Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/9WD6wC7WeMPQqxZdRluMFTFT5Ws.roa
File: 9WD6wC7WeMPQqxZdRluMFTFT5Ws.roa (raw, json)
Hash identifier: 4sZqShUJ2JnshyTs9k2GgAa78JDDEuMq1DcNucWCF94=
Subject key identifier: F5:60:FA:C0:2E:D6:78:C3:D0:AB:16:5D:46:5B:8C:15:31:53:E5:6B
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018930A42249721DA323DDCB15BA93448896
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/9WD6wC7WeMPQqxZdRluMFTFT5Ws.roa
Signing time: Fri 07 Jul 2023 13:56:50 +0000
ROA not before: Fri 07 Jul 2023 13:56:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203511
IP address blocks: 89.33.192.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:30:a4:22:49:72:1d:a3:23:dd:cb:15:ba:93:44:88:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jul 7 13:56:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f560fac02ed678c3d0ab165d465b8c153153e56b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:64:0c:63:cb:ab:df:21:05:01:96:ed:e4:54:
18:d7:4e:bd:58:7b:0d:2b:f4:42:04:56:ca:3a:56:
2f:24:49:d7:74:43:fa:0c:7f:a0:ea:c1:9c:ee:ca:
54:15:2b:25:a9:a8:51:4a:35:b8:cf:a9:79:4f:20:
93:bc:3a:2f:52:eb:ca:56:3b:e5:c6:ab:6b:1d:d9:
b0:9e:3f:20:d2:11:57:56:0d:7d:ce:cd:ac:64:cb:
81:85:95:6d:29:ee:10:9c:26:97:cb:1e:5b:a4:4a:
25:63:e9:69:cd:74:60:b7:6c:35:1c:a4:74:a5:92:
4d:b4:48:bb:95:fe:b6:3b:48:ba:28:85:fa:19:a2:
b5:ba:14:7c:f0:9c:74:14:35:10:ae:07:12:f4:99:
27:ae:7d:8b:cb:34:11:5c:8c:8e:9a:78:45:32:84:
d4:9e:6c:11:55:18:2c:d9:8e:aa:46:a1:02:4c:c9:
30:2a:03:54:dc:82:27:32:d2:80:44:40:43:ff:02:
cf:d0:41:91:a4:91:00:d2:9b:08:6a:ce:9e:ab:fb:
9c:39:2b:43:a6:b5:f3:a6:84:7a:03:10:0b:66:96:
52:1b:07:22:42:84:39:b1:58:1f:6f:a9:ce:b0:37:
75:fa:28:87:7f:f3:77:79:ec:d4:c3:bf:5e:76:ed:
4e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:60:FA:C0:2E:D6:78:C3:D0:AB:16:5D:46:5B:8C:15:31:53:E5:6B
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/9WD6wC7WeMPQqxZdRluMFTFT5Ws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.192.0/24
Signature Algorithm: sha256WithRSAEncryption
55:19:d6:cc:c6:8d:e8:4d:fc:8e:cd:b9:d5:1a:f2:8f:d8:e7:
71:a3:1d:1d:96:09:34:44:d0:00:d5:3a:bb:52:ee:b4:42:86:
99:cf:08:24:28:46:40:f0:12:bf:64:d0:7c:68:57:21:01:87:
1d:60:59:d5:a0:c3:c6:53:28:d6:07:de:41:83:82:54:42:0c:
65:26:ed:20:6f:fc:ba:5f:bf:8d:cf:7c:6e:63:31:88:59:26:
2e:d2:d6:bd:b0:6f:61:3b:bb:e5:4d:83:4f:40:18:67:8c:2e:
df:c0:73:44:56:08:4b:90:1c:4b:b4:4c:d7:7e:f3:04:e8:38:
4b:c0:10:28:7b:16:1d:72:8b:b5:07:ad:d1:b1:aa:66:dd:1e:
c0:6b:a5:45:42:0b:ae:f5:e9:1e:dc:c8:59:b1:c3:06:d7:8b:
8e:8c:19:54:5f:23:e6:91:49:51:57:26:e0:d1:d1:dc:14:17:
3e:0c:3d:31:8f:fe:7b:a4:b9:49:ec:32:50:08:a3:f7:b6:1d:
fc:2b:9c:a0:4b:4b:1b:f8:1e:2a:26:25:2a:16:1f:61:fe:b4:
7e:4a:6a:b3:05:8a:b9:99:8b:e0:aa:e9:70:92:9f:a2:6e:d7:
56:63:0b:4e:7e:f8:5d:12:77:12:38:80:51:68:33:0e:98:39:
04:a9:d6:e8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYkwpCJJch2jI93LFbqTRIiWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjMwNzA3MTM1NjUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTYwZmFjMDJlZDY3OGMzZDBhYjE2NWQ0NjViOGMxNTMxNTNlNTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWQMY8ur3yEFAZbt5FQY1069WHsN
K/RCBFbKOlYvJEnXdEP6DH+g6sGc7spUFSslqahRSjW4z6l5TyCTvDovUuvKVjvl
xqtrHdmwnj8g0hFXVg19zs2sZMuBhZVtKe4QnCaXyx5bpEolY+lpzXRgt2w1HKR0
pZJNtEi7lf62O0i6KIX6GaK1uhR88Jx0FDUQrgcS9Jknrn2LyzQRXIyOmnhFMoTU
nmwRVRgs2Y6qRqECTMkwKgNU3IInMtKAREBD/wLP0EGRpJEA0psIas6eq/ucOStD
prXzpoR6AxALZpZSGwciQoQ5sVgfb6nOsDd1+iiHf/N3eezUw79edu1O+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPVg+sAu1njD0KsWXUZbjBUxU+VrMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvOVdENndDN1dlTVBRcXhaZFJsdU1GVEZUNVdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSHAMA0G
CSqGSIb3DQEBCwUAA4IBAQBVGdbMxo3oTfyOzbnVGvKP2Odxox0dlgk0RNAA1Tq7
Uu60QoaZzwgkKEZA8BK/ZNB8aFchAYcdYFnVoMPGUyjWB95Bg4JUQgxlJu0gb/y6
X7+Nz3xuYzGIWSYu0ta9sG9hO7vlTYNPQBhnjC7fwHNEVghLkBxLtEzXfvME6DhL
wBAoexYdcou1B63Rsapm3R7Aa6VFQguu9eke3MhZscMG14uOjBlUXyPmkUlRVybg
0dHcFBc+DD0xj/57pLlJ7DJQCKP3th38K5ygS0sb+B4qJiUqFh9h/rR+SmqzBYq5
mYvgqulwkp+ibtdWYwtOfvhdEncSOIBRaDMOmDkEqdbo
Generated at Tue Jul 25 01:32:37 2023 by rpki-client on console-ams.rpki-client.org