Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/CW7IXRbCR3XpmByn_azs7DZEFo8.roa
File: CW7IXRbCR3XpmByn_azs7DZEFo8.roa (raw, json)
Hash identifier: TWH5FZzEHhqkyHn4NT7QpxNwkCnymWji9FP6rvaFzC4=
Subject key identifier: 09:6E:C8:5D:16:C2:47:75:E9:98:1C:A7:FD:AC:EC:EC:36:44:16:8F
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018AA20C9D5F7EC04090D482D25B53010167
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/CW7IXRbCR3XpmByn_azs7DZEFo8.roa
Signing time: Sun 17 Sep 2023 07:30:50 +0000
ROA not before: Sun 17 Sep 2023 07:30:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29802
IP address blocks: 89.33.192.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a2:0c:9d:5f:7e:c0:40:90:d4:82:d2:5b:53:01:01:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Sep 17 07:30:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=096ec85d16c24775e9981ca7fdacecec3644168f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3e:93:46:7c:3d:e5:23:78:97:68:b8:b8:c2:
65:a9:32:29:40:61:ca:12:d8:e4:45:99:4a:67:0b:
0b:63:54:48:9b:d4:33:f3:43:83:0c:d9:8c:3f:04:
ed:46:96:e8:10:7a:bd:7b:45:d2:58:16:df:88:07:
1a:6c:33:14:75:3b:98:0c:9f:ce:c6:7c:ad:87:9a:
a7:5e:83:c4:4f:e7:0d:f2:cf:36:1a:68:cd:68:97:
7a:e9:cf:dc:f6:07:ff:a4:fb:ab:b7:3a:7f:d0:7f:
0d:1e:40:6b:98:be:6a:65:d4:c2:9a:0c:0b:81:26:
12:7d:16:56:69:a5:95:b6:c2:c4:a5:96:7d:b4:70:
c2:07:19:bb:9a:9c:41:ce:ff:e6:3a:a0:72:b3:d2:
4d:ee:11:20:d1:6d:6a:84:cf:c9:1b:56:c1:ce:d2:
21:16:1f:f0:2e:4a:79:e4:64:f6:03:84:44:26:a2:
82:5b:7c:bd:fa:30:69:1e:40:93:d6:d9:bf:85:38:
b9:51:79:7b:ba:ef:60:8b:41:4e:79:14:a0:12:75:
74:6c:92:83:92:51:11:27:b4:8c:77:bd:59:0f:37:
b1:de:d6:22:cc:c5:a2:b6:26:51:f0:7e:90:c6:df:
fa:43:2d:fc:f8:0e:24:14:ad:ba:6c:4b:59:16:43:
9b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:6E:C8:5D:16:C2:47:75:E9:98:1C:A7:FD:AC:EC:EC:36:44:16:8F
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/CW7IXRbCR3XpmByn_azs7DZEFo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.192.0/24
Signature Algorithm: sha256WithRSAEncryption
52:99:99:b3:77:b3:88:7a:1e:04:72:db:26:bc:93:af:73:6c:
c1:e7:e9:64:e1:60:f4:d3:33:bb:fc:d5:8d:63:c9:ff:6f:7a:
52:40:13:f6:df:7b:a9:df:4f:2f:1a:31:ec:35:90:4b:91:b9:
09:87:74:aa:79:36:ae:19:b2:e0:c3:11:cb:72:0e:06:a9:ef:
cf:f1:c9:81:78:b0:3a:05:e2:58:7f:90:15:ef:93:2c:01:38:
30:a4:c3:c9:39:cf:2c:f2:20:ef:d8:02:96:b9:03:07:3a:9b:
fe:51:3e:41:87:1f:2b:c5:2a:25:ff:e2:72:bf:20:9f:70:9e:
7b:b8:95:3d:aa:23:56:30:7d:55:38:45:2f:ba:6d:96:c1:00:
8c:9b:27:81:0b:7e:4f:5f:93:41:06:14:94:a4:28:45:05:cf:
c6:1f:74:f4:7e:ea:e7:11:90:d7:a5:a6:0a:16:6f:c6:76:f0:
b3:f5:99:52:25:a4:bf:e3:9f:da:5b:a7:db:4c:d1:bf:d3:79:
dd:4f:d3:66:30:91:28:6a:5c:82:20:8d:c9:bd:1d:56:98:1b:
8a:77:3c:84:f5:48:1a:84:3e:cf:ff:7f:98:e4:7c:31:ff:12:
11:53:8a:f7:c8:52:0e:9f:b4:6a:2d:cf:37:58:e9:d8:86:be:
df:2e:ec:f4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYqiDJ1ffsBAkNSC0ltTAQFnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjMwOTE3MDczMDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOTZlYzg1ZDE2YzI0Nzc1ZTk5ODFjYTdmZGFjZWNlYzM2NDQxNjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoj6TRnw95SN4l2i4uMJlqTIpQGHK
EtjkRZlKZwsLY1RIm9Qz80ODDNmMPwTtRpboEHq9e0XSWBbfiAcabDMUdTuYDJ/O
xnyth5qnXoPET+cN8s82GmjNaJd66c/c9gf/pPurtzp/0H8NHkBrmL5qZdTCmgwL
gSYSfRZWaaWVtsLEpZZ9tHDCBxm7mpxBzv/mOqBys9JN7hEg0W1qhM/JG1bBztIh
Fh/wLkp55GT2A4REJqKCW3y9+jBpHkCT1tm/hTi5UXl7uu9gi0FOeRSgEnV0bJKD
klERJ7SMd71ZDzex3tYizMWitiZR8H6Qxt/6Qy38+A4kFK26bEtZFkOb+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAluyF0Wwkd16Zgcp/2s7Ow2RBaPMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvQ1c3SVhSYkNSM1hwbUJ5bl9henM3RFpFRm84LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSHAMA0G
CSqGSIb3DQEBCwUAA4IBAQBSmZmzd7OIeh4EctsmvJOvc2zB5+lk4WD00zO7/NWN
Y8n/b3pSQBP233up308vGjHsNZBLkbkJh3SqeTauGbLgwxHLcg4Gqe/P8cmBeLA6
BeJYf5AV75MsATgwpMPJOc8s8iDv2AKWuQMHOpv+UT5Bhx8rxSol/+JyvyCfcJ57
uJU9qiNWMH1VOEUvum2WwQCMmyeBC35PX5NBBhSUpChFBc/GH3T0furnEZDXpaYK
Fm/GdvCz9ZlSJaS/45/aW6fbTNG/03ndT9NmMJEoalyCII3JvR1WmBuKdzyE9Uga
hD7P/3+Y5Hwx/xIRU4r3yFIOn7RqLc83WOnYhr7fLuz0
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:49 2024 by rpki-client on console-ams.rpki-client.org