Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/zoW1C_h3N5Lp4BeTeGS_y9PyUvc.roa
File: zoW1C_h3N5Lp4BeTeGS_y9PyUvc.roa (raw, json)
Hash identifier: xGfrClAmjEmECjjCyh585Aooc3+G/nnu0WDF1EeE46c=
Subject key identifier: CE:85:B5:0B:F8:77:37:92:E9:E0:17:93:78:64:BF:CB:D3:F2:52:F7
Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Certificate serial: 018AF05B1F1E6E338791D3CCEDF380C02AC8
Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/zoW1C_h3N5Lp4BeTeGS_y9PyUvc.roa
Signing time: Mon 02 Oct 2023 12:26:58 +0000
ROA not before: Mon 02 Oct 2023 12:26:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 46562
IP address blocks: 89.149.25.0/24 maxlen: 24
84.247.65.0/24 maxlen: 24
84.247.66.0/24 maxlen: 24
84.247.74.0/24 maxlen: 24
84.247.75.0/24 maxlen: 24
84.247.73.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f0:5b:1f:1e:6e:33:87:91:d3:cc:ed:f3:80:c0:2a:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Validity
Not Before: Oct 2 12:26:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce85b50bf8773792e9e017937864bfcbd3f252f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5b:39:13:c8:e8:28:af:60:62:25:14:fd:2c:
83:a5:a0:9e:f4:8b:80:33:51:87:d7:a4:1f:e6:bc:
ce:60:59:e5:89:04:a8:81:e4:15:96:29:15:34:09:
d7:a6:0d:a9:29:ab:74:5b:3d:a6:47:fe:91:1b:32:
54:3c:80:5f:b9:1e:7a:b5:d1:c7:65:59:ec:1b:62:
6c:c5:4d:1e:68:dd:c1:45:f4:34:7f:a0:ba:fd:06:
68:be:d0:a3:99:0a:29:25:67:9e:e9:54:6a:05:0a:
5a:83:6a:74:01:3c:74:ee:ed:7c:61:58:71:c9:a6:
70:cf:56:5d:c3:2e:22:03:a7:8c:9a:c0:1e:73:27:
9e:0d:17:a6:cd:7b:93:ed:21:06:a1:ec:07:e2:fd:
0d:e8:6a:48:53:86:6d:39:94:52:4b:37:57:9f:0c:
28:2c:65:20:88:df:ad:1a:15:91:0c:19:b2:66:82:
ec:70:92:66:57:5e:64:70:6c:61:ca:89:3d:a8:da:
95:d1:ce:d6:d6:25:5b:a6:ef:78:28:7b:55:e9:92:
97:1b:0f:b4:25:b9:cf:93:7d:0a:19:4c:52:cc:9a:
4a:20:30:b2:e0:5a:45:65:5b:14:c4:0c:16:dd:fe:
68:50:32:64:7b:31:e6:80:40:09:97:bf:35:f1:a9:
95:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:85:B5:0B:F8:77:37:92:E9:E0:17:93:78:64:BF:CB:D3:F2:52:F7
X509v3 Authority Key Identifier:
keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/zoW1C_h3N5Lp4BeTeGS_y9PyUvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.65.0-84.247.66.255
84.247.73.0-84.247.75.255
89.149.25.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:c4:16:f4:05:f5:d1:ce:1f:1c:a7:6e:94:08:eb:78:09:3d:
2b:7a:f3:14:b7:18:e3:10:b5:ef:06:13:67:94:a4:10:ab:36:
be:95:10:9d:ce:b7:4f:76:95:6b:1f:63:90:10:00:c7:b4:a2:
ea:fd:ab:c3:07:bb:0b:fc:d6:42:c6:c3:44:8d:9d:c5:d4:ac:
17:8e:2c:ff:4f:23:5f:d0:14:12:43:1f:7e:a7:c3:ee:43:35:
77:b4:25:3f:f2:61:72:aa:44:6a:13:5e:31:49:07:84:c3:44:
b2:51:31:06:b9:52:07:ee:18:b9:6f:d7:7e:52:95:a7:66:40:
d8:df:b6:0e:fe:7e:55:1d:52:1a:3e:83:79:94:48:79:d9:a6:
f1:27:5b:97:1a:e1:86:66:4c:98:c6:7d:9a:26:2e:4e:e0:04:
19:4c:40:0b:31:47:84:94:78:83:de:f2:95:e7:d8:47:e2:ef:
43:c9:96:2b:9e:ac:2f:9f:8d:0c:87:ba:d0:38:43:33:42:60:
09:dc:b6:01:fe:d2:bb:35:10:84:f8:f4:71:72:c3:f0:09:b5:
ab:08:59:16:ec:56:37:8e:3e:15:81:bd:0a:10:42:b0:80:72:
8c:19:f1:c6:1d:49:e9:77:77:77:5e:41:80:f9:a9:9a:db:71:
64:5e:43:fb
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAYrwWx8ebjOHkdPM7fOAwCrIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNDU5YWE0NjAyYmZmYTJkMjY1MGJhNjY4MTg0NThjODlm
YzQ1ODIwHhcNMjMxMDAyMTIyNjU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZTg1YjUwYmY4NzczNzkyZTllMDE3OTM3ODY0YmZjYmQzZjI1MmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1s5E8joKK9gYiUU/SyDpaCe9IuA
M1GH16Qf5rzOYFnliQSogeQVlikVNAnXpg2pKat0Wz2mR/6RGzJUPIBfuR56tdHH
ZVnsG2JsxU0eaN3BRfQ0f6C6/QZovtCjmQopJWee6VRqBQpag2p0ATx07u18YVhx
yaZwz1Zdwy4iA6eMmsAecyeeDRemzXuT7SEGoewH4v0N6GpIU4ZtOZRSSzdXnwwo
LGUgiN+tGhWRDBmyZoLscJJmV15kcGxhyok9qNqV0c7W1iVbpu94KHtV6ZKXGw+0
JbnPk30KGUxSzJpKIDCy4FpFZVsUxAwW3f5oUDJkezHmgEAJl7818amVxwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFM6FtQv4dzeS6eAXk3hkv8vT8lL3MB8GA1UdIwQY
MBaAFJ5FmqRgK/+i0mULpmgYRYyJ/EWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWIt
MjhhODQxZGEwYmZkLzEvem9XMUNfaDNONUxwNEJlVGVHU195OVB5VXZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWItMjhhODQxZGEwYmZk
LzEvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBABU90ED
BABU90IwDAMEAFT3SQMEAlT3SAMEAFmVGTANBgkqhkiG9w0BAQsFAAOCAQEAK8QW
9AX10c4fHKdulAjreAk9K3rzFLcY4xC17wYTZ5SkEKs2vpUQnc63T3aVax9jkBAA
x7Si6v2rwwe7C/zWQsbDRI2dxdSsF44s/08jX9AUEkMffqfD7kM1d7QlP/JhcqpE
ahNeMUkHhMNEslExBrlSB+4YuW/XflKVp2ZA2N+2Dv5+VR1SGj6DeZRIedmm8Sdb
lxrhhmZMmMZ9miYuTuAEGUxACzFHhJR4g97ylefYR+LvQ8mWK56sL5+NDIe60DhD
M0JgCdy2Af7SuzUQhPj0cXLD8Am1qwhZFuxWN44+FYG9ChBCsIByjBnxxh1J6Xd3
d15BgPmpmttxZF5D+w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:47 2024 by rpki-client on console-ams.rpki-client.org