Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/88koXetsvPMFy2QFFgwMapOzqd0.roa
File: 88koXetsvPMFy2QFFgwMapOzqd0.roa (raw, json)
Hash identifier: Ajt5t91z3FtG5NLINtEWktC6agCRM8yBQVsN3iojnxE=
Subject key identifier: F3:C9:28:5D:EB:6C:BC:F3:05:CB:64:05:16:0C:0C:6A:93:B3:A9:DD
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018AA847768AFA80370DAB16DA77BB377C44
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/88koXetsvPMFy2QFFgwMapOzqd0.roa
Signing time: Mon 18 Sep 2023 12:32:50 +0000
ROA not before: Mon 18 Sep 2023 12:32:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 89.42.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Oct 2023 12:56:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a8:47:76:8a:fa:80:37:0d:ab:16:da:77:bb:37:7c:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Sep 18 12:32:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3c9285deb6cbcf305cb6405160c0c6a93b3a9dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8c:69:94:92:92:87:fc:a0:6c:6a:56:97:05:
e6:0a:08:21:f7:b7:68:2a:36:16:be:23:1e:f8:6f:
8e:7f:5b:5e:82:cb:f5:85:40:56:b9:a1:99:8f:f1:
0b:cf:51:bc:98:dc:a1:64:2f:6b:60:aa:da:f7:44:
b0:af:3b:10:e4:8f:69:67:72:5c:3f:82:16:74:5e:
b5:de:d9:5c:49:46:e7:c2:bb:d9:c8:6d:af:3d:58:
e6:16:a5:c2:11:a0:a6:3e:b0:40:c9:cd:19:6d:a5:
b8:99:5b:a6:ea:08:e9:79:9c:62:e9:21:20:74:13:
69:2d:85:90:7e:cb:1f:43:17:f9:27:68:1d:cf:80:
c0:ac:b8:46:40:76:f8:46:71:3a:26:56:f2:0c:59:
57:a2:60:ee:8a:29:50:47:46:58:40:22:41:2a:fc:
55:10:4a:5b:05:99:37:88:42:a1:1a:7f:10:1d:26:
fc:68:70:0f:71:0e:a5:64:df:43:e7:24:43:a6:5d:
3a:5f:7a:1a:63:96:84:fe:fe:5a:d2:d1:14:f6:65:
a5:c0:61:fb:2d:64:f2:de:20:6e:30:9f:25:74:44:
f6:ba:1a:62:fc:4b:2d:0b:29:94:7c:44:6f:12:b5:
65:85:ca:2e:02:b8:73:39:e0:8d:e6:a2:6c:88:af:
45:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C9:28:5D:EB:6C:BC:F3:05:CB:64:05:16:0C:0C:6A:93:B3:A9:DD
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/88koXetsvPMFy2QFFgwMapOzqd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.87.0/24
Signature Algorithm: sha256WithRSAEncryption
27:77:c9:67:fe:82:ac:fa:99:fa:b3:26:e9:4e:98:b1:00:eb:
34:11:71:ef:c7:47:d4:0c:2c:ba:8b:eb:11:c2:37:92:14:cd:
c4:9f:bc:94:92:fb:31:7a:36:61:32:f7:6e:b0:be:b3:56:94:
1a:8f:02:18:e9:5d:e9:01:30:6c:21:0e:20:84:f7:40:31:25:
5d:7e:5d:a5:4b:d6:bb:21:03:94:de:ec:00:70:f1:50:e4:8f:
d5:da:23:f3:95:e4:a4:fa:a7:17:cd:6d:21:e2:1f:a4:8f:c6:
43:fd:c8:b9:3c:86:6b:93:85:54:7b:5a:57:4f:ba:e2:97:e6:
aa:f6:27:e4:b1:cc:3c:65:95:37:be:3b:64:29:82:4e:70:06:
4e:18:6a:4b:64:3c:03:10:c2:89:7b:a0:74:9e:6e:4f:53:a6:
38:4b:41:65:f0:13:95:5b:8d:cb:7c:4e:42:77:1d:d8:6c:99:
af:31:b4:bd:44:5d:28:97:17:e4:d3:f8:93:2f:de:f0:b7:dc:
f2:9f:1b:a9:70:bb:1a:76:81:4d:01:6a:4f:f4:ac:ac:d8:d4:
1d:f2:65:fa:73:b2:35:05:fb:7e:fb:bf:e4:e5:2a:d9:5a:de:
99:73:52:d9:e9:2e:c6:4e:16:79:f2:c5:a5:28:0e:3d:81:6d:
6f:a6:29:f6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYqoR3aK+oA3DasW2ne7N3xEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjMwOTE4MTIzMjUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmM2M5Mjg1ZGViNmNiY2YzMDVjYjY0MDUxNjBjMGM2YTkzYjNhOWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4xplJKSh/ygbGpWlwXmCggh97do
KjYWviMe+G+Of1tegsv1hUBWuaGZj/ELz1G8mNyhZC9rYKra90SwrzsQ5I9pZ3Jc
P4IWdF613tlcSUbnwrvZyG2vPVjmFqXCEaCmPrBAyc0ZbaW4mVum6gjpeZxi6SEg
dBNpLYWQfssfQxf5J2gdz4DArLhGQHb4RnE6JlbyDFlXomDuiilQR0ZYQCJBKvxV
EEpbBZk3iEKhGn8QHSb8aHAPcQ6lZN9D5yRDpl06X3oaY5aE/v5a0tEU9mWlwGH7
LWTy3iBuMJ8ldET2uhpi/EstCymUfERvErVlhcouArhzOeCN5qJsiK9FZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPPJKF3rbLzzBctkBRYMDGqTs6ndMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvODhrb1hldHN2UE1GeTJRRkZnd01hcE96cWQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSpXMA0G
CSqGSIb3DQEBCwUAA4IBAQAnd8ln/oKs+pn6sybpTpixAOs0EXHvx0fUDCy6i+sR
wjeSFM3En7yUkvsxejZhMvdusL6zVpQajwIY6V3pATBsIQ4ghPdAMSVdfl2lS9a7
IQOU3uwAcPFQ5I/V2iPzleSk+qcXzW0h4h+kj8ZD/ci5PIZrk4VUe1pXT7ril+aq
9ifkscw8ZZU3vjtkKYJOcAZOGGpLZDwDEMKJe6B0nm5PU6Y4S0Fl8BOVW43LfE5C
dx3YbJmvMbS9RF0olxfk0/iTL97wt9zynxupcLsadoFNAWpP9Kys2NQd8mX6c7I1
Bft++7/k5SrZWt6Zc1LZ6S7GThZ58sWlKA49gW1vpin2
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:18 2024 by rpki-client on console-fra.rpki-client.org