Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/6rSRI_8q3NQhO9sf2ge1v9KW4a8.roa
File: 6rSRI_8q3NQhO9sf2ge1v9KW4a8.roa (raw, json)
Hash identifier: axGN8E5eNnqmUNmXGuvpU/A67fB0LtqChQwTfWQ4nzg=
Subject key identifier: EA:B4:91:23:FF:2A:DC:D4:21:3B:DB:1F:DA:07:B5:BF:D2:96:E1:AF
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018BFB181789D68E3437B6773C90A7E17541
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/6rSRI_8q3NQhO9sf2ge1v9KW4a8.roa
Signing time: Thu 23 Nov 2023 07:32:21 +0000
ROA not before: Thu 23 Nov 2023 07:32:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57974
IP address blocks: 89.37.196.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fb:18:17:89:d6:8e:34:37:b6:77:3c:90:a7:e1:75:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Nov 23 07:32:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eab49123ff2adcd4213bdb1fda07b5bfd296e1af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:85:21:48:68:50:42:07:ee:0c:02:3b:3b:69:
9d:d3:89:ba:6e:77:89:f2:ba:96:ca:7c:ff:b3:b5:
2b:11:f6:cb:1c:d7:d8:29:e3:ba:fa:ca:a6:5d:41:
04:29:a1:84:f6:29:d0:1a:18:8c:93:85:64:65:33:
2c:d1:97:ad:0c:23:d9:5c:7b:93:9f:c8:39:8a:d4:
12:7d:fa:80:62:82:6a:3f:da:1e:12:df:47:bc:e0:
3e:9e:f7:14:09:ae:50:62:ae:e8:99:68:32:0d:bd:
32:92:40:5a:7b:31:1c:fe:27:a5:10:b8:c6:c4:3c:
78:9a:90:b8:84:e9:c4:fc:1f:f0:65:1e:68:75:f8:
c9:e9:51:82:4f:ef:8f:10:d0:fe:e8:c4:7d:94:aa:
bd:26:01:02:0b:71:77:c7:f8:66:c4:e1:97:d1:77:
e6:bf:50:11:38:21:e7:7e:0a:da:eb:a5:29:8c:45:
fc:ef:6c:5b:6b:fa:ea:a0:fc:8a:76:fb:21:1b:75:
52:a5:b5:64:bc:5a:99:8c:09:44:11:f6:d9:0f:dd:
17:76:42:66:a6:28:47:c0:79:fa:b3:68:d0:62:e8:
ad:b8:35:a0:72:08:ca:dd:ff:b4:a0:2e:3e:85:0a:
f2:60:a3:24:f6:bd:de:32:eb:2c:ee:be:ac:06:26:
82:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B4:91:23:FF:2A:DC:D4:21:3B:DB:1F:DA:07:B5:BF:D2:96:E1:AF
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/6rSRI_8q3NQhO9sf2ge1v9KW4a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.196.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:c9:66:25:32:99:f4:39:3b:fc:c5:06:bc:10:b9:a6:e4:95:
84:6d:5d:ae:c3:1e:d3:f3:4c:e1:3b:24:fb:49:97:79:93:2b:
a4:52:97:1d:24:f6:f7:72:a3:be:c9:60:8a:b9:b0:2a:2b:2f:
f9:e7:83:d2:ed:52:3b:42:5a:f1:b0:fd:b9:2c:af:f2:89:de:
da:db:48:b1:0c:c2:9c:bb:52:a6:ad:75:f1:31:12:30:8a:98:
f4:45:b3:44:ab:80:11:e8:92:e8:61:a3:ad:1e:84:dd:c8:0f:
d9:a6:58:88:56:8a:77:da:89:ce:c4:bf:32:61:47:cb:b8:09:
0d:a2:70:bb:33:91:f2:8e:2d:1c:ed:bd:5e:e8:23:0b:d5:0a:
94:c4:6e:b0:14:1b:7c:57:c5:a4:b5:90:2f:54:02:e5:6b:d5:
33:4b:8c:db:43:d3:af:03:6d:dc:b5:99:99:79:17:d5:53:bd:
76:71:e7:0f:b9:dc:74:e0:a3:70:5c:7e:d9:a4:49:27:59:4a:
c8:df:84:f9:2f:e4:d2:67:fb:82:4e:be:4c:da:24:6a:76:6a:
f7:b4:b3:a0:cf:14:9f:80:77:b7:eb:fd:4f:c0:20:7c:a2:ec:
57:34:fe:4b:ce:45:82:60:c5:b5:6b:e2:2f:3b:72:59:19:81:
ef:5b:1d:00
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYv7GBeJ1o40N7Z3PJCn4XVBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjMxMTIzMDczMjIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYWI0OTEyM2ZmMmFkY2Q0MjEzYmRiMWZkYTA3YjViZmQyOTZlMWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYUhSGhQQgfuDAI7O2md04m6bneJ
8rqWynz/s7UrEfbLHNfYKeO6+sqmXUEEKaGE9inQGhiMk4VkZTMs0ZetDCPZXHuT
n8g5itQSffqAYoJqP9oeEt9HvOA+nvcUCa5QYq7omWgyDb0ykkBaezEc/ielELjG
xDx4mpC4hOnE/B/wZR5odfjJ6VGCT++PEND+6MR9lKq9JgECC3F3x/hmxOGX0Xfm
v1AROCHnfgra66UpjEX872xba/rqoPyKdvshG3VSpbVkvFqZjAlEEfbZD90XdkJm
pihHwHn6s2jQYuituDWgcgjK3f+0oC4+hQryYKMk9r3eMuss7r6sBiaCWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOq0kSP/KtzUITvbH9oHtb/SluGvMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvNnJTUklfOHEzTlFoTzlzZjJnZTF2OUtXNGE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSXEMA0G
CSqGSIb3DQEBCwUAA4IBAQBqyWYlMpn0OTv8xQa8ELmm5JWEbV2uwx7T80zhOyT7
SZd5kyukUpcdJPb3cqO+yWCKubAqKy/554PS7VI7QlrxsP25LK/yid7a20ixDMKc
u1KmrXXxMRIwipj0RbNEq4AR6JLoYaOtHoTdyA/ZpliIVop32onOxL8yYUfLuAkN
onC7M5Hyji0c7b1e6CML1QqUxG6wFBt8V8WktZAvVALla9UzS4zbQ9OvA23ctZmZ
eRfVU712cecPudx04KNwXH7ZpEknWUrI34T5L+TSZ/uCTr5M2iRqdmr3tLOgzxSf
gHe36/1PwCB8ouxXNP5LzkWCYMW1a+IvO3JZGYHvWx0A
-----END CERTIFICATE-----
Generated at Mon Jan 1 02:54:12 2024 by rpki-client on console-ams.rpki-client.org