Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/TD4RQQbcUUKeXRiI1P4eCC2cgaQ.roa
File: TD4RQQbcUUKeXRiI1P4eCC2cgaQ.roa (raw, json)
Hash identifier: eR47yTxwUVU5iLyg5uTuMmwiOPUNFFjc4YbZrN1eFzE=
Subject key identifier: 4C:3E:11:41:06:DC:51:42:9E:5D:18:88:D4:FE:1E:08:2D:9C:81:A4
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018C0ABF596B15C1F755FD8F025ABB4EC94B
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/TD4RQQbcUUKeXRiI1P4eCC2cgaQ.roa
Signing time: Sun 26 Nov 2023 08:29:21 +0000
ROA not before: Sun 26 Nov 2023 08:29:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
89.42.80.0/23 maxlen: 23
89.42.94.0/24 maxlen: 24
89.34.227.0/24 maxlen: 24
93.113.183.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0a:bf:59:6b:15:c1:f7:55:fd:8f:02:5a:bb:4e:c9:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Nov 26 08:29:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c3e114106dc51429e5d1888d4fe1e082d9c81a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:9d:08:8e:a2:4a:c5:9a:8a:fe:71:e1:f4:c2:
1d:35:8f:28:37:a9:24:6d:dd:01:50:95:90:15:84:
2a:9c:45:64:8e:63:9e:b7:35:e0:11:01:67:7c:d2:
3a:a5:48:ba:3a:63:5a:31:8b:df:d0:4b:a1:9d:74:
66:92:b9:9f:ff:ca:7a:23:5a:64:59:8a:a4:56:8a:
cc:f8:c7:64:49:17:c7:b2:88:a2:61:01:01:68:b7:
5b:d2:82:18:bb:8a:b4:1a:d4:d4:f6:2e:63:46:36:
e1:47:b5:a0:f4:b4:4b:67:4b:da:ce:3f:3e:01:41:
a2:76:1a:28:66:62:64:78:31:a7:d3:56:d3:d0:c3:
5c:a6:f1:05:eb:f6:39:34:f1:e4:63:13:1a:3a:26:
85:52:90:f3:cf:9a:6d:f9:b0:ab:53:78:e5:93:5e:
1e:a0:53:b3:ba:f5:8a:f8:eb:f5:fe:32:2d:da:de:
36:e1:df:3f:d6:d7:5d:89:3c:7e:4a:87:8e:79:69:
3e:8f:40:da:23:01:f9:35:1c:e3:e1:a5:d2:f8:1a:
f9:fd:cb:71:7e:b9:ed:11:af:3a:73:97:f6:14:d4:
dc:ca:26:71:f2:ad:31:cd:e6:4b:cf:73:1c:e3:11:
8f:d6:ae:0e:b3:6d:f3:dc:b8:5c:dc:5e:8f:c4:47:
a5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:3E:11:41:06:DC:51:42:9E:5D:18:88:D4:FE:1E:08:2D:9C:81:A4
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/TD4RQQbcUUKeXRiI1P4eCC2cgaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.227.0/24
89.42.80.0/22
89.42.94.0/24
93.113.183.0/24
Signature Algorithm: sha256WithRSAEncryption
27:90:97:57:13:b5:fe:a0:5f:f1:4b:39:40:54:6f:6c:5f:f6:
cb:c2:f5:29:7a:42:bc:69:42:a4:6d:ff:42:e1:d3:f8:cc:27:
8c:d3:a7:8f:e4:ee:e8:0d:64:be:78:8c:a3:4e:dc:f7:72:1f:
66:a5:51:e0:2d:44:23:cc:33:c4:2e:72:de:9b:15:9c:8a:fc:
fd:ec:70:b2:92:f0:60:e3:75:04:57:3d:65:27:5e:4d:2d:f6:
67:d3:d1:3f:b7:33:c8:1e:aa:66:05:bd:0b:e1:82:15:ac:ab:
12:6a:2f:01:8a:5d:78:88:61:32:67:18:01:26:03:ec:33:98:
6c:93:9b:7e:bd:0b:79:6c:26:8f:28:8a:61:99:47:56:dd:56:
94:d1:1f:4c:cf:8a:d9:a0:a4:27:ae:dd:59:87:ef:a5:a2:63:
16:b8:77:f0:e7:26:6b:68:37:66:83:19:d8:36:7e:4c:b0:a9:
85:ad:da:24:0c:3d:2e:08:1d:8e:b2:43:32:33:2d:39:c9:32:
2f:94:64:7b:34:2b:c4:33:c2:5c:ad:b3:1a:12:9f:02:c6:fe:
10:51:8c:c5:5f:21:43:a6:9c:0f:0c:83:7c:b8:32:84:47:3b:
31:7b:ec:89:d1:94:55:2d:96:26:62:29:36:f0:be:2d:11:64:
29:68:18:ab
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYwKv1lrFcH3Vf2PAlq7TslLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjMxMTI2MDgyOTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzNlMTE0MTA2ZGM1MTQyOWU1ZDE4ODhkNGZlMWUwODJkOWM4MWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZ0IjqJKxZqK/nHh9MIdNY8oN6kk
bd0BUJWQFYQqnEVkjmOetzXgEQFnfNI6pUi6OmNaMYvf0EuhnXRmkrmf/8p6I1pk
WYqkVorM+MdkSRfHsoiiYQEBaLdb0oIYu4q0GtTU9i5jRjbhR7Wg9LRLZ0vazj8+
AUGidhooZmJkeDGn01bT0MNcpvEF6/Y5NPHkYxMaOiaFUpDzz5pt+bCrU3jlk14e
oFOzuvWK+Ov1/jIt2t424d8/1tddiTx+SoeOeWk+j0DaIwH5NRzj4aXS+Br5/ctx
frntEa86c5f2FNTcyiZx8q0xzeZLz3Mc4xGP1q4Os23z3Lhc3F6PxEelrQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFEw+EUEG3FFCnl0YiNT+HggtnIGkMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvVEQ0UlFRYmNVVUtlWFJpSTFQNGVDQzJjZ2FRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAWSLjAwQC
WSpQAwQAWSpeAwQAXXG3MA0GCSqGSIb3DQEBCwUAA4IBAQAnkJdXE7X+oF/xSzlA
VG9sX/bLwvUpekK8aUKkbf9C4dP4zCeM06eP5O7oDWS+eIyjTtz3ch9mpVHgLUQj
zDPELnLemxWcivz97HCykvBg43UEVz1lJ15NLfZn09E/tzPIHqpmBb0L4YIVrKsS
ai8Bil14iGEyZxgBJgPsM5hsk5t+vQt5bCaPKIphmUdW3VaU0R9Mz4rZoKQnrt1Z
h++lomMWuHfw5yZraDdmgxnYNn5MsKmFrdokDD0uCB2OskMyMy05yTIvlGR7NCvE
M8JcrbMaEp8Cxv4QUYzFXyFDppwPDIN8uDKERzsxe+yJ0ZRVLZYmYik28L4tEWQp
aBir
-----END CERTIFICATE-----
Generated at Sun Nov 26 09:28:23 2023 by rpki-client on console-fra.rpki-client.org