Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Odx7hJqDw-OiPXeJYTwUDsgbN7E.roa
File: Odx7hJqDw-OiPXeJYTwUDsgbN7E.roa (raw, json)
Hash identifier: j9H0AwTawRB1ebBd+GOV4DMEUqWE4PuoI5YuJ1fzKs4=
Subject key identifier: 39:DC:7B:84:9A:83:C3:E3:A2:3D:77:89:61:3C:14:0E:C8:1B:37:B1
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018CC26D1E8AD23A61B2129D85E3D595B08B
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Odx7hJqDw-OiPXeJYTwUDsgbN7E.roa
Signing time: Mon 01 Jan 2024 00:29:40 +0000
ROA not before: Mon 01 Jan 2024 00:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 89.42.87.0/24 maxlen: 24
93.119.106.0/24 maxlen: 24
93.113.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 06:46:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:1e:8a:d2:3a:61:b2:12:9d:85:e3:d5:95:b0:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 00:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39dc7b849a83c3e3a23d7789613c140ec81b37b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7b:0c:53:bd:42:48:4d:65:f4:85:02:fa:8b:
10:0f:25:13:fa:47:cc:c7:b8:da:41:2b:c5:b9:ad:
79:21:e2:92:82:db:bc:6c:1e:df:45:c5:7f:22:dd:
c1:bd:10:fd:bd:2a:96:4c:66:08:9c:c4:30:c8:dc:
ac:69:d3:4f:7f:79:b2:ee:83:b1:96:fc:c0:3b:7a:
05:7e:8c:42:f1:73:05:27:b6:8d:df:81:9e:34:20:
9a:61:68:15:54:8b:de:77:47:96:0c:bc:62:e4:1a:
96:e4:fa:fc:30:f9:d0:4f:ab:7f:63:3b:cc:eb:93:
c5:61:28:36:34:83:4f:c0:7e:36:e7:4f:a4:77:7b:
98:69:78:fc:c2:88:26:2c:61:65:31:d7:00:02:76:
43:e6:fa:1c:b9:73:93:b4:db:ff:7a:15:cd:3e:f0:
4d:28:8a:9c:d1:b9:85:36:bb:22:15:b1:67:35:3a:
ba:35:e9:d9:cc:6c:58:37:51:50:1c:0c:dd:fb:cb:
be:c2:00:d9:c6:da:1a:6f:fe:61:5a:87:4b:75:47:
8c:bc:4c:b4:0d:a6:85:91:fc:01:ef:c2:96:a6:69:
d9:49:5d:26:2d:cf:32:be:20:a7:ce:2f:5b:33:0a:
9e:16:cf:e4:f9:04:2f:a8:94:ef:6b:ea:69:e4:6e:
6b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:DC:7B:84:9A:83:C3:E3:A2:3D:77:89:61:3C:14:0E:C8:1B:37:B1
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Odx7hJqDw-OiPXeJYTwUDsgbN7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.87.0/24
93.113.183.0/24
93.119.106.0/24
Signature Algorithm: sha256WithRSAEncryption
44:12:ba:8a:06:d5:bd:11:a0:ad:02:3e:e5:9b:ce:11:d7:4b:
6a:79:30:35:46:db:ac:cf:d2:ff:bc:f1:e3:87:10:d5:c2:2b:
6a:d9:1f:f4:4f:95:0b:dc:df:d0:4d:a7:a7:1e:7e:f4:ce:03:
96:db:1d:69:9b:ee:ea:5b:04:a5:3a:63:79:7e:71:37:dd:9b:
c5:3f:8c:f8:4d:85:12:65:38:1a:43:76:5d:65:2d:ee:c7:c2:
3d:be:01:2c:e4:cb:ec:42:ec:34:dc:99:e2:7c:39:b7:3e:fc:
3e:31:e8:8e:98:95:90:b2:39:77:26:cf:67:c6:d4:d3:0a:65:
74:3c:66:01:bc:06:ac:1b:62:37:d7:63:d9:ba:32:f2:e4:66:
85:7d:a4:e8:c8:d2:77:a7:b5:7d:81:a2:2d:ac:f8:54:75:eb:
d3:a5:4b:e3:fb:f6:4b:db:20:3f:82:8f:2c:16:92:a3:04:0d:
2a:dc:08:cb:35:d0:af:71:6a:16:3a:b9:ab:aa:a8:ea:44:e0:
a7:b2:d4:cf:d4:88:32:06:b1:ec:3c:46:ec:ef:fe:61:9a:44:
7e:f4:c5:53:81:81:ef:9f:e8:cf:74:40:e9:74:cc:ea:cb:33:
30:47:55:49:f2:7e:ae:b5:95:8e:5d:dd:f7:e6:67:5b:c4:f8:
0a:7c:7d:6c
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzCbR6K0jphshKdhePVlbCLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjQwMTAxMDAyOTQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOWRjN2I4NDlhODNjM2UzYTIzZDc3ODk2MTNjMTQwZWM4MWIzN2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3sMU71CSE1l9IUC+osQDyUT+kfM
x7jaQSvFua15IeKSgtu8bB7fRcV/It3BvRD9vSqWTGYInMQwyNysadNPf3my7oOx
lvzAO3oFfoxC8XMFJ7aN34GeNCCaYWgVVIved0eWDLxi5BqW5Pr8MPnQT6t/YzvM
65PFYSg2NINPwH4250+kd3uYaXj8wogmLGFlMdcAAnZD5vocuXOTtNv/ehXNPvBN
KIqc0bmFNrsiFbFnNTq6NenZzGxYN1FQHAzd+8u+wgDZxtoab/5hWodLdUeMvEy0
DaaFkfwB78KWpmnZSV0mLc8yviCnzi9bMwqeFs/k+QQvqJTva+pp5G5rbQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFDnce4Sag8Pjoj13iWE8FA7IGzexMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvT2R4N2hKcUR3LU9pUFhlSllUd1VEc2diTjdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWSpXAwQA
XXG3AwQAXXdqMA0GCSqGSIb3DQEBCwUAA4IBAQBEErqKBtW9EaCtAj7lm84R10tq
eTA1Rtusz9L/vPHjhxDVwitq2R/0T5UL3N/QTaenHn70zgOW2x1pm+7qWwSlOmN5
fnE33ZvFP4z4TYUSZTgaQ3ZdZS3ux8I9vgEs5MvsQuw03JnifDm3Pvw+MeiOmJWQ
sjl3Js9nxtTTCmV0PGYBvAasG2I312PZujLy5GaFfaToyNJ3p7V9gaItrPhUdevT
pUvj+/ZL2yA/go8sFpKjBA0q3AjLNdCvcWoWOrmrqqjqROCnstTP1IgyBrHsPEbs
7/5hmkR+9MVTgYHvn+jPdEDpdMzqyzMwR1VJ8n6utZWOXd335mdbxPgKfH1s
-----END CERTIFICATE-----
Generated at Fri Feb 23 10:45:48 2024 by rpki-client on console-fra.rpki-client.org