Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/fC9GL-15eRw4dmpgdJfCVk06dkM.roa
File: fC9GL-15eRw4dmpgdJfCVk06dkM.roa (raw, json)
Hash identifier: qQ166VfQdL9i+t4sYRzOEApH2sTK3HG+sSEnqTI6J7A=
Subject key identifier: 7C:2F:46:2F:ED:79:79:1C:38:76:6A:60:74:97:C2:56:4D:3A:76:43
Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Certificate serial: 01856C6EFEA68FA813A54B2D067B89998003
Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/fC9GL-15eRw4dmpgdJfCVk06dkM.roa
Signing time: Sun 01 Jan 2023 08:24:51 +0000
ROA not before: Sun 01 Jan 2023 08:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200651
IP address blocks: 89.42.135.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6e:fe:a6:8f:a8:13:a5:4b:2d:06:7b:89:99:80:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Validity
Not Before: Jan 1 08:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c2f462fed79791c38766a607497c2564d3a7643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:58:f2:c6:c0:ea:a3:cb:d7:02:2a:bb:5d:20:
40:00:ff:9a:51:d3:46:76:f1:8f:be:a8:6c:66:2e:
d1:ca:c2:3a:f6:a4:e4:e7:31:e7:6f:9c:ce:72:7f:
9c:f1:65:cb:ce:c6:85:86:e3:8a:b4:67:76:71:db:
08:e3:a8:a7:05:fc:73:77:fc:7b:25:35:0b:fe:24:
92:05:f5:43:c6:9c:24:4e:4f:f6:ed:aa:54:e1:bc:
41:31:af:8c:61:c8:31:2f:e8:0b:ce:e5:5b:8d:d8:
10:e8:32:2d:b9:01:78:b6:24:cb:59:73:46:ef:cd:
9d:21:f2:38:56:87:a9:45:bf:f0:7c:25:9a:f5:59:
3c:93:cc:28:3f:39:46:5c:11:5b:27:e3:2b:cc:d4:
79:95:d3:9a:04:a8:5b:e0:17:af:0f:04:c6:71:e7:
58:30:f3:f7:dd:b2:9c:a6:80:cb:21:02:ee:05:0f:
01:d4:00:fd:2e:1e:d4:7b:47:f7:29:ec:e8:67:f9:
69:78:0c:a0:f0:b7:8c:00:bc:da:aa:1b:7a:d8:e3:
43:59:bf:5c:30:5e:30:5c:9f:d2:70:08:90:42:ed:
97:68:79:c7:a8:86:37:72:6f:64:10:40:d2:4a:57:
32:88:45:84:43:62:e3:f4:7b:f0:82:7d:78:e0:e0:
05:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:2F:46:2F:ED:79:79:1C:38:76:6A:60:74:97:C2:56:4D:3A:76:43
X509v3 Authority Key Identifier:
keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/fC9GL-15eRw4dmpgdJfCVk06dkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.135.0/24
Signature Algorithm: sha256WithRSAEncryption
77:f7:08:25:ef:4f:9d:d0:be:e3:50:50:74:e9:e4:df:5a:2a:
6e:a7:4d:b6:1a:de:4a:9b:9f:54:0f:89:8f:e9:5a:7b:c7:c6:
74:06:66:a9:15:16:dc:6c:5c:05:7b:8a:4e:56:88:5e:a7:0b:
4e:42:e6:3a:5f:18:50:7f:2a:00:84:9a:38:15:d5:fa:2b:e6:
10:54:63:1f:bb:76:68:bd:ae:32:5c:55:36:bf:04:2f:90:39:
16:14:d1:34:dc:a3:7b:e0:c4:c2:c9:b1:17:a6:5e:df:c3:8f:
49:56:50:cf:d9:cd:5c:a5:a1:0a:b0:fc:d9:1e:ce:c4:18:d0:
7d:bd:6c:7f:ec:75:5b:df:3a:1f:70:7b:f2:c0:eb:cc:d9:a1:
d1:46:e7:64:08:b5:66:36:55:fe:2b:da:9a:b1:a1:5a:1d:9e:
b9:05:c8:c7:dc:af:fe:4b:27:88:37:0c:d1:6a:b5:de:5f:24:
f1:f0:40:7c:f6:13:17:94:b7:96:e6:bc:bb:88:e3:36:22:0f:
1a:aa:de:61:3f:09:08:62:ba:13:aa:ac:ef:5d:ec:68:d6:f4:
38:5e:58:fa:e4:0d:16:93:99:c4:13:17:ff:fb:f5:f2:d8:59:
b4:83:59:74:ea:81:7f:6a:8f:43:85:6b:dc:b1:12:e6:b2:f8:
47:74:b3:f4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsbv6mj6gTpUstBnuJmYADMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZWY1OGQ0Y2ZhMzU1NDNmODQ4OGEyNzU2ZTY5MjRlNjQ3
YjQ1ODkwHhcNMjMwMTAxMDgyNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzJmNDYyZmVkNzk3OTFjMzg3NjZhNjA3NDk3YzI1NjRkM2E3NjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1jyxsDqo8vXAiq7XSBAAP+aUdNG
dvGPvqhsZi7RysI69qTk5zHnb5zOcn+c8WXLzsaFhuOKtGd2cdsI46inBfxzd/x7
JTUL/iSSBfVDxpwkTk/27apU4bxBMa+MYcgxL+gLzuVbjdgQ6DItuQF4tiTLWXNG
782dIfI4VoepRb/wfCWa9Vk8k8woPzlGXBFbJ+MrzNR5ldOaBKhb4BevDwTGcedY
MPP33bKcpoDLIQLuBQ8B1AD9Lh7Ue0f3KezoZ/lpeAyg8LeMALzaqht62ONDWb9c
MF4wXJ/ScAiQQu2XaHnHqIY3cm9kEEDSSlcyiEWEQ2Lj9Hvwgn144OAFgwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHwvRi/teXkcOHZqYHSXwlZNOnZDMB8GA1UdIwQY
MBaAFNzvWNTPo1VD+EiKJ1bmkk5ke0WJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMt
MmVjZTA0ZTE4NWMyLzEvZkM5R0wtMTVlUnc0ZG1wZ2RKZkNWazA2ZGtNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMtMmVjZTA0ZTE4NWMy
LzEvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSqHMA0G
CSqGSIb3DQEBCwUAA4IBAQB39wgl70+d0L7jUFB06eTfWipup022Gt5Km59UD4mP
6Vp7x8Z0BmapFRbcbFwFe4pOVohepwtOQuY6XxhQfyoAhJo4FdX6K+YQVGMfu3Zo
va4yXFU2vwQvkDkWFNE03KN74MTCybEXpl7fw49JVlDP2c1cpaEKsPzZHs7EGNB9
vWx/7HVb3zofcHvywOvM2aHRRudkCLVmNlX+K9qasaFaHZ65BcjH3K/+SyeINwzR
arXeXyTx8EB89hMXlLeW5ry7iOM2Ig8aqt5hPwkIYroTqqzvXexo1vQ4Xlj65A0W
k5nEExf/+/Xy2Fm0g1l06oF/ao9DhWvcsRLmsvhHdLP0
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:01 2023 by rpki-client on console-fra.rpki-client.org