Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/VCXD4wYk30bIEkBEc5FoDbOVJhc.roa
File: VCXD4wYk30bIEkBEc5FoDbOVJhc.roa (raw, json)
Hash identifier: 1omX40NSTtTvsvBbVa2D7rAgWM3AH5tqHODuWrj/mhM=
Subject key identifier: 54:25:C3:E3:06:24:DF:46:C8:12:40:44:73:91:68:0D:B3:95:26:17
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018CE919A39AC172224BB53CBA7192E978CE
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/VCXD4wYk30bIEkBEc5FoDbOVJhc.roa
Signing time: Mon 08 Jan 2024 12:43:40 +0000
ROA not before: Mon 08 Jan 2024 12:43:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5065
IP address blocks: 89.47.121.0/24 maxlen: 24
89.34.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 24 Feb 2024 06:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e9:19:a3:9a:c1:72:22:4b:b5:3c:ba:71:92:e9:78:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 8 12:43:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5425c3e30624df46c81240447391680db3952617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:2e:8b:1b:0d:a4:46:1f:51:cb:d8:ed:eb:e2:
9d:85:2e:f6:79:76:7c:ab:3f:d2:68:2b:98:9a:37:
97:22:6c:f4:81:57:fb:c3:e2:ce:50:cc:f7:de:bf:
4a:6b:b1:d8:5d:26:ba:82:4a:4f:da:80:db:1e:99:
13:e1:3e:bb:53:37:fa:61:61:44:b8:5e:df:d3:1b:
23:f4:09:d7:a2:b6:6d:3e:56:54:17:43:2a:ff:74:
37:9b:5e:16:c3:05:e1:7e:76:3a:d8:bd:7d:f2:ca:
12:5e:8d:96:6c:19:41:04:d5:55:e4:a2:23:84:a4:
29:49:8c:39:83:49:58:55:55:9a:02:c9:3b:b5:ad:
e8:ef:b8:ef:5f:26:3c:30:72:b3:39:6a:b4:e5:a3:
e8:91:c2:7c:02:26:5e:af:d7:1a:f9:fa:d9:79:b1:
f6:18:2f:7d:79:a3:b2:37:5c:99:f4:2e:33:66:64:
5c:8c:94:ab:49:a4:e0:ae:95:65:b7:23:3e:65:06:
dc:8d:f6:1d:8c:db:8a:ea:0d:10:07:d0:ba:46:d3:
ea:a5:03:ed:3c:8e:0d:bc:d1:4e:7e:21:0a:8e:da:
61:c0:24:e7:cb:a4:f9:79:09:80:d4:f7:0a:51:bd:
c1:f0:39:1f:b6:58:70:a3:fb:c3:f2:ab:ba:08:b3:
5d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:25:C3:E3:06:24:DF:46:C8:12:40:44:73:91:68:0D:B3:95:26:17
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/VCXD4wYk30bIEkBEc5FoDbOVJhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.229.0/24
89.47.121.0/24
Signature Algorithm: sha256WithRSAEncryption
59:e9:4c:28:e2:f1:96:57:79:83:0d:d2:fc:53:0f:cb:60:3e:
a9:01:36:b6:95:c2:bb:0e:46:6d:e5:a7:9b:81:ae:93:9b:29:
55:e8:c5:29:4e:38:c7:2d:2a:4e:bb:a2:ae:46:78:b2:08:5a:
02:16:26:e5:dd:84:de:12:cb:3c:f8:2e:f9:77:d2:3d:4d:29:
b3:cb:3d:66:59:69:6a:f9:3a:cf:5d:9e:12:58:66:c2:e7:d5:
38:17:4f:6c:bd:25:89:72:0e:36:6f:ad:b3:86:eb:9d:1d:02:
4f:f8:d4:eb:0f:4f:8f:b3:11:4c:75:ef:d8:94:a1:07:cb:ec:
c2:e3:cc:a2:55:0c:4b:67:fc:e8:28:e3:cc:3e:2d:50:42:a2:
c1:c3:ff:1a:77:cd:57:b9:2f:31:d1:7f:ad:95:35:02:09:26:
c7:ec:37:19:39:39:23:a9:a9:b4:14:b5:be:9b:b8:89:2a:ac:
d9:a8:b4:ea:2d:4c:76:b6:23:6e:e9:4b:f4:24:4b:54:0a:3e:
22:c4:4d:26:50:b3:cd:2a:2d:c7:0c:06:31:f6:7e:d3:6c:d9:
27:e1:98:7d:40:8d:cc:8e:f3:7d:79:2c:ce:35:fb:14:24:6c:
ef:8f:b1:22:d1:ff:06:87:b0:c3:7c:c1:d6:6e:51:c4:c8:0c:
05:56:f3:fb
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzpGaOawXIiS7U8unGS6XjOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjQwMTA4MTI0MzQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDI1YzNlMzA2MjRkZjQ2YzgxMjQwNDQ3MzkxNjgwZGIzOTUyNjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhS6LGw2kRh9Ry9jt6+KdhS72eXZ8
qz/SaCuYmjeXImz0gVf7w+LOUMz33r9Ka7HYXSa6gkpP2oDbHpkT4T67Uzf6YWFE
uF7f0xsj9AnXorZtPlZUF0Mq/3Q3m14WwwXhfnY62L198soSXo2WbBlBBNVV5KIj
hKQpSYw5g0lYVVWaAsk7ta3o77jvXyY8MHKzOWq05aPokcJ8AiZer9ca+frZebH2
GC99eaOyN1yZ9C4zZmRcjJSrSaTgrpVltyM+ZQbcjfYdjNuK6g0QB9C6RtPqpQPt
PI4NvNFOfiEKjtphwCTny6T5eQmA1PcKUb3B8Dkftlhwo/vD8qu6CLNdFQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFQlw+MGJN9GyBJARHORaA2zlSYXMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvVkNYRDR3WWszMGJJRWtCRWM1Rm9EYk9WSmhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWSLlAwQA
WS95MA0GCSqGSIb3DQEBCwUAA4IBAQBZ6Uwo4vGWV3mDDdL8Uw/LYD6pATa2lcK7
DkZt5aebga6TmylV6MUpTjjHLSpOu6KuRniyCFoCFibl3YTeEss8+C75d9I9TSmz
yz1mWWlq+TrPXZ4SWGbC59U4F09svSWJcg42b62zhuudHQJP+NTrD0+PsxFMde/Y
lKEHy+zC48yiVQxLZ/zoKOPMPi1QQqLBw/8ad81XuS8x0X+tlTUCCSbH7DcZOTkj
qam0FLW+m7iJKqzZqLTqLUx2tiNu6Uv0JEtUCj4ixE0mULPNKi3HDAYx9n7TbNkn
4Zh9QI3MjvN9eSzONfsUJGzvj7Ei0f8Gh7DDfMHWblHEyAwFVvP7
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:19 2024 by rpki-client on console-fra.rpki-client.org