Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/0GjyBjfBmSQrxFECdBNyXRrCiF8.roa
File: 0GjyBjfBmSQrxFECdBNyXRrCiF8.roa (raw, json)
Hash identifier: C+MLtCiOnk4bQNVR8fT29Yq2FPubhDtrele3gmL9Kb4=
Subject key identifier: D0:68:F2:06:37:C1:99:24:2B:C4:51:02:74:13:72:5D:1A:C2:88:5F
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018A299585D26D082F4441590D62349BB0B0
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/0GjyBjfBmSQrxFECdBNyXRrCiF8.roa
Signing time: Thu 24 Aug 2023 22:06:19 +0000
ROA not before: Thu 24 Aug 2023 22:06:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14445
IP address blocks: 89.42.91.0/24 maxlen: 24
89.42.94.0/24 maxlen: 24
89.42.92.0/24 maxlen: 24
89.37.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Nov 2023 07:58:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:29:95:85:d2:6d:08:2f:44:41:59:0d:62:34:9b:b0:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Aug 24 22:06:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d068f20637c199242bc451027413725d1ac2885f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c6:02:05:e9:9b:d9:ba:cd:80:fc:4b:10:30:
93:43:88:6c:df:23:d2:9b:cf:64:97:54:94:e7:11:
dd:9a:d9:d9:b4:5b:d9:4e:43:80:76:91:0c:ae:2d:
4e:da:42:c4:8f:e7:6f:cf:6b:aa:1f:af:e4:30:e6:
d3:e5:35:43:8e:90:c9:4d:d9:50:14:6e:1f:32:bb:
45:ad:9c:ba:b4:1d:da:dd:09:7b:85:69:18:b7:f6:
e2:01:35:c2:7c:da:2b:68:6a:a6:7b:4a:a9:43:66:
92:05:a1:27:39:9b:02:3f:36:e3:cf:cd:61:d5:e8:
37:21:88:1f:de:17:17:b3:1f:a4:06:c8:80:d4:f3:
d2:5d:76:f9:f1:8b:e1:83:86:9f:d0:f0:78:83:75:
93:0d:78:a5:93:7e:4b:fb:8f:f8:ec:93:6b:51:a3:
dd:32:1d:a9:7f:18:39:42:3e:ce:ad:f8:35:57:dc:
01:fc:7f:a7:ad:fb:04:71:cf:34:08:9a:3c:44:70:
4a:1e:45:9d:f7:1a:6d:08:44:24:25:ff:d2:e0:10:
dd:c4:34:d0:23:05:a1:b8:fe:4b:7c:c8:27:5d:4a:
81:18:e4:99:85:73:88:2e:6e:1a:73:9c:78:e5:cd:
a2:2f:f9:66:75:e1:eb:7b:a4:dd:82:90:d7:b7:cf:
28:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:68:F2:06:37:C1:99:24:2B:C4:51:02:74:13:72:5D:1A:C2:88:5F
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/0GjyBjfBmSQrxFECdBNyXRrCiF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.119.0/24
89.42.91.0-89.42.92.255
89.42.94.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:ce:9f:b4:7a:c9:cb:28:07:68:77:f3:e4:d8:a9:39:71:57:
80:a8:af:64:d7:a1:94:da:29:83:d1:e5:89:42:f3:46:40:93:
f8:e2:43:fc:1d:dd:9a:cc:29:a7:cf:4c:3d:c4:11:30:a7:74:
a1:79:67:83:12:dc:01:64:79:ae:75:79:66:7e:5f:5e:c2:86:
50:95:7d:98:3c:d9:76:99:ff:32:e2:3f:68:cf:b5:3e:52:91:
8b:b6:73:60:ab:4e:c8:4e:b3:c3:04:90:a3:8a:1c:55:ac:b3:
81:9c:3d:89:30:b7:af:84:cb:73:92:c9:64:59:78:cf:eb:cf:
11:cb:10:38:ed:fa:78:bd:31:b2:c3:d5:11:b3:a2:33:6d:b0:
93:f7:b7:19:0a:50:c0:d0:ec:a4:6c:49:4c:3a:61:ff:3a:9a:
29:64:4e:43:e7:8f:a5:39:34:34:76:70:2e:c9:41:70:7b:54:
77:30:91:1c:e4:63:dd:3d:54:81:8e:0d:19:4b:af:69:c1:b3:
b3:11:92:46:58:f5:29:5e:9f:20:c6:ff:05:fa:3b:fd:3e:c7:
05:5b:74:84:e5:68:90:2b:a9:73:c0:18:5d:f0:4b:6e:68:91:
80:d8:bf:3f:28:a3:c1:a8:b3:ee:26:c4:f5:ec:63:d1:47:6d:
47:bb:de:da
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYoplYXSbQgvREFZDWI0m7CwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjMwODI0MjIwNjE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDY4ZjIwNjM3YzE5OTI0MmJjNDUxMDI3NDEzNzI1ZDFhYzI4ODVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MYCBemb2brNgPxLEDCTQ4hs3yPS
m89kl1SU5xHdmtnZtFvZTkOAdpEMri1O2kLEj+dvz2uqH6/kMObT5TVDjpDJTdlQ
FG4fMrtFrZy6tB3a3Ql7hWkYt/biATXCfNoraGqme0qpQ2aSBaEnOZsCPzbjz81h
1eg3IYgf3hcXsx+kBsiA1PPSXXb58Yvhg4af0PB4g3WTDXilk35L+4/47JNrUaPd
Mh2pfxg5Qj7Orfg1V9wB/H+nrfsEcc80CJo8RHBKHkWd9xptCEQkJf/S4BDdxDTQ
IwWhuP5LfMgnXUqBGOSZhXOILm4ac5x45c2iL/lmdeHre6TdgpDXt88o8wIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFNBo8gY3wZkkK8RRAnQTcl0awohfMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvMEdqeUJqZkJtU1FyeEZFQ2RCTnlYUnJDaUY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAWSV3MAwD
BABZKlsDBABZKlwDBABZKl4wDQYJKoZIhvcNAQELBQADggEBAFzOn7R6ycsoB2h3
8+TYqTlxV4Cor2TXoZTaKYPR5YlC80ZAk/jiQ/wd3ZrMKafPTD3EETCndKF5Z4MS
3AFkea51eWZ+X17ChlCVfZg82XaZ/zLiP2jPtT5SkYu2c2CrTshOs8MEkKOKHFWs
s4GcPYkwt6+Ey3OSyWRZeM/rzxHLEDjt+ni9MbLD1RGzojNtsJP3txkKUMDQ7KRs
SUw6Yf86milkTkPnj6U5NDR2cC7JQXB7VHcwkRzkY909VIGODRlLr2nBs7MRkkZY
9SlenyDG/wX6O/0+xwVbdITlaJArqXPAGF3wS25okYDYvz8oo8Gos+4mxPXsY9FH
bUe73to=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:49 2024 by rpki-client on console-ams.rpki-client.org