Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/NZp7ztNHoYaK8dqTnL7Fx83PZEc.roa
File: NZp7ztNHoYaK8dqTnL7Fx83PZEc.roa (raw, json)
Hash identifier: DCgA5Xk3QTcqp0UYVweTG2wPUNE4ocX0Cxcxjo5etb8=
Subject key identifier: 35:9A:7B:CE:D3:47:A1:86:8A:F1:DA:93:9C:BE:C5:C7:CD:CF:64:47
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018D25EF3B2F0C638D462E083E98985C24B2
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/NZp7ztNHoYaK8dqTnL7Fx83PZEc.roa
Signing time: Sat 20 Jan 2024 08:14:11 +0000
ROA not before: Sat 20 Jan 2024 08:14:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 89.37.196.0/24 maxlen: 24
89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
89.42.86.0/24 maxlen: 24
89.46.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 20 Jan 2024 15:31:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:25:ef:3b:2f:0c:63:8d:46:2e:08:3e:98:98:5c:24:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 20 08:14:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=359a7bced347a1868af1da939cbec5c7cdcf6447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0c:2b:8e:82:92:31:14:cc:9d:89:dc:cb:a7:
a1:d2:a2:c0:a8:d0:04:7a:88:7a:f4:fe:49:60:5e:
7e:5b:a9:06:c3:7c:fb:e8:0c:20:57:04:56:6e:e8:
87:a9:b1:c9:c8:2b:0a:3d:a7:91:1c:9f:0c:0f:63:
07:3e:c0:d2:5b:2b:e9:57:f0:ac:f6:80:b8:c0:85:
47:f1:c6:a7:7d:8e:10:e2:dd:15:18:56:76:10:e7:
99:62:e2:6d:b1:ed:bf:50:71:33:85:2e:3c:51:26:
61:83:62:09:60:16:d9:aa:77:a3:ee:c8:0d:ae:bb:
12:a1:cc:4a:64:d8:f3:ba:4f:65:79:e7:f7:91:d8:
06:66:b0:1f:1c:f1:61:27:5f:8f:e0:7c:69:4c:22:
11:fe:2b:40:f3:d1:c5:9e:af:3d:3a:e4:d9:85:29:
df:95:df:e9:7c:75:1b:9f:db:f2:9c:26:7c:fa:12:
e2:93:c8:e3:3c:5e:5b:65:5a:f2:8a:b8:2e:40:77:
b2:67:36:00:cd:07:fd:14:96:0b:7a:47:d0:4f:2c:
0c:a6:9b:8d:ac:30:80:cf:35:03:22:ac:eb:40:48:
4f:e3:fb:56:d7:9f:f1:03:08:b2:5c:bd:98:90:35:
a8:e9:d2:23:2f:d5:72:b2:fc:b0:09:e5:43:1a:b1:
61:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:9A:7B:CE:D3:47:A1:86:8A:F1:DA:93:9C:BE:C5:C7:CD:CF:64:47
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/NZp7ztNHoYaK8dqTnL7Fx83PZEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.196.0/24
89.42.81.0-89.42.83.255
89.42.86.0/24
89.46.3.0/24
Signature Algorithm: sha256WithRSAEncryption
78:1f:53:c6:8e:13:1f:72:f7:e4:80:76:9c:a0:fb:91:07:a5:
2a:b1:5a:3a:bc:cb:88:ed:a7:79:a1:f6:0a:8d:4d:61:1f:99:
40:6d:ed:4e:ae:d7:cb:86:41:b2:2c:b7:d5:d3:04:f6:05:15:
25:c3:4d:0b:35:7e:4a:3e:32:57:c4:9a:c1:d8:ba:65:d3:45:
60:fc:3c:dc:e4:50:ba:5f:bc:37:92:9d:60:a6:e4:ba:fe:cc:
e9:3e:3d:44:c1:82:c7:2c:23:43:fb:75:65:d2:da:7d:f9:71:
df:fd:04:f9:49:e2:f0:31:b2:4b:12:0a:62:77:eb:3a:f7:97:
f3:20:69:49:47:f5:b5:58:42:42:8a:1a:3f:09:51:ff:3c:e6:
92:10:2f:74:1a:34:54:1d:e2:be:eb:ed:74:40:b5:83:1f:77:
f6:93:69:34:d7:6b:cf:79:ef:a1:4c:fd:ae:00:55:a1:91:55:
32:e9:53:7f:e4:66:c4:24:5a:11:4d:92:ef:59:83:84:e2:aa:
9a:fa:49:16:d3:61:c4:59:3f:6b:a6:f7:58:94:a9:7b:84:02:
a2:40:7f:54:80:1e:0c:f3:c4:b4:2a:cd:0b:0c:bd:8a:7a:24:
1f:4e:69:52:75:ab:f2:a2:89:7b:38:2c:dd:7a:70:17:ae:59:
1e:3a:c7:0d
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAY0l7zsvDGONRi4IPpiYXCSyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjQwMTIwMDgxNDExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTlhN2JjZWQzNDdhMTg2OGFmMWRhOTM5Y2JlYzVjN2NkY2Y2NDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wwrjoKSMRTMnYncy6eh0qLAqNAE
eoh69P5JYF5+W6kGw3z76AwgVwRWbuiHqbHJyCsKPaeRHJ8MD2MHPsDSWyvpV/Cs
9oC4wIVH8canfY4Q4t0VGFZ2EOeZYuJtse2/UHEzhS48USZhg2IJYBbZqnej7sgN
rrsSocxKZNjzuk9leef3kdgGZrAfHPFhJ1+P4HxpTCIR/itA89HFnq89OuTZhSnf
ld/pfHUbn9vynCZ8+hLik8jjPF5bZVryirguQHeyZzYAzQf9FJYLekfQTywMppuN
rDCAzzUDIqzrQEhP4/tW15/xAwiyXL2YkDWo6dIjL9VysvywCeVDGrFhQwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFDWae87TR6GGivHak5y+xcfNz2RHMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvTlpwN3p0TkhvWWFLOGRxVG5MN0Z4ODNQWkVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAWSXEMAwD
BABZKlEDBAJZKlADBABZKlYDBABZLgMwDQYJKoZIhvcNAQELBQADggEBAHgfU8aO
Ex9y9+SAdpyg+5EHpSqxWjq8y4jtp3mh9gqNTWEfmUBt7U6u18uGQbIst9XTBPYF
FSXDTQs1fko+MlfEmsHYumXTRWD8PNzkULpfvDeSnWCm5Lr+zOk+PUTBgscsI0P7
dWXS2n35cd/9BPlJ4vAxsksSCmJ36zr3l/MgaUlH9bVYQkKKGj8JUf885pIQL3Qa
NFQd4r7r7XRAtYMfd/aTaTTXa89576FM/a4AVaGRVTLpU3/kZsQkWhFNku9Zg4Ti
qpr6SRbTYcRZP2um91iUqXuEAqJAf1SAHgzzxLQqzQsMvYp6JB9OaVJ1q/KiiXs4
LN16cBeuWR46xw0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:19 2024 by rpki-client on console-fra.rpki-client.org