Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/BctiP5ZNLUPMWenAbrSJpHN7S8Q.roa
File: BctiP5ZNLUPMWenAbrSJpHN7S8Q.roa (raw, json)
Hash identifier: RuwTjcFAHOJRwGT45ZgCGOhc+ycQU7KvCChJ/+GdwHc=
Subject key identifier: 05:CB:62:3F:96:4D:2D:43:CC:59:E9:C0:6E:B4:89:A4:73:7B:4B:C4
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018C0AC12E5F47F6F768763742D3D34925B3
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/BctiP5ZNLUPMWenAbrSJpHN7S8Q.roa
Signing time: Sun 26 Nov 2023 08:31:21 +0000
ROA not before: Sun 26 Nov 2023 08:31:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
89.42.80.0/23 maxlen: 23
89.42.94.0/24 maxlen: 24
93.113.183.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0a:c1:2e:5f:47:f6:f7:68:76:37:42:d3:d3:49:25:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Nov 26 08:31:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=05cb623f964d2d43cc59e9c06eb489a4737b4bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5b:21:12:62:fb:36:1e:50:86:5a:00:a9:3f:
4b:c1:89:c1:83:e2:ec:01:e1:bc:ca:d5:71:9a:68:
e9:34:0f:fd:41:0c:dc:30:5a:1b:2c:48:2f:7d:73:
b6:5a:bd:0a:6b:3e:30:b6:8d:f5:96:c8:1a:22:ff:
c5:02:f7:06:dc:02:40:e8:b7:a3:b4:c9:c3:2a:b6:
4f:02:ca:86:71:2e:2c:de:cc:3b:89:25:70:ec:b0:
bc:96:87:0a:7b:b8:d3:bf:f7:8e:d9:e5:ba:4f:c5:
38:f0:8f:41:d5:b6:70:a6:b3:f9:35:c7:3d:d6:2b:
06:cd:f2:d3:a7:32:84:60:73:d6:b1:22:c8:5e:c6:
28:c5:3f:ea:07:13:81:2f:82:0f:4b:b7:f5:5d:99:
8a:26:46:3e:cd:c2:94:e6:21:96:75:aa:6c:3a:60:
ff:6b:50:ae:01:fd:a8:b8:43:aa:c5:f8:ea:43:25:
34:0d:17:a3:8e:b3:9f:19:ea:c5:de:2b:26:5a:7a:
42:53:c2:fb:8a:2f:f0:ae:d1:17:a6:ec:50:0f:c0:
bd:b2:73:61:21:1b:dc:e0:c4:0e:ed:13:23:4e:0c:
71:18:8c:fa:bb:e2:f8:ca:ce:1a:49:38:ca:bc:25:
e9:b5:19:69:70:d9:a9:5f:e5:3d:7f:4d:07:ab:f6:
49:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:CB:62:3F:96:4D:2D:43:CC:59:E9:C0:6E:B4:89:A4:73:7B:4B:C4
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/BctiP5ZNLUPMWenAbrSJpHN7S8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.80.0/22
89.42.94.0/24
93.113.183.0/24
Signature Algorithm: sha256WithRSAEncryption
20:dd:88:59:15:bd:98:8d:de:42:7b:03:73:46:82:20:78:86:
cd:70:17:6e:ee:48:f2:5a:83:1e:ba:ed:92:ed:d8:fb:33:d3:
c1:5d:fa:28:ad:df:65:83:27:22:e3:66:3f:0c:b9:a2:ea:8f:
c6:92:b2:40:58:ec:c5:be:6d:e0:89:6a:19:1a:96:de:a8:9c:
38:0e:96:f6:eb:b0:66:f5:24:a6:54:24:1a:7d:ae:a2:fc:b4:
f9:55:34:36:02:11:86:07:17:5b:9b:32:39:21:ff:78:59:1e:
84:03:dd:e1:ae:35:ff:a0:78:0a:ae:cb:83:80:99:d9:a6:d0:
3d:ef:ce:00:1f:c5:37:2f:79:bf:f2:9e:77:ec:bd:7d:78:c4:
af:c4:32:c2:4a:59:96:c0:a9:37:4e:6e:86:32:f6:7d:dd:c2:
52:3e:9e:60:96:f9:a9:4f:fa:b8:65:e3:c7:b7:ac:4e:5f:07:
cc:01:d9:af:95:c4:af:e6:a6:3f:d8:74:51:38:74:ec:c8:8a:
38:dc:11:83:7b:30:d7:55:de:d3:89:34:83:7e:31:95:66:f2:
2f:cb:90:1c:95:4d:65:47:e5:af:95:5c:ff:7a:9a:06:f9:6b:
c3:34:3a:5a:a3:d3:61:89:65:c9:bc:7b:12:2a:00:d5:49:fc:
ad:0f:b5:b5
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYwKwS5fR/b3aHY3QtPTSSWzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjMxMTI2MDgzMTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNWNiNjIzZjk2NGQyZDQzY2M1OWU5YzA2ZWI0ODlhNDczN2I0YmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVshEmL7Nh5QhloAqT9LwYnBg+Ls
AeG8ytVxmmjpNA/9QQzcMFobLEgvfXO2Wr0Kaz4wto31lsgaIv/FAvcG3AJA6Lej
tMnDKrZPAsqGcS4s3sw7iSVw7LC8locKe7jTv/eO2eW6T8U48I9B1bZwprP5Ncc9
1isGzfLTpzKEYHPWsSLIXsYoxT/qBxOBL4IPS7f1XZmKJkY+zcKU5iGWdapsOmD/
a1CuAf2ouEOqxfjqQyU0DRejjrOfGerF3ismWnpCU8L7ii/wrtEXpuxQD8C9snNh
IRvc4MQO7RMjTgxxGIz6u+L4ys4aSTjKvCXptRlpcNmpX+U9f00Hq/ZJ9QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFAXLYj+WTS1DzFnpwG60iaRze0vEMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvQmN0aVA1Wk5MVVBNV2VuQWJyU0pwSE43UzhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCWSpQAwQA
WSpeAwQAXXG3MA0GCSqGSIb3DQEBCwUAA4IBAQAg3YhZFb2Yjd5CewNzRoIgeIbN
cBdu7kjyWoMeuu2S7dj7M9PBXfoord9lgyci42Y/DLmi6o/GkrJAWOzFvm3giWoZ
GpbeqJw4Dpb267Bm9SSmVCQafa6i/LT5VTQ2AhGGBxdbmzI5If94WR6EA93hrjX/
oHgKrsuDgJnZptA9784AH8U3L3m/8p537L19eMSvxDLCSlmWwKk3Tm6GMvZ93cJS
Pp5glvmpT/q4ZePHt6xOXwfMAdmvlcSv5qY/2HRROHTsyIo43BGDezDXVd7TiTSD
fjGVZvIvy5AclU1lR+WvlVz/epoG+WvDNDpao9NhiWXJvHsSKgDVSfytD7W1
-----END CERTIFICATE-----
Generated at Mon Nov 27 11:56:26 2023 by rpki-client on console-fra.rpki-client.org