Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3-FAbMfMwTwBKp4avlIqU2BQroA.roa
File: 3-FAbMfMwTwBKp4avlIqU2BQroA.roa (raw, json)
Hash identifier: IvXKLmYUTniajADnGaz+wd1XKPeCvRyjSyiahPuukSE=
Subject key identifier: DF:E1:40:6C:C7:CC:C1:3C:01:2A:9E:1A:BE:52:2A:53:60:50:AE:80
Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Certificate serial: 018E9FFB388FACB415606BF490ED4FB496FF
Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3-FAbMfMwTwBKp4avlIqU2BQroA.roa
Signing time: Tue 02 Apr 2024 18:03:45 +0000
ROA not before: Tue 02 Apr 2024 18:03:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213323
IP address blocks: 89.42.135.0/24 maxlen: 24
185.248.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 07 Apr 2024 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9f:fb:38:8f:ac:b4:15:60:6b:f4:90:ed:4f:b4:96:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Validity
Not Before: Apr 2 18:03:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dfe1406cc7ccc13c012a9e1abe522a536050ae80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:55:a9:78:cf:2a:6b:a3:db:d2:28:27:ed:7c:
c9:30:7d:17:cf:a2:71:88:b3:62:1b:1b:63:c4:cc:
14:aa:19:16:83:e6:de:0a:4b:38:68:d3:88:ab:09:
56:8e:61:a4:d0:08:26:59:bf:cb:eb:bb:c8:2e:eb:
f7:fe:0f:ef:ec:00:8d:62:b9:de:16:96:22:37:cb:
d2:22:a6:9f:3a:fb:fc:e9:a9:e1:fc:a7:71:89:e4:
c5:cd:66:3c:e3:b7:ee:a2:a6:75:28:5c:65:b3:a3:
cc:ae:cf:22:5b:41:75:3f:f9:74:73:92:85:62:89:
25:57:35:3e:ff:7f:ce:9a:aa:65:db:fc:07:e2:b2:
61:fc:b1:8d:74:f8:0a:52:1d:d6:37:cf:1f:13:cb:
db:a7:33:91:25:61:33:e7:41:89:d1:56:1a:b4:ba:
cf:93:f1:7e:b1:2d:59:8c:cb:6c:8c:cb:86:e7:74:
b5:4e:6f:ec:92:79:c5:b4:76:fe:24:0a:88:72:ae:
77:f5:26:9e:8e:ef:20:ca:11:50:43:c4:37:5b:e3:
10:72:9e:9c:31:10:ed:a4:54:95:f8:2d:3c:5f:1f:
e0:df:e3:bc:c7:f7:4f:6b:d9:11:48:ae:30:7f:8e:
b2:29:04:9f:76:4f:a4:38:2d:02:bb:8f:46:55:4e:
5e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E1:40:6C:C7:CC:C1:3C:01:2A:9E:1A:BE:52:2A:53:60:50:AE:80
X509v3 Authority Key Identifier:
keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3-FAbMfMwTwBKp4avlIqU2BQroA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.135.0/24
185.248.138.0/24
Signature Algorithm: sha256WithRSAEncryption
62:88:e5:a5:41:04:76:0f:dd:7a:6f:3f:af:49:0b:8e:37:c0:
bc:99:f7:9e:93:c0:c8:96:96:d5:c3:51:30:a7:93:1e:bc:1f:
45:56:8f:14:e0:89:11:1b:48:96:b9:98:a3:b9:fb:da:80:28:
33:f0:1f:7a:54:e1:49:0e:c7:c7:1a:c1:cf:08:dc:b0:ab:9d:
15:5d:ce:3b:8b:60:02:f0:35:11:d0:57:37:f2:09:73:c2:f7:
eb:39:3c:28:07:ff:e4:2b:d4:4f:0b:f8:e1:5b:3e:63:4c:e5:
73:64:b7:65:59:fe:6b:22:0c:df:db:4d:ea:3e:9a:e0:ac:76:
14:ca:bd:9a:7a:b1:0d:dd:42:c1:95:ce:88:49:d3:41:f1:56:
65:da:10:d2:ab:4c:6f:5a:e1:73:a2:c2:4a:b7:4c:3c:0b:d7:
33:93:4a:f7:02:f5:67:e5:e6:8f:39:2a:33:1d:4d:23:5b:3a:
10:9f:b0:e5:c7:d3:d3:cc:a2:8c:45:72:a0:84:ab:c2:e9:ad:
a2:43:dc:e7:6f:8e:76:4a:55:d8:02:92:23:5f:3d:b1:d5:a7:
54:96:e2:06:6b:9f:a9:3f:5b:b4:01:4f:df:4f:f1:6a:f9:d4:
b7:02:ad:4a:ff:8c:eb:90:a1:24:ab:82:5b:9b:05:98:50:b1:
e2:d3:9e:cb
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY6f+ziPrLQVYGv0kO1PtJb/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZWY1OGQ0Y2ZhMzU1NDNmODQ4OGEyNzU2ZTY5MjRlNjQ3
YjQ1ODkwHhcNMjQwNDAyMTgwMzQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZmUxNDA2Y2M3Y2NjMTNjMDEyYTllMWFiZTUyMmE1MzYwNTBhZTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1WpeM8qa6Pb0ign7XzJMH0Xz6Jx
iLNiGxtjxMwUqhkWg+beCks4aNOIqwlWjmGk0AgmWb/L67vILuv3/g/v7ACNYrne
FpYiN8vSIqafOvv86anh/KdxieTFzWY847fuoqZ1KFxls6PMrs8iW0F1P/l0c5KF
YoklVzU+/3/Omqpl2/wH4rJh/LGNdPgKUh3WN88fE8vbpzORJWEz50GJ0VYatLrP
k/F+sS1ZjMtsjMuG53S1Tm/sknnFtHb+JAqIcq539Saeju8gyhFQQ8Q3W+MQcp6c
MRDtpFSV+C08Xx/g3+O8x/dPa9kRSK4wf46yKQSfdk+kOC0Cu49GVU5eowIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFN/hQGzHzME8ASqeGr5SKlNgUK6AMB8GA1UdIwQY
MBaAFNzvWNTPo1VD+EiKJ1bmkk5ke0WJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMt
MmVjZTA0ZTE4NWMyLzEvMy1GQWJNZk13VHdCS3A0YXZsSXFVMkJRcm9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMtMmVjZTA0ZTE4NWMy
LzEvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWSqHAwQA
ufiKMA0GCSqGSIb3DQEBCwUAA4IBAQBiiOWlQQR2D916bz+vSQuON8C8mfeek8DI
lpbVw1Ewp5MevB9FVo8U4IkRG0iWuZijufvagCgz8B96VOFJDsfHGsHPCNywq50V
Xc47i2AC8DUR0Fc38glzwvfrOTwoB//kK9RPC/jhWz5jTOVzZLdlWf5rIgzf203q
PprgrHYUyr2aerEN3ULBlc6ISdNB8VZl2hDSq0xvWuFzosJKt0w8C9czk0r3AvVn
5eaPOSozHU0jWzoQn7Dlx9PTzKKMRXKghKvC6a2iQ9znb452SlXYApIjXz2x1adU
luIGa5+pP1u0AU/fT/Fq+dS3Aq1K/4zrkKEkq4JbmwWYULHi057L
-----END CERTIFICATE-----
Generated at Sun Apr 7 22:58:37 2024 by rpki-client on console-ams.rpki-client.org