Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/0E-fBbI8J_iCubVKAfCURzmCOj0.roa
File: 0E-fBbI8J_iCubVKAfCURzmCOj0.roa (raw, json)
Hash identifier: BHdhxa4VPhANyC5JjqpqaiI5bCIG3yNNbQJboCcz9g0=
Subject key identifier: D0:4F:9F:05:B2:3C:27:F8:82:B9:B5:4A:01:F0:94:47:39:82:3A:3D
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018A3FA2A9F4CE0D082DBAB42D0D5AECAF63
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/0E-fBbI8J_iCubVKAfCURzmCOj0.roa
Signing time: Tue 29 Aug 2023 04:52:19 +0000
ROA not before: Tue 29 Aug 2023 04:52:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216432
IP address blocks: 89.42.93.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3f:a2:a9:f4:ce:0d:08:2d:ba:b4:2d:0d:5a:ec:af:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Aug 29 04:52:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d04f9f05b23c27f882b9b54a01f0944739823a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fe:22:86:09:c4:6f:d9:f4:3a:8e:d5:c4:69:
35:2c:ac:dd:5e:a5:6b:58:a0:6f:bf:99:65:0d:44:
87:55:e5:58:82:a8:3c:a6:90:69:d3:28:f1:94:1b:
2d:71:3e:77:d4:7a:01:2c:cf:a5:68:bc:f0:88:43:
20:23:3f:74:b5:97:78:58:df:df:a4:bd:86:4a:c8:
d7:f6:62:c8:f1:41:69:14:fd:c0:89:13:2b:dc:10:
88:27:29:71:95:bd:3b:02:25:5a:72:bd:69:38:a5:
77:b5:1c:c5:58:25:bc:09:84:a9:ba:2e:70:b5:46:
e2:79:fc:e8:80:1b:23:c3:b4:0e:af:eb:51:92:21:
37:1e:8c:37:be:f1:37:70:a8:2f:80:10:4f:75:11:
b8:8d:f0:f0:72:31:d1:35:bd:22:d8:7e:18:92:c2:
db:eb:72:f6:64:30:07:7d:d3:a3:ab:9d:7e:68:72:
d6:87:d3:00:c7:41:c9:d1:a5:d0:de:16:6a:74:5c:
e7:1c:9e:34:f0:5f:b1:60:97:a1:38:dd:13:84:7d:
9f:dd:b1:67:ec:06:a5:50:38:bc:c7:15:3f:96:e5:
3b:de:7c:8b:43:ca:58:72:14:66:d8:53:10:41:13:
d5:77:be:1a:a6:75:e5:fb:d7:04:0f:4a:60:1d:12:
26:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:4F:9F:05:B2:3C:27:F8:82:B9:B5:4A:01:F0:94:47:39:82:3A:3D
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/0E-fBbI8J_iCubVKAfCURzmCOj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.93.0/24
Signature Algorithm: sha256WithRSAEncryption
40:a7:2f:63:bd:cf:51:17:19:55:4b:65:da:04:18:8c:a9:85:
16:5a:0e:f0:7c:64:46:ed:bc:ab:6c:1c:ac:6b:13:64:bd:b3:
4a:5c:63:93:a0:8e:3d:57:ae:e5:87:bf:b1:75:5d:4e:64:33:
58:71:1e:21:5d:f8:3b:99:fe:7b:f6:f0:ef:e5:9c:ce:bf:e8:
d6:2a:8c:d6:8d:84:7b:28:72:85:1e:96:0f:e7:6d:c9:46:f7:
2d:6c:c2:8d:bd:11:db:de:01:4b:4b:2d:4a:97:b7:bb:68:f1:
79:6a:1a:8d:e4:a6:d4:fa:f5:fb:d9:63:53:f1:93:d7:b9:b5:
79:f4:d8:12:dc:12:34:c3:00:08:86:8a:bc:90:f5:c5:cc:9b:
c6:fc:5f:15:07:e3:a8:33:60:d5:06:ce:6c:d4:32:29:3c:e4:
68:4b:4d:c8:32:a7:a0:a4:8b:dc:46:15:5e:5a:99:d7:8f:23:
ac:7f:00:ac:db:0e:c2:fc:a9:00:f8:82:1f:cd:a7:52:4d:20:
ba:ad:4f:c6:82:fd:df:04:c8:48:32:a7:9f:12:63:17:48:19:
83:5c:b2:20:74:9b:c8:11:d5:74:ad:0a:76:ea:b3:29:ec:ea:
b3:45:22:c9:81:1a:51:e8:49:35:a3:b7:dd:90:70:22:9b:df:
d6:e0:38:a8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYo/oqn0zg0ILbq0LQ1a7K9jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjMwODI5MDQ1MjE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDRmOWYwNWIyM2MyN2Y4ODJiOWI1NGEwMWYwOTQ0NzM5ODIzYTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjf4ihgnEb9n0Oo7VxGk1LKzdXqVr
WKBvv5llDUSHVeVYgqg8ppBp0yjxlBstcT531HoBLM+laLzwiEMgIz90tZd4WN/f
pL2GSsjX9mLI8UFpFP3AiRMr3BCIJylxlb07AiVacr1pOKV3tRzFWCW8CYSpui5w
tUbiefzogBsjw7QOr+tRkiE3How3vvE3cKgvgBBPdRG4jfDwcjHRNb0i2H4YksLb
63L2ZDAHfdOjq51+aHLWh9MAx0HJ0aXQ3hZqdFznHJ408F+xYJehON0ThH2f3bFn
7AalUDi8xxU/luU73nyLQ8pYchRm2FMQQRPVd74apnXl+9cED0pgHRIm2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNBPnwWyPCf4grm1SgHwlEc5gjo9MB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvMEUtZkJiSThKX2lDdWJWS0FmQ1VSem1DT2owLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSpdMA0G
CSqGSIb3DQEBCwUAA4IBAQBApy9jvc9RFxlVS2XaBBiMqYUWWg7wfGRG7byrbBys
axNkvbNKXGOToI49V67lh7+xdV1OZDNYcR4hXfg7mf579vDv5ZzOv+jWKozWjYR7
KHKFHpYP523JRvctbMKNvRHb3gFLSy1Kl7e7aPF5ahqN5KbU+vX72WNT8ZPXubV5
9NgS3BI0wwAIhoq8kPXFzJvG/F8VB+OoM2DVBs5s1DIpPORoS03IMqegpIvcRhVe
WpnXjyOsfwCs2w7C/KkA+IIfzadSTSC6rU/Ggv3fBMhIMqefEmMXSBmDXLIgdJvI
EdV0rQp26rMp7OqzRSLJgRpR6Ek1o7fdkHAim9/W4Dio
-----END CERTIFICATE-----
Generated at Mon Oct 9 11:17:33 2023 by rpki-client on console-ams.rpki-client.org