Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/BUuKIxo4oHjPPQnqAAhTBKnNNE4.roa
File: BUuKIxo4oHjPPQnqAAhTBKnNNE4.roa (raw, json)
Hash identifier: ve49TBcZn0yWezQduv/fe7dty5tnPqOA0CbvezHtWbk=
Subject key identifier: 05:4B:8A:23:1A:38:A0:78:CF:3D:09:EA:00:08:53:04:A9:CD:34:4E
Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Certificate serial: 018BF1A80283A5661BE085D53A534C7CD80D
Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/BUuKIxo4oHjPPQnqAAhTBKnNNE4.roa
Signing time: Tue 21 Nov 2023 11:33:21 +0000
ROA not before: Tue 21 Nov 2023 11:33:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 18345
IP address blocks: 89.42.20.0/24 maxlen: 24
89.149.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Dec 2023 09:23:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f1:a8:02:83:a5:66:1b:e0:85:d5:3a:53:4c:7c:d8:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Validity
Not Before: Nov 21 11:33:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=054b8a231a38a078cf3d09ea00085304a9cd344e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d5:60:cc:ae:a9:d6:dd:2d:16:2d:0b:65:2a:
58:93:0d:eb:a1:fb:81:bd:81:d6:64:84:9c:b3:1b:
d4:2e:86:9c:9b:67:e1:a8:cd:88:fd:0f:ca:a3:63:
ad:3d:2c:d0:2c:c5:a4:d6:e7:60:6f:47:a9:36:15:
02:d1:be:79:26:7c:43:73:1a:79:28:c2:c2:e0:cf:
17:75:bb:18:ce:92:9f:28:f7:82:1e:9a:8a:12:f4:
f3:af:e8:dd:f5:54:31:50:b1:28:06:72:24:bb:fe:
e9:dc:9c:32:13:c5:a6:e6:5c:0d:c9:0f:77:36:dc:
44:fa:66:c5:06:c9:75:f0:65:17:f5:62:40:1c:e5:
f1:65:57:29:dd:88:39:dd:ee:49:fa:43:48:1d:b1:
ea:60:52:6d:e7:d3:e0:f9:58:4e:f1:ad:f2:f7:bc:
50:bd:4c:8e:53:dd:82:87:10:9f:9a:84:35:58:b2:
61:ba:4e:37:9e:10:9a:dd:cd:97:dd:76:99:4b:3f:
a4:52:d8:4d:c0:5a:8d:c0:e5:29:c9:87:b3:19:ee:
dc:92:01:f0:51:20:b2:8a:ad:b0:c8:f8:76:42:0f:
98:99:ba:d6:69:89:23:50:df:91:12:05:13:e9:56:
d6:4f:05:80:41:59:6b:6c:29:2d:18:7d:25:74:1e:
97:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:4B:8A:23:1A:38:A0:78:CF:3D:09:EA:00:08:53:04:A9:CD:34:4E
X509v3 Authority Key Identifier:
keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/BUuKIxo4oHjPPQnqAAhTBKnNNE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.20.0/24
89.149.63.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:cc:7f:d4:5f:1b:ed:8d:53:a1:78:83:2b:1e:81:c7:3d:59:
ca:67:13:88:08:9c:68:2a:5d:7a:c3:86:de:c5:0d:53:ab:be:
47:7b:d2:37:b7:a0:95:12:61:6f:15:00:d8:65:d9:e7:d1:1e:
69:05:3f:8f:20:a1:00:19:cb:2d:e7:d9:7a:44:34:44:ba:d7:
f7:ad:de:10:47:45:a5:73:e8:8c:e6:7d:cc:89:46:f3:4a:28:
af:5f:5a:1a:fa:1a:cb:46:e1:ee:6c:15:07:e2:e4:29:95:50:
b3:e8:30:45:b0:24:3b:58:bc:9a:ad:fe:9d:a0:ca:d1:67:a7:
60:19:a8:f0:4a:e4:09:0a:b4:d8:0d:41:29:66:d1:fb:e9:1f:
c6:82:73:dd:bb:b2:7c:bf:a6:a5:70:48:10:c1:ca:b0:76:98:
6c:f2:96:1a:30:c4:45:a2:9d:52:14:19:f2:92:1f:36:41:ec:
9b:03:d4:6e:5c:8b:75:4e:47:71:22:0c:5a:e8:ad:0a:72:68:
dd:1b:03:57:5a:9e:12:8f:2a:5f:62:d8:1b:4a:0d:28:32:63:
9b:4b:05:c8:d8:4c:03:49:cb:40:90:45:14:22:b6:79:d7:3f:
75:16:31:5b:07:ea:24:86:3b:94:c8:75:58:d9:36:b0:45:ee:
4c:f7:07:bd
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYvxqAKDpWYb4IXVOlNMfNgNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNDU5YWE0NjAyYmZmYTJkMjY1MGJhNjY4MTg0NThjODlm
YzQ1ODIwHhcNMjMxMTIxMTEzMzIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTRiOGEyMzFhMzhhMDc4Y2YzZDA5ZWEwMDA4NTMwNGE5Y2QzNDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldVgzK6p1t0tFi0LZSpYkw3rofuB
vYHWZIScsxvULoacm2fhqM2I/Q/Ko2OtPSzQLMWk1udgb0epNhUC0b55JnxDcxp5
KMLC4M8XdbsYzpKfKPeCHpqKEvTzr+jd9VQxULEoBnIku/7p3JwyE8Wm5lwNyQ93
NtxE+mbFBsl18GUX9WJAHOXxZVcp3Yg53e5J+kNIHbHqYFJt59Pg+VhO8a3y97xQ
vUyOU92ChxCfmoQ1WLJhuk43nhCa3c2X3XaZSz+kUthNwFqNwOUpyYezGe7ckgHw
USCyiq2wyPh2Qg+YmbrWaYkjUN+REgUT6VbWTwWAQVlrbCktGH0ldB6XewIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAVLiiMaOKB4zz0J6gAIUwSpzTROMB8GA1UdIwQY
MBaAFJ5FmqRgK/+i0mULpmgYRYyJ/EWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWIt
MjhhODQxZGEwYmZkLzEvQlV1S0l4bzRvSGpQUFFucUFBaFRCS25OTkU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWItMjhhODQxZGEwYmZk
LzEvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWSoUAwQA
WZU/MA0GCSqGSIb3DQEBCwUAA4IBAQAqzH/UXxvtjVOheIMrHoHHPVnKZxOICJxo
Kl16w4bexQ1Tq75He9I3t6CVEmFvFQDYZdnn0R5pBT+PIKEAGcst59l6RDREutf3
rd4QR0Wlc+iM5n3MiUbzSiivX1oa+hrLRuHubBUH4uQplVCz6DBFsCQ7WLyarf6d
oMrRZ6dgGajwSuQJCrTYDUEpZtH76R/GgnPdu7J8v6alcEgQwcqwdphs8pYaMMRF
op1SFBnykh82QeybA9RuXIt1TkdxIgxa6K0KcmjdGwNXWp4SjypfYtgbSg0oMmOb
SwXI2EwDSctAkEUUIrZ51z91FjFbB+okhjuUyHVY2TawRe5M9we9
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:47 2024 by rpki-client on console-ams.rpki-client.org