Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/GbvezqDznmjrcHnzed4CmdhQ7PM.roa
File: GbvezqDznmjrcHnzed4CmdhQ7PM.roa (raw, json)
Hash identifier: j0PusES1fguelHUn6pLvl2Gy5ure0usHF5EbF9ryCUY=
Subject key identifier: 19:BB:DE:CE:A0:F3:9E:68:EB:70:79:F3:79:DE:02:99:D8:50:EC:F3
Certificate issuer: /CN=cb608201f88aeae9486b9fa87189d796c54027dd
Certificate serial: 018E3DA4F68B7C8311191CADE654A195D36C
Authority key identifier: CB:60:82:01:F8:8A:EA:E9:48:6B:9F:A8:71:89:D7:96:C5:40:27:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2CCAfiK6ulIa5-ocYnXlsVAJ90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/GbvezqDznmjrcHnzed4CmdhQ7PM.roa
Signing time: Thu 14 Mar 2024 15:46:44 +0000
ROA not before: Thu 14 Mar 2024 15:46:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213296
IP address blocks: 89.23.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Apr 2024 13:28:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3d:a4:f6:8b:7c:83:11:19:1c:ad:e6:54:a1:95:d3:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb608201f88aeae9486b9fa87189d796c54027dd
Validity
Not Before: Mar 14 15:46:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19bbdecea0f39e68eb7079f379de0299d850ecf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:85:c6:e8:09:77:1b:a5:03:30:27:3c:d3:40:
16:fa:4b:44:6f:95:62:78:43:35:3c:16:df:ee:f2:
f4:be:4e:40:44:56:65:a3:80:24:d4:1d:cd:5e:5e:
27:04:f9:ac:ed:87:c3:2a:57:28:f9:be:e6:dc:86:
b1:9e:92:9a:e0:50:7d:ec:04:c3:b7:41:29:15:83:
bd:fa:5f:00:11:2b:02:ea:39:f4:0b:33:93:f7:4f:
14:f3:f9:81:ad:e0:a2:a1:a4:8a:24:9c:d9:4b:57:
10:d4:32:9c:80:9e:d3:6a:18:95:48:d6:0f:b3:2e:
c5:42:cc:2f:67:36:8c:fe:81:02:66:2f:43:92:33:
01:e5:e7:e2:92:6b:39:41:c1:06:d8:ed:e0:dd:5e:
c7:94:4f:ec:49:26:84:09:c2:0c:fb:6e:d8:f8:34:
13:aa:75:4d:5b:37:b5:b6:9c:bd:a0:0c:4b:7a:3e:
92:e7:d2:82:ad:ba:ef:04:cf:a8:f7:94:30:46:48:
65:95:6a:4d:52:8a:a6:14:7d:c5:1c:2f:e4:e8:7a:
a2:57:5f:4a:90:c2:2b:98:6b:13:88:4b:9a:4f:51:
3e:9c:9c:4e:d4:89:c7:8c:46:5b:56:b1:c8:22:6b:
54:1c:fe:5c:e6:04:f0:40:a1:a6:cd:d1:22:4b:a5:
a1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:BB:DE:CE:A0:F3:9E:68:EB:70:79:F3:79:DE:02:99:D8:50:EC:F3
X509v3 Authority Key Identifier:
keyid:CB:60:82:01:F8:8A:EA:E9:48:6B:9F:A8:71:89:D7:96:C5:40:27:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2CCAfiK6ulIa5-ocYnXlsVAJ90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/GbvezqDznmjrcHnzed4CmdhQ7PM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.126.0/24
Signature Algorithm: sha256WithRSAEncryption
69:0a:09:91:b5:a3:d8:34:4c:90:59:35:a7:a7:4c:82:7e:16:
a1:af:95:d1:c6:43:e4:22:66:b1:8b:43:f7:dc:37:0a:8c:3d:
b3:bf:d6:a8:d5:ce:9e:10:c5:7e:ff:10:ba:8c:8f:1c:5b:f9:
c4:b1:5f:47:1f:be:b5:05:97:94:cd:b6:4b:91:70:d0:e7:ee:
95:7f:0c:7a:7f:a5:a2:61:03:37:6e:ce:0c:cd:c2:27:1f:d9:
ea:7b:ee:c5:da:2b:8f:22:b3:bd:75:57:41:97:e0:4f:ba:80:
9f:46:1d:ca:2c:c5:a3:a9:a8:7a:34:55:77:83:b9:5d:cd:db:
6a:33:ac:e0:f4:5a:03:23:41:43:7f:9f:5f:be:de:93:4e:72:
19:22:2e:db:06:4c:4a:44:ed:6f:f7:b8:ff:4b:5d:d9:d0:50:
c8:a2:05:a8:6f:34:b7:f8:25:88:aa:52:62:91:13:5f:db:07:
0e:b9:53:7b:c8:04:b5:a4:5a:f8:2e:5a:fb:73:d1:f8:16:0d:
ae:c0:60:eb:a2:1c:79:cb:b5:29:95:06:3b:0e:2c:6a:46:2c:
d2:f8:91:13:74:ff:4f:89:5b:b6:5f:4d:6b:89:a1:b5:47:cc:
92:f8:d9:5a:27:e7:5a:83:35:6f:61:26:de:13:ac:1b:1d:93:
a6:81:b5:83
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY49pPaLfIMRGRyt5lShldNsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNjA4MjAxZjg4YWVhZTk0ODZiOWZhODcxODlkNzk2YzU0
MDI3ZGQwHhcNMjQwMzE0MTU0NjQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOWJiZGVjZWEwZjM5ZTY4ZWI3MDc5ZjM3OWRlMDI5OWQ4NTBlY2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYXG6Al3G6UDMCc800AW+ktEb5Vi
eEM1PBbf7vL0vk5ARFZlo4Ak1B3NXl4nBPms7YfDKlco+b7m3IaxnpKa4FB97ATD
t0EpFYO9+l8AESsC6jn0CzOT908U8/mBreCioaSKJJzZS1cQ1DKcgJ7TahiVSNYP
sy7FQswvZzaM/oECZi9DkjMB5efikms5QcEG2O3g3V7HlE/sSSaECcIM+27Y+DQT
qnVNWze1tpy9oAxLej6S59KCrbrvBM+o95QwRkhllWpNUoqmFH3FHC/k6HqiV19K
kMIrmGsTiEuaT1E+nJxO1InHjEZbVrHIImtUHP5c5gTwQKGmzdEiS6WhvwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBm73s6g855o63B583neApnYUOzzMB8GA1UdIwQY
MBaAFMtgggH4iurpSGufqHGJ15bFQCfdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTJDQ0FmaUs2dWxJYTUtb2NZblhsc1ZBSjkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mZjEwYTUtMmZhMy00OTQyLWIyYTkt
YmZlNTJiNGFmOGI3LzEvR2J2ZXpxRHpubWpyY0huemVkNENtZGhRN1BNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9mZjEwYTUtMmZhMy00OTQyLWIyYTktYmZlNTJiNGFmOGI3
LzEveTJDQ0FmaUs2dWxJYTUtb2NZblhsc1ZBSjkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWRd+MA0G
CSqGSIb3DQEBCwUAA4IBAQBpCgmRtaPYNEyQWTWnp0yCfhahr5XRxkPkImaxi0P3
3DcKjD2zv9ao1c6eEMV+/xC6jI8cW/nEsV9HH761BZeUzbZLkXDQ5+6Vfwx6f6Wi
YQM3bs4MzcInH9nqe+7F2iuPIrO9dVdBl+BPuoCfRh3KLMWjqah6NFV3g7ldzdtq
M6zg9FoDI0FDf59fvt6TTnIZIi7bBkxKRO1v97j/S13Z0FDIogWobzS3+CWIqlJi
kRNf2wcOuVN7yAS1pFr4Llr7c9H4Fg2uwGDrohx5y7UplQY7DixqRizS+JETdP9P
iVu2X01riaG1R8yS+NlaJ+dagzVvYSbeE6wbHZOmgbWD
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:40 2024 by rpki-client on console-ams.rpki-client.org