Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/2vkMSOgDFNc_tLuEc7xV1zzKLDs.roa
File: 2vkMSOgDFNc_tLuEc7xV1zzKLDs.roa (raw, json)
Hash identifier: vLYZDqHxrGCzcMRalBQeP+HYtwXvxJK49TFQOzbIfTI=
Subject key identifier: DA:F9:0C:48:E8:03:14:D7:3F:B4:BB:84:73:BC:55:D7:3C:CA:2C:3B
Certificate issuer: /CN=cb608201f88aeae9486b9fa87189d796c54027dd
Certificate serial: 018F5E2FB832D8F579E40715426D83F5255C
Authority key identifier: CB:60:82:01:F8:8A:EA:E9:48:6B:9F:A8:71:89:D7:96:C5:40:27:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2CCAfiK6ulIa5-ocYnXlsVAJ90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/2vkMSOgDFNc_tLuEc7xV1zzKLDs.roa
Signing time: Thu 09 May 2024 16:28:56 +0000
ROA not before: Thu 09 May 2024 16:28:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12697
IP address blocks: 89.23.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 May 2024 13:10:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:5e:2f:b8:32:d8:f5:79:e4:07:15:42:6d:83:f5:25:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb608201f88aeae9486b9fa87189d796c54027dd
Validity
Not Before: May 9 16:28:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=daf90c48e80314d73fb4bb8473bc55d73cca2c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9d:7a:24:8e:b2:ec:f9:a8:88:71:3d:41:72:
f7:8b:29:51:0e:fd:73:56:52:1e:25:41:b4:7b:e8:
83:92:4a:7b:49:5c:dc:a4:41:c9:da:77:77:40:d0:
15:04:19:78:e2:d7:1a:3b:4b:2e:6d:de:f2:e6:96:
6c:c0:24:f2:54:7f:09:4f:30:7a:fd:26:3c:7d:38:
1d:51:ae:fd:c9:79:c7:24:60:08:c5:a6:0d:0c:37:
dc:23:e8:e6:ff:22:91:f6:d0:62:a8:a5:f8:2e:b1:
d4:f4:ea:c9:0a:1d:d9:f1:80:ba:ea:2a:af:14:31:
07:c6:f0:e6:02:5e:21:d5:37:2c:eb:d7:88:3d:ed:
89:f6:9b:57:c5:b1:8f:07:8d:f4:b8:9d:02:73:8a:
4d:36:86:12:58:4b:04:23:94:e2:23:62:2e:92:a6:
71:14:1b:43:eb:ce:32:7f:29:f3:29:5d:8e:68:87:
ae:1d:0e:f5:20:cb:5a:69:63:1d:65:0b:81:bc:47:
68:1d:63:90:98:51:8d:bf:e3:4e:05:c0:a8:48:0f:
85:ff:f1:ef:d1:37:31:89:31:9d:2b:81:e4:68:c6:
38:e7:b3:23:5d:8c:8b:b6:3a:31:76:74:6a:c6:16:
5c:c7:38:9b:20:68:bd:7f:ff:88:b5:44:b5:0e:b3:
92:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F9:0C:48:E8:03:14:D7:3F:B4:BB:84:73:BC:55:D7:3C:CA:2C:3B
X509v3 Authority Key Identifier:
keyid:CB:60:82:01:F8:8A:EA:E9:48:6B:9F:A8:71:89:D7:96:C5:40:27:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2CCAfiK6ulIa5-ocYnXlsVAJ90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/2vkMSOgDFNc_tLuEc7xV1zzKLDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.126.0/24
Signature Algorithm: sha256WithRSAEncryption
81:0a:4a:0a:c6:31:2e:b2:12:06:f9:33:33:98:1c:ba:b5:43:
98:59:e0:0e:0e:bd:71:d4:4b:a4:81:f4:6c:d2:58:05:26:74:
bc:d5:72:7d:b5:24:0a:ad:c5:25:6d:95:da:30:1b:bb:51:a4:
05:48:81:11:70:a1:83:c3:0e:f4:18:49:1d:04:80:0a:6d:35:
8d:a2:9f:7f:45:db:f5:fd:81:cc:88:06:31:7c:c4:11:16:8a:
4e:e5:a3:0a:ec:ba:ab:e6:6c:f2:51:ed:7a:30:5b:17:be:52:
d2:2b:3d:77:f2:65:d4:99:25:04:e0:4d:9a:04:b8:83:d5:5b:
3f:f2:00:fe:ea:05:e3:2b:2e:43:81:d9:8c:5b:52:c8:23:83:
f5:e0:3c:94:b1:60:08:e4:77:22:1d:32:16:77:44:52:8a:88:
7f:59:30:3b:cb:30:86:f5:c1:2b:7f:ec:0a:56:4f:ab:e6:c8:
b0:29:4f:0f:31:b4:9b:08:39:61:92:11:c9:aa:ba:55:84:3a:
af:f7:8a:6e:e1:cd:b7:de:a9:65:a4:31:5d:c2:92:d5:92:71:
f5:db:65:3b:ea:1f:04:f5:9b:a6:1d:b0:6e:47:fd:e4:4a:75:
a5:e9:04:7c:52:d9:d7:89:36:94:fb:1f:12:f3:f8:26:fb:49:
80:6e:33:e3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY9eL7gy2PV55AcVQm2D9SVcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNjA4MjAxZjg4YWVhZTk0ODZiOWZhODcxODlkNzk2YzU0
MDI3ZGQwHhcNMjQwNTA5MTYyODU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYWY5MGM0OGU4MDMxNGQ3M2ZiNGJiODQ3M2JjNTVkNzNjY2EyYzNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJ16JI6y7PmoiHE9QXL3iylRDv1z
VlIeJUG0e+iDkkp7SVzcpEHJ2nd3QNAVBBl44tcaO0subd7y5pZswCTyVH8JTzB6
/SY8fTgdUa79yXnHJGAIxaYNDDfcI+jm/yKR9tBiqKX4LrHU9OrJCh3Z8YC66iqv
FDEHxvDmAl4h1Tcs69eIPe2J9ptXxbGPB430uJ0Cc4pNNoYSWEsEI5TiI2IukqZx
FBtD684yfynzKV2OaIeuHQ71IMtaaWMdZQuBvEdoHWOQmFGNv+NOBcCoSA+F//Hv
0TcxiTGdK4HkaMY457MjXYyLtjoxdnRqxhZcxzibIGi9f/+ItUS1DrOS8QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNr5DEjoAxTXP7S7hHO8Vdc8yiw7MB8GA1UdIwQY
MBaAFMtgggH4iurpSGufqHGJ15bFQCfdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTJDQ0FmaUs2dWxJYTUtb2NZblhsc1ZBSjkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mZjEwYTUtMmZhMy00OTQyLWIyYTkt
YmZlNTJiNGFmOGI3LzEvMnZrTVNPZ0RGTmNfdEx1RWM3eFYxenpLTERzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9mZjEwYTUtMmZhMy00OTQyLWIyYTktYmZlNTJiNGFmOGI3
LzEveTJDQ0FmaUs2dWxJYTUtb2NZblhsc1ZBSjkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWRd+MA0G
CSqGSIb3DQEBCwUAA4IBAQCBCkoKxjEushIG+TMzmBy6tUOYWeAODr1x1EukgfRs
0lgFJnS81XJ9tSQKrcUlbZXaMBu7UaQFSIERcKGDww70GEkdBIAKbTWNop9/Rdv1
/YHMiAYxfMQRFopO5aMK7Lqr5mzyUe16MFsXvlLSKz138mXUmSUE4E2aBLiD1Vs/
8gD+6gXjKy5DgdmMW1LII4P14DyUsWAI5HciHTIWd0RSioh/WTA7yzCG9cErf+wK
Vk+r5siwKU8PMbSbCDlhkhHJqrpVhDqv94pu4c233qllpDFdwpLVknH122U76h8E
9ZumHbBuR/3kSnWl6QR8UtnXiTaU+x8S8/gm+0mAbjPj
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:24 2024 by rpki-client on console-fra.rpki-client.org