Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/2jrIBcj0iPMwjUuWWojo3Z61U-w.roa
File: 2jrIBcj0iPMwjUuWWojo3Z61U-w.roa (raw, json)
Hash identifier: CXb7nkdyJraqFSrUTnIpZ1uLVD/4NaIOT03uRBobA/0=
Subject key identifier: DA:3A:C8:05:C8:F4:88:F3:30:8D:4B:96:5A:88:E8:DD:9E:B5:53:EC
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018D92FE4C37FD44250F9B00FF5115F7B4E1
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/2jrIBcj0iPMwjUuWWojo3Z61U-w.roa
Signing time: Sat 10 Feb 2024 12:29:15 +0000
ROA not before: Sat 10 Feb 2024 12:29:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 89.47.100.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 24 Feb 2024 20:37:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:92:fe:4c:37:fd:44:25:0f:9b:00:ff:51:15:f7:b4:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Feb 10 12:29:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da3ac805c8f488f3308d4b965a88e8dd9eb553ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a5:8c:95:96:3d:e6:c5:9b:ba:f3:e9:86:67:
75:63:1a:b4:f0:26:e0:3b:a7:c4:b7:55:f5:e4:b5:
16:d5:10:57:7b:23:f1:10:f0:12:fd:20:9e:14:26:
88:ca:d5:6b:6a:06:0d:76:14:63:8c:84:28:dc:d2:
86:89:6c:e9:4a:f5:66:e2:f2:1d:92:cb:21:a6:d8:
ae:29:5f:06:1b:83:45:da:74:27:24:15:9d:cd:94:
44:3b:96:a4:91:9a:6a:45:3f:d6:17:4c:4a:07:b3:
7d:3c:b9:6e:c7:99:8b:02:f5:15:ab:c2:ca:4a:57:
6d:af:12:66:fa:d8:01:97:1b:6f:87:75:f5:07:bd:
d4:99:6c:a2:da:29:8c:ed:b6:dd:d2:69:b3:d7:15:
0c:a4:91:3a:93:20:0c:f0:4f:ca:22:85:b6:de:dc:
81:55:b3:39:28:ce:8c:99:17:f6:28:ba:cd:e0:6c:
cf:2e:63:04:01:90:ba:4b:ea:a6:0c:d7:e1:06:6c:
bb:30:62:d1:e1:90:81:be:07:af:33:b8:3c:97:bd:
ca:15:d1:92:7d:86:a8:00:11:b9:bf:3f:4c:45:e2:
4c:16:67:34:b8:21:f6:f6:79:45:6a:ac:41:d5:1c:
4c:b6:8d:ac:f2:b1:af:c2:dc:ab:aa:ff:59:df:d3:
6e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:3A:C8:05:C8:F4:88:F3:30:8D:4B:96:5A:88:E8:DD:9E:B5:53:EC
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/2jrIBcj0iPMwjUuWWojo3Z61U-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.47.100.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:30:13:72:a0:cd:c0:07:d9:65:31:88:a2:29:ec:54:5f:b1:
3f:7a:ef:ee:73:64:de:0a:b7:01:37:48:64:1d:40:b8:d1:d6:
b8:3f:34:4a:5f:b5:88:bb:9c:a0:1f:cb:d7:97:21:72:6b:37:
c4:74:23:d8:48:ac:0a:74:89:3b:60:0a:f2:ea:dd:78:03:2d:
1f:00:c2:e9:59:14:e8:35:af:b4:18:74:2b:47:10:d2:45:c8:
3c:83:53:f1:a0:9c:cc:e8:cf:ed:8a:56:d6:08:0d:1a:50:ec:
7d:99:ee:a5:36:2f:30:59:98:b0:c8:b3:b8:29:92:5d:d9:87:
db:0b:f4:57:f5:99:b3:ba:85:bd:1b:9b:d0:c7:6d:70:a9:82:
dd:67:b4:e8:d3:8d:9c:70:b9:bb:91:82:34:25:61:02:9d:78:
92:80:84:90:52:c4:a8:37:44:1d:05:07:c3:ca:0f:97:4f:91:
28:33:2c:a0:4c:05:e4:fd:25:41:fe:cb:2f:86:85:5a:cf:0e:
95:a4:0c:73:8e:72:7a:e0:7f:b6:44:9b:5d:35:8f:35:1d:3d:
79:a5:2d:ef:34:f0:7a:2a:45:c6:e4:40:ae:06:68:5c:75:ab:
81:c7:5d:44:7e:b0:d7:e1:08:ac:2e:71:d4:07:de:49:6d:fb:
65:59:e4:6a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY2S/kw3/UQlD5sA/1EV97ThMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjQwMjEwMTIyOTE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTNhYzgwNWM4ZjQ4OGYzMzA4ZDRiOTY1YTg4ZThkZDllYjU1M2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqWMlZY95sWbuvPphmd1Yxq08Cbg
O6fEt1X15LUW1RBXeyPxEPAS/SCeFCaIytVragYNdhRjjIQo3NKGiWzpSvVm4vId
ksshptiuKV8GG4NF2nQnJBWdzZREO5akkZpqRT/WF0xKB7N9PLlux5mLAvUVq8LK
SldtrxJm+tgBlxtvh3X1B73UmWyi2imM7bbd0mmz1xUMpJE6kyAM8E/KIoW23tyB
VbM5KM6MmRf2KLrN4GzPLmMEAZC6S+qmDNfhBmy7MGLR4ZCBvgevM7g8l73KFdGS
fYaoABG5vz9MReJMFmc0uCH29nlFaqxB1RxMto2s8rGvwtyrqv9Z39Nu2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNo6yAXI9IjzMI1LllqI6N2etVPsMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvMmpySUJjajBpUE13alV1V1dvam8zWjYxVS13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWS9kMA0G
CSqGSIb3DQEBCwUAA4IBAQAtMBNyoM3AB9llMYiiKexUX7E/eu/uc2TeCrcBN0hk
HUC40da4PzRKX7WIu5ygH8vXlyFyazfEdCPYSKwKdIk7YAry6t14Ay0fAMLpWRTo
Na+0GHQrRxDSRcg8g1PxoJzM6M/tilbWCA0aUOx9me6lNi8wWZiwyLO4KZJd2Yfb
C/RX9ZmzuoW9G5vQx21wqYLdZ7To042ccLm7kYI0JWECnXiSgISQUsSoN0QdBQfD
yg+XT5EoMyygTAXk/SVB/ssvhoVazw6VpAxzjnJ64H+2RJtdNY81HT15pS3vNPB6
KkXG5ECuBmhcdauBx11EfrDX4QisLnHUB95JbftlWeRq
-----END CERTIFICATE-----
Generated at Sat Feb 24 21:58:16 2024 by rpki-client on console-ams.rpki-client.org