Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8qcQOaSZ15YM1-qKVE3LNXKY6jk.roa
File: 8qcQOaSZ15YM1-qKVE3LNXKY6jk.roa (raw, json)
Hash identifier: DUorH+ssgPT21fJTveaz6su1XrxgVTdXnJ4Dd3scMqY=
Subject key identifier: F2:A7:10:39:A4:99:D7:96:0C:D7:EA:8A:54:4D:CB:35:72:98:EA:39
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018CCE6CFD81B0B282D74EC373401C375437
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8qcQOaSZ15YM1-qKVE3LNXKY6jk.roa
Signing time: Wed 03 Jan 2024 08:24:58 +0000
ROA not before: Wed 03 Jan 2024 08:24:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
89.37.196.0/24 maxlen: 24
89.46.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 07 Jan 2024 08:18:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ce:6c:fd:81:b0:b2:82:d7:4e:c3:73:40:1c:37:54:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 3 08:24:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f2a71039a499d7960cd7ea8a544dcb357298ea39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7e:25:8c:61:28:88:2d:0e:78:47:82:b0:be:
d0:6b:c3:ae:e2:45:15:77:1a:71:b1:68:20:9d:a6:
d7:e8:89:7a:db:e6:49:c3:3b:d2:7f:d2:82:69:e0:
f9:25:8d:3c:9c:fa:7c:e2:56:aa:34:73:d1:f8:0c:
64:f5:34:e3:ab:4b:96:3e:4d:19:46:31:1b:29:c8:
3f:00:fd:4f:75:20:7a:96:9f:96:0f:9d:3a:d8:7d:
9c:94:9f:35:19:3c:c8:97:45:14:5e:86:c6:52:1c:
8a:d7:0c:2d:e3:eb:c3:bc:ff:f7:de:80:7f:41:77:
62:e8:ec:ce:e4:f6:d9:6c:62:5b:31:3c:21:85:4a:
c9:63:f9:43:6c:6a:71:4a:07:59:11:1b:10:55:4b:
e9:95:c2:81:f7:05:1c:8c:7f:74:c0:9e:e1:13:7c:
c8:9d:10:17:34:58:bb:8f:43:70:78:71:a2:19:51:
86:ce:4a:cd:04:cc:0d:93:7f:17:0f:1f:fb:bd:a4:
18:6c:84:4f:0e:99:ea:07:58:e7:12:d5:08:b3:86:
0c:bd:0a:4a:70:12:3c:d6:64:97:c8:2d:55:85:88:
0f:0e:46:81:a4:81:62:24:10:80:15:21:f1:d9:76:
97:c7:69:18:a2:f5:c9:6a:ab:7b:1f:13:a9:71:10:
e3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A7:10:39:A4:99:D7:96:0C:D7:EA:8A:54:4D:CB:35:72:98:EA:39
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8qcQOaSZ15YM1-qKVE3LNXKY6jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.196.0/24
89.42.81.0-89.42.83.255
89.46.3.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:02:25:db:4f:eb:38:48:c0:38:c6:08:94:a7:ab:bf:df:f6:
e1:57:f6:05:88:a3:b4:a2:c9:5e:9e:b2:34:02:31:7c:07:2d:
1d:47:32:81:c1:ed:92:1c:26:57:8f:21:74:a5:5c:af:39:c6:
d3:57:99:ec:1e:89:eb:29:05:12:80:d6:85:55:bf:43:85:56:
c3:11:95:91:9a:41:a1:ae:8b:fe:a9:95:c2:48:91:2b:73:ba:
83:e8:ec:a6:74:7e:d9:26:f0:1e:ae:4d:b7:2d:75:96:2d:fa:
36:66:4f:40:5f:88:a9:ae:2b:c5:5f:3d:00:08:bb:21:3f:45:
c1:ac:60:48:9d:96:6e:40:ed:38:5b:e6:bc:70:da:ea:19:16:
a4:6a:98:57:f6:61:db:12:2f:b6:14:2b:46:9e:96:e9:cc:ba:
45:ca:84:83:e1:74:49:83:d8:12:2e:bf:98:42:6d:58:a7:96:
a3:b2:8f:97:e5:ef:48:ab:b6:51:6f:8a:c2:f4:0b:1b:19:46:
22:9d:4e:1e:f0:e1:76:75:dc:f4:c5:c4:38:ab:14:a6:76:ea:
e1:31:fd:3a:cb:28:07:a7:76:c4:84:ca:4a:f9:de:c6:e1:a1:
3d:a6:6b:fe:02:2d:c3:ff:95:a2:9a:d4:89:d1:83:33:a6:7b:
f6:8d:1b:3b
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYzObP2BsLKC107Dc0AcN1Q3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjQwMTAzMDgyNDU4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMmE3MTAzOWE0OTlkNzk2MGNkN2VhOGE1NDRkY2IzNTcyOThlYTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA134ljGEoiC0OeEeCsL7Qa8Ou4kUV
dxpxsWggnabX6Il62+ZJwzvSf9KCaeD5JY08nPp84laqNHPR+Axk9TTjq0uWPk0Z
RjEbKcg/AP1PdSB6lp+WD5062H2clJ81GTzIl0UUXobGUhyK1wwt4+vDvP/33oB/
QXdi6OzO5PbZbGJbMTwhhUrJY/lDbGpxSgdZERsQVUvplcKB9wUcjH90wJ7hE3zI
nRAXNFi7j0NweHGiGVGGzkrNBMwNk38XDx/7vaQYbIRPDpnqB1jnEtUIs4YMvQpK
cBI81mSXyC1VhYgPDkaBpIFiJBCAFSHx2XaXx2kYovXJaqt7HxOpcRDjSQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFPKnEDmkmdeWDNfqilRNyzVymOo5MB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvOHFjUU9hU1oxNVlNMS1xS1ZFM0xOWEtZNmprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAWSXEMAwD
BABZKlEDBAJZKlADBABZLgMwDQYJKoZIhvcNAQELBQADggEBADoCJdtP6zhIwDjG
CJSnq7/f9uFX9gWIo7SiyV6esjQCMXwHLR1HMoHB7ZIcJlePIXSlXK85xtNXmewe
iespBRKA1oVVv0OFVsMRlZGaQaGui/6plcJIkStzuoPo7KZ0ftkm8B6uTbctdZYt
+jZmT0BfiKmuK8VfPQAIuyE/RcGsYEidlm5A7Thb5rxw2uoZFqRqmFf2YdsSL7YU
K0aelunMukXKhIPhdEmD2BIuv5hCbVinlqOyj5fl70irtlFvisL0CxsZRiKdTh7w
4XZ13PTFxDirFKZ26uEx/TrLKAendsSEykr53sbhoT2ma/4CLcP/laKa1InRgzOm
e/aNGzs=
-----END CERTIFICATE-----
Generated at Sun Jan 7 11:20:38 2024 by rpki-client on console-ams.rpki-client.org