Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/BQH7xEO5tNGquPqrxlbdRgG68b4.roa
File: BQH7xEO5tNGquPqrxlbdRgG68b4.roa (raw, json)
Hash identifier: 8HkN+FBGZKfQ9/etrFGVCaule5wqvK7cjwcDpb0OYe8=
Subject key identifier: 05:01:FB:C4:43:B9:B4:D1:AA:B8:FA:AB:C6:56:DD:46:01:BA:F1:BE
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018CAF5BCD9C795C4E03074C9EB7CFE18EB7
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/BQH7xEO5tNGquPqrxlbdRgG68b4.roa
Signing time: Thu 28 Dec 2023 07:37:58 +0000
ROA not before: Thu 28 Dec 2023 07:37:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
89.47.125.0/24 maxlen: 24
89.47.126.0/24 maxlen: 24
89.47.127.0/24 maxlen: 24
89.33.195.0/24 maxlen: 24
89.46.3.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:af:5b:cd:9c:79:5c:4e:03:07:4c:9e:b7:cf:e1:8e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Dec 28 07:37:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0501fbc443b9b4d1aab8faabc656dd4601baf1be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b9:68:bc:7f:82:2e:6e:7b:c6:ed:e4:26:6f:
6b:c2:c3:94:a3:8a:c2:ef:f1:00:02:48:0f:41:20:
ed:db:d6:30:c9:87:21:90:85:0a:8b:8d:12:5b:5c:
58:72:41:fa:62:a3:a6:ec:02:dc:9a:a8:d1:3b:0c:
26:0e:91:2d:da:db:18:2e:f0:8c:e3:81:d2:4e:32:
7f:74:2e:59:c7:17:fe:1f:33:f7:e3:71:3a:2c:05:
14:b6:77:36:30:5b:da:33:d5:0b:44:47:e7:32:12:
f6:ee:21:94:13:9e:8d:a8:02:e5:b2:2f:dd:64:9a:
c9:8f:b7:d4:6a:b6:dd:9e:3c:88:66:af:c3:9c:3a:
83:a1:0c:19:c4:9b:f7:df:20:3f:37:6e:16:47:b9:
ca:67:4a:6b:d3:18:54:8e:48:4f:79:c9:25:3d:42:
57:32:e5:ee:e6:9e:ab:1a:6f:ce:0f:47:25:db:d4:
27:f8:67:54:76:2c:ae:93:27:af:d6:ef:1f:2d:c4:
6f:a8:6f:20:b0:86:a9:4b:c8:17:da:aa:c8:b3:b8:
52:fe:c6:f8:03:a5:6e:28:5b:cf:45:77:1b:00:81:
e0:80:99:5c:c4:9f:b6:37:19:b5:57:84:a1:37:1b:
00:0e:b6:ce:f2:81:1c:0d:7f:73:aa:37:ce:09:4a:
8b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:01:FB:C4:43:B9:B4:D1:AA:B8:FA:AB:C6:56:DD:46:01:BA:F1:BE
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/BQH7xEO5tNGquPqrxlbdRgG68b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.195.0/24
89.42.81.0-89.42.83.255
89.46.3.0/24
89.47.125.0-89.47.127.255
Signature Algorithm: sha256WithRSAEncryption
78:6d:4c:99:73:c6:88:f2:18:56:43:95:b9:82:fd:ff:34:04:
13:4f:53:a6:71:9b:ca:6a:dc:9b:4e:20:d5:a3:1d:b2:df:f7:
d8:65:b1:53:dc:26:3d:72:7e:04:d7:21:6b:7a:58:75:2e:7e:
f0:d7:92:63:98:30:51:30:11:b2:dc:25:34:e0:de:39:d5:e8:
a4:7e:72:d1:1a:dd:da:16:7f:0e:91:9e:e8:b5:09:67:4b:44:
e0:81:7a:22:46:3f:22:82:71:9c:a8:d6:eb:b2:ca:1a:72:2c:
cc:51:b9:ab:f4:15:82:a1:bf:1f:1a:00:5e:58:64:30:90:94:
1d:41:e2:13:dd:08:3f:40:3d:3e:24:3d:bb:8a:09:76:21:0d:
72:5a:ef:ba:d4:8e:3d:6c:fe:63:9e:9b:74:a8:ba:86:37:78:
aa:cc:76:5d:76:60:96:1e:fa:26:8c:cc:4d:d6:22:98:f0:7a:
db:e9:94:3b:ba:25:66:4b:b0:2d:b3:ef:be:a5:b5:8a:1b:ca:
f8:b2:5d:33:80:2a:bf:2e:59:12:4d:30:69:7e:10:53:0e:29:
47:67:ff:c7:c0:e7:f2:a2:14:8f:8e:7c:1c:23:e9:f9:bc:91:
f8:a6:f2:b9:71:bc:52:39:e4:ac:4b:69:53:11:c7:00:ff:5e:
8e:2c:09:c8
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAYyvW82ceVxOAwdMnrfP4Y63MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjMxMjI4MDczNzU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTAxZmJjNDQzYjliNGQxYWFiOGZhYWJjNjU2ZGQ0NjAxYmFmMWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLlovH+CLm57xu3kJm9rwsOUo4rC
7/EAAkgPQSDt29YwyYchkIUKi40SW1xYckH6YqOm7ALcmqjROwwmDpEt2tsYLvCM
44HSTjJ/dC5Zxxf+HzP343E6LAUUtnc2MFvaM9ULREfnMhL27iGUE56NqALlsi/d
ZJrJj7fUarbdnjyIZq/DnDqDoQwZxJv33yA/N24WR7nKZ0pr0xhUjkhPecklPUJX
MuXu5p6rGm/OD0cl29Qn+GdUdiyukyev1u8fLcRvqG8gsIapS8gX2qrIs7hS/sb4
A6VuKFvPRXcbAIHggJlcxJ+2Nxm1V4ShNxsADrbO8oEcDX9zqjfOCUqLIQIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFAUB+8RDubTRqrj6q8ZW3UYBuvG+MB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvQlFIN3hFTzV0TkdxdVBxcnhsYmRSZ0c2OGI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQAWSHDMAwD
BABZKlEDBAJZKlADBABZLgMwDAMEAFkvfQMEB1kvADANBgkqhkiG9w0BAQsFAAOC
AQEAeG1MmXPGiPIYVkOVuYL9/zQEE09TpnGbymrcm04g1aMdst/32GWxU9wmPXJ+
BNcha3pYdS5+8NeSY5gwUTARstwlNODeOdXopH5y0Rrd2hZ/DpGe6LUJZ0tE4IF6
IkY/IoJxnKjW67LKGnIszFG5q/QVgqG/HxoAXlhkMJCUHUHiE90IP0A9PiQ9u4oJ
diENclrvutSOPWz+Y56bdKi6hjd4qsx2XXZglh76JozMTdYimPB62+mUO7olZkuw
LbPvvqW1ihvK+LJdM4Aqvy5ZEk0waX4QUw4pR2f/x8Dn8qIUj458HCPp+byR+Kby
uXG8UjnkrEtpUxHHAP9ejiwJyA==
-----END CERTIFICATE-----
Generated at Thu Dec 28 17:19:24 2023 by rpki-client on console-ams.rpki-client.org