Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/E_UBBhjCPW_5tkafenlZK-Sv9O4.roa
File: E_UBBhjCPW_5tkafenlZK-Sv9O4.roa (raw, json)
Hash identifier: KHU22AVmFDdcgxkTSvO0E0zOlvW94DkjQia17GX0fJs=
Subject key identifier: 13:F5:01:06:18:C2:3D:6F:F9:B6:46:9F:7A:79:59:2B:E4:AF:F4:EE
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01856ECB7E0ADCA9934B0D300376E5FCBED7
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/E_UBBhjCPW_5tkafenlZK-Sv9O4.roa
Signing time: Sun 01 Jan 2023 19:25:07 +0000
ROA not before: Sun 01 Jan 2023 19:25:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60984
IP address blocks: 89.41.178.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:7e:0a:dc:a9:93:4b:0d:30:03:76:e5:fc:be:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 19:25:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13f5010618c23d6ff9b6469f7a79592be4aff4ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:be:7d:55:52:42:5f:be:2b:6b:f1:ae:97:01:
72:ab:9b:8d:60:08:77:da:5e:6c:6f:92:63:48:f2:
97:79:ba:3b:ed:54:86:10:47:2f:87:25:4d:e2:07:
76:66:c1:68:e8:56:5c:22:d7:8e:17:da:15:7f:3e:
5d:20:a0:ea:e7:8a:a2:38:71:f8:a2:da:66:ff:d4:
d9:20:d4:16:09:6e:f7:cd:1b:5e:61:3b:15:be:99:
cd:9c:54:9b:71:58:f0:6c:ed:70:50:0b:f5:dd:94:
e6:3b:e8:a9:77:f1:3e:c0:98:66:13:d2:18:52:5b:
de:8f:cc:cd:00:6c:ce:95:53:30:96:bb:3c:10:fb:
e6:87:6d:74:1b:ac:9e:33:d5:0a:fd:8b:c5:e3:40:
35:b2:0e:17:33:b0:5d:c1:53:e5:6f:12:ff:eb:02:
69:7a:45:86:cc:8e:b6:13:37:91:50:04:02:89:62:
61:b2:2a:b9:99:81:45:73:4c:0e:86:58:2a:d5:09:
43:8c:1f:f1:42:b2:bc:fc:58:83:5b:e0:4e:f6:71:
35:b2:2e:d1:e9:ef:d6:ce:29:b4:67:3e:75:c6:86:
55:18:b3:00:89:10:04:2f:fb:10:47:0c:bc:ef:2b:
c1:c9:c3:93:b0:02:8c:fe:e1:f3:bf:87:a0:e2:02:
33:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F5:01:06:18:C2:3D:6F:F9:B6:46:9F:7A:79:59:2B:E4:AF:F4:EE
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/E_UBBhjCPW_5tkafenlZK-Sv9O4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.41.178.0/24
Signature Algorithm: sha256WithRSAEncryption
11:69:58:45:2e:7c:f9:e6:64:e6:d7:5a:9d:5f:68:f7:b9:e6:
02:81:11:1d:4a:62:02:b6:2f:48:71:04:eb:24:76:c3:e6:19:
f2:43:00:5c:34:cc:50:9b:2d:42:86:f9:9d:95:b8:d7:82:d8:
d5:ca:3f:fe:fb:69:dd:fa:0a:21:ad:4c:48:0b:c0:d9:8d:98:
7c:10:df:ed:6c:a9:db:07:5e:71:ff:dd:d5:d1:97:b6:29:83:
ac:1b:09:15:79:c7:b7:b9:b7:ee:d4:9f:31:2f:6f:29:a0:0f:
a2:a9:e3:3d:eb:9a:4f:0f:c4:92:72:75:40:e0:11:aa:e2:aa:
1a:06:ef:73:f6:73:e9:ad:ea:72:65:52:e2:34:9f:73:27:95:
71:6c:ba:d6:b5:15:18:fa:59:cc:a1:8c:6a:02:a6:7d:e7:29:
0d:e3:39:2d:e9:d9:64:5f:58:dc:2b:13:15:40:a5:de:69:3e:
ac:dc:70:55:44:e4:ce:a8:c0:ec:ee:60:44:bf:f5:69:3c:6a:
28:6d:50:9b:3b:0d:9b:7b:59:08:fc:e4:dd:87:2f:9b:88:fc:
41:19:4f:90:73:24:4b:1c:71:94:0b:e1:9c:96:55:b0:85:aa:
ad:5e:be:59:ad:3c:99:f3:f5:e3:e3:f5:05:37:5a:cf:b4:53:
fd:f3:04:0d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuy34K3KmTSw0wA3bl/L7XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjMwMTAxMTkyNTA3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2Y1MDEwNjE4YzIzZDZmZjliNjQ2OWY3YTc5NTkyYmU0YWZmNGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl759VVJCX74ra/GulwFyq5uNYAh3
2l5sb5JjSPKXebo77VSGEEcvhyVN4gd2ZsFo6FZcIteOF9oVfz5dIKDq54qiOHH4
otpm/9TZINQWCW73zRteYTsVvpnNnFSbcVjwbO1wUAv13ZTmO+ipd/E+wJhmE9IY
Ulvej8zNAGzOlVMwlrs8EPvmh210G6yeM9UK/YvF40A1sg4XM7BdwVPlbxL/6wJp
ekWGzI62EzeRUAQCiWJhsiq5mYFFc0wOhlgq1QlDjB/xQrK8/FiDW+BO9nE1si7R
6e/Wzim0Zz51xoZVGLMAiRAEL/sQRwy87yvBycOTsAKM/uHzv4eg4gIzBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBP1AQYYwj1v+bZGn3p5WSvkr/TuMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvRV9VQkJoakNQV181dGthZmVubFpLLVN2OU80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSmyMA0G
CSqGSIb3DQEBCwUAA4IBAQARaVhFLnz55mTm11qdX2j3ueYCgREdSmICti9IcQTr
JHbD5hnyQwBcNMxQmy1ChvmdlbjXgtjVyj/++2nd+gohrUxIC8DZjZh8EN/tbKnb
B15x/93V0Ze2KYOsGwkVece3ubfu1J8xL28poA+iqeM965pPD8SScnVA4BGq4qoa
Bu9z9nPprepyZVLiNJ9zJ5VxbLrWtRUY+lnMoYxqAqZ95ykN4zkt6dlkX1jcKxMV
QKXeaT6s3HBVROTOqMDs7mBEv/VpPGoobVCbOw2be1kI/OTdhy+biPxBGU+QcyRL
HHGUC+GcllWwhaqtXr5ZrTyZ8/Xj4/UFN1rPtFP98wQN
-----END CERTIFICATE-----
Generated at Mon Jan 1 02:54:12 2024 by rpki-client on console-ams.rpki-client.org