zhuh3QDKZoHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFICCpo2da9kgBoGIJb7CEySJ7cPnMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvZ0lLbWpaMXIyU0FHZ1lnbHZzSVRKSW50dy1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWdWyMA0G
CSqGSIb3DQEBCwUAA4IBAQAH5u6a0Fbno2vRM7V9Wov2x5btkQejV4X+XCpv0YRm
5YsfeKWilTy9jMkplEtj6saalxTBcG7n+Safyue+S8ZPYcRGsd5ALTtGSRpbvn1y
dG5ip5VJBYpPmMnn7iCiZ+63BWr1QxjHbr+aL3k+roWqXH+iSdEYTRBz62dlb9Gk
16Xuo8WhDtljt0tS+5IrqNuT4n1ViK8cDoavFLFbAuSZUF+awuBJAU1lCBcjX6iI
aVLfWBmeU25UNv4+AqOAaF64Cptu4y3iYLql6b1vh/TJQL+3k3g8+2Okf4deehwd
KMduLXjt5iw2W5Dybk7utcTNFLRrh0b4r2xBXOrCMEjv
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:30 2024 by rpki-client on console-ams.rpki-client.org