Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/1-9xhPRzJL5_zOuhRBIWP-FUPXDw.roa
File: 1-9xhPRzJL5_zOuhRBIWP-FUPXDw.roa (raw, json)
Hash identifier: WMbVoElwYFNjJrykiVW6Ev+Hfu/HbU1R9bf910mdAEs=
Subject key identifier: FB:DC:61:3D:1C:C9:2F:9F:F3:3A:E8:51:04:85:8F:F8:55:0F:5C:3C
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018C5C76003C1608B5DE88266F9EF0801860
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/1-9xhPRzJL5_zOuhRBIWP-FUPXDw.roa
Signing time: Tue 12 Dec 2023 05:18:06 +0000
ROA not before: Tue 12 Dec 2023 05:18:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
89.42.80.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5c:76:00:3c:16:08:b5:de:88:26:6f:9e:f0:80:18:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Dec 12 05:18:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fbdc613d1cc92f9ff33ae85104858ff8550f5c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:93:f6:ae:58:da:5c:8a:c9:4e:71:ae:36:74:
5d:48:29:57:c5:43:e2:50:17:9a:49:60:58:fb:cf:
30:71:99:2f:1c:17:eb:a2:1b:eb:d0:98:e5:d2:d4:
83:a3:76:db:ca:ab:a2:02:a2:1a:d5:c5:4f:57:ee:
91:95:64:0e:af:ca:06:0d:a0:0d:88:14:db:fd:13:
b2:00:eb:47:5c:42:ce:5f:11:e8:89:99:02:c6:24:
d3:d0:9a:08:62:c4:c1:62:f8:a7:28:3a:05:55:18:
c8:7d:5a:51:81:fa:9d:bb:59:e6:df:c3:5e:33:16:
bf:da:90:90:d8:a5:56:13:72:b8:b9:7d:9a:58:4b:
83:09:39:fa:eb:f9:85:1b:bb:b6:80:2d:15:46:5f:
b8:27:e9:78:f4:5d:5b:9f:ba:01:7e:f3:67:69:46:
25:20:99:7c:ac:ea:08:43:b0:d6:b5:b0:ca:ef:ad:
0b:59:0b:75:71:1d:c4:11:e9:74:d3:25:cd:db:18:
73:6a:5a:00:56:b3:5c:87:89:15:91:03:43:74:af:
4c:53:86:01:66:b6:e9:cc:27:ec:8b:81:23:da:9c:
d9:42:db:c7:f5:d0:2c:f5:a7:79:6f:7c:1d:40:9b:
30:1b:4f:35:69:bf:2f:93:53:34:88:59:49:9a:60:
76:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:DC:61:3D:1C:C9:2F:9F:F3:3A:E8:51:04:85:8F:F8:55:0F:5C:3C
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/1-9xhPRzJL5_zOuhRBIWP-FUPXDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.80.0/22
Signature Algorithm: sha256WithRSAEncryption
00:90:8b:df:d5:b5:c9:a1:99:42:a5:fc:f6:ed:e4:c0:07:75:
84:89:6f:f7:c5:22:09:14:b0:1e:43:c5:a5:8e:5d:0c:aa:28:
60:f5:31:71:6c:2a:0b:62:a0:9a:4a:b0:40:56:c3:27:3c:99:
b7:87:7f:3d:2e:ce:84:bb:28:5c:a2:eb:6f:50:cf:7a:9b:e3:
fe:1e:d2:82:94:88:be:54:6b:a5:13:ff:e6:5b:09:20:b2:6f:
35:14:bb:81:43:08:51:b0:0f:12:2a:82:2f:3b:9e:49:74:f0:
3d:3c:a4:87:17:f3:5a:37:4c:40:d7:a6:74:6d:d1:b8:d4:a0:
9d:a9:11:21:70:29:76:ea:94:01:1b:bd:fa:81:b6:5a:bb:63:
dd:24:25:20:4f:c5:80:69:ce:bc:8a:b7:1c:ae:03:2b:40:33:
23:1e:7b:58:f0:ad:b6:72:29:e5:6d:34:93:84:1e:db:5a:d5:
eb:c8:3b:6e:4e:2d:1e:f0:8b:de:8c:6b:30:0b:10:69:57:1a:
bd:3c:ee:73:b7:12:d8:99:f0:45:fe:9c:6c:d3:b3:76:80:14:
d1:d6:5d:b2:03:b8:00:b1:e5:da:74:4d:e5:fc:a0:65:97:17:
ca:8e:04:65:c3:aa:ed:96:95:70:69:ac:e8:55:f2:cd:6d:4c:
04:2e:e2:71
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYxcdgA8Fgi13ogmb57wgBhgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjMxMjEyMDUxODA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYmRjNjEzZDFjYzkyZjlmZjMzYWU4NTEwNDg1OGZmODU1MGY1YzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipP2rljaXIrJTnGuNnRdSClXxUPi
UBeaSWBY+88wcZkvHBfrohvr0Jjl0tSDo3bbyquiAqIa1cVPV+6RlWQOr8oGDaAN
iBTb/ROyAOtHXELOXxHoiZkCxiTT0JoIYsTBYvinKDoFVRjIfVpRgfqdu1nm38Ne
Mxa/2pCQ2KVWE3K4uX2aWEuDCTn66/mFG7u2gC0VRl+4J+l49F1bn7oBfvNnaUYl
IJl8rOoIQ7DWtbDK760LWQt1cR3EEel00yXN2xhzaloAVrNch4kVkQNDdK9MU4YB
ZrbpzCfsi4Ej2pzZQtvH9dAs9ad5b3wdQJswG081ab8vk1M0iFlJmmB2UQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPvcYT0cyS+f8zroUQSFj/hVD1w8MB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvMS05eGhQUnpKTDVfek91aFJCSVdQLUZVUFhEdy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYWIvODRlYjQ0LWJiZGYtNDZjMS1iMDQzLWI0MmYyM2Q4Mjhj
My8xLzhkUnVEajZNcXE3VXBTbTlmWE1JdlI3d0hCMC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAlkqUDAN
BgkqhkiG9w0BAQsFAAOCAQEAAJCL39W1yaGZQqX89u3kwAd1hIlv98UiCRSwHkPF
pY5dDKooYPUxcWwqC2KgmkqwQFbDJzyZt4d/PS7OhLsoXKLrb1DPepvj/h7SgpSI
vlRrpRP/5lsJILJvNRS7gUMIUbAPEiqCLzueSXTwPTykhxfzWjdMQNemdG3RuNSg
nakRIXApduqUARu9+oG2Wrtj3SQlIE/FgGnOvIq3HK4DK0AzIx57WPCttnIp5W00
k4Qe21rV68g7bk4tHvCL3oxrMAsQaVcavTzuc7cS2JnwRf6cbNOzdoAU0dZdsgO4
ALHl2nRN5fygZZcXyo4EZcOq7ZaVcGms6FXyzW1MBC7icQ==
-----END CERTIFICATE-----
Generated at Sat Dec 16 10:59:36 2023 by rpki-client on console-ams.rpki-client.org