Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/ZfJG2iUWewSeHtBXCLMJd-CmyAY.roa
File: ZfJG2iUWewSeHtBXCLMJd-CmyAY.roa (raw, json)
Hash identifier: /5shU3xVQ9sulMr49a8gSTPm0AU26UzqbYgw5zPLYKc=
Subject key identifier: 65:F2:46:DA:25:16:7B:04:9E:1E:D0:57:08:B3:09:77:E0:A6:C8:06
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018B42DF947C557E694059534C8BEBFEB0FD
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/ZfJG2iUWewSeHtBXCLMJd-CmyAY.roa
Signing time: Wed 18 Oct 2023 13:00:30 +0000
ROA not before: Wed 18 Oct 2023 13:00:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213250
IP address blocks: 89.42.88.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:42:df:94:7c:55:7e:69:40:59:53:4c:8b:eb:fe:b0:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Oct 18 13:00:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65f246da25167b049e1ed05708b30977e0a6c806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b7:7a:63:6a:a2:f2:43:97:72:c5:68:7f:82:
97:7b:d6:23:86:61:09:b4:9e:41:3f:36:4a:dc:25:
eb:23:34:60:a0:85:6c:3f:00:17:41:39:c0:cb:fc:
b2:58:6c:7d:52:78:a2:03:8a:e3:ac:8d:7d:1b:57:
94:ec:82:79:8a:20:11:eb:d1:50:9b:e4:49:01:2e:
16:ea:09:ce:63:d9:2b:31:a4:96:dc:95:d9:10:67:
8c:c2:e6:0d:7c:ae:8e:d0:bb:b7:e5:04:0e:cd:06:
60:98:7a:a1:b8:ea:1a:28:7b:63:af:fc:a7:35:fe:
02:aa:c5:e2:0f:50:69:01:19:89:6c:36:f6:31:05:
cf:12:6e:b2:ec:6c:76:be:62:5d:dc:8c:6d:01:ad:
d1:86:ee:0e:42:33:70:d5:44:a6:a5:ce:ea:b5:e7:
54:18:c4:1c:b3:21:29:e4:53:10:9a:df:25:1f:a5:
df:0c:e0:57:90:a3:93:79:f7:73:ca:09:24:e0:07:
a8:bc:63:11:a3:40:29:72:67:6e:da:50:7b:8d:1b:
06:e6:08:18:b5:ed:1a:7d:56:94:15:9a:92:46:98:
cf:cf:5a:34:d7:b2:92:60:7e:9d:6d:ab:d5:ba:79:
bb:ed:d4:e4:fd:61:43:51:ab:ce:31:ea:d1:e0:3d:
6c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F2:46:DA:25:16:7B:04:9E:1E:D0:57:08:B3:09:77:E0:A6:C8:06
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/ZfJG2iUWewSeHtBXCLMJd-CmyAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.88.0/24
Signature Algorithm: sha256WithRSAEncryption
00:70:49:b3:de:41:7c:4c:3c:71:e0:52:02:97:cf:00:c0:f1:
f4:7b:3c:39:77:0e:f6:84:13:be:95:31:81:d5:02:96:d4:81:
7e:d4:4f:20:47:39:34:1a:14:f2:5c:4a:0c:b9:ab:59:20:41:
d1:79:ec:29:b6:cb:2d:55:9f:55:2d:8f:e2:69:2d:b0:18:7d:
fb:4f:4d:3d:70:6c:37:ef:1c:03:1a:14:e1:da:c8:0b:04:0e:
9b:dd:24:e2:76:e5:4c:d4:89:cc:98:95:70:8e:82:a1:2a:d1:
ac:30:d2:54:4d:a7:81:90:4d:b3:88:ed:fb:03:e0:3c:82:b7:
a3:3d:2b:67:f8:96:ee:3b:ba:20:f7:04:ba:37:9d:bf:08:4f:
4b:3f:d4:00:46:a3:cd:5f:a0:fb:db:a5:5f:b4:c9:a0:c5:30:
29:d2:ca:70:2e:4e:f1:f3:5b:bf:02:b6:0e:69:f8:12:23:3e:
6e:ad:e4:f7:fa:9e:18:08:34:57:03:b6:09:cc:35:5e:3a:7c:
1c:6e:bc:d7:e8:a9:d6:b0:34:4d:db:a7:5c:a2:e0:22:52:60:
d2:1b:7b:ad:bc:ad:6f:54:aa:5d:e2:c1:ac:0d:b5:2c:ec:fd:
a4:d7:d1:88:25:4e:49:e3:73:8a:ec:ce:40:5c:08:b7:c2:63:
ce:75:46:82
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYtC35R8VX5pQFlTTIvr/rD9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjMxMDE4MTMwMDMwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NWYyNDZkYTI1MTY3YjA0OWUxZWQwNTcwOGIzMDk3N2UwYTZjODA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbd6Y2qi8kOXcsVof4KXe9YjhmEJ
tJ5BPzZK3CXrIzRgoIVsPwAXQTnAy/yyWGx9UniiA4rjrI19G1eU7IJ5iiAR69FQ
m+RJAS4W6gnOY9krMaSW3JXZEGeMwuYNfK6O0Lu35QQOzQZgmHqhuOoaKHtjr/yn
Nf4CqsXiD1BpARmJbDb2MQXPEm6y7Gx2vmJd3IxtAa3Rhu4OQjNw1USmpc7qtedU
GMQcsyEp5FMQmt8lH6XfDOBXkKOTefdzygkk4AeovGMRo0Apcmdu2lB7jRsG5ggY
te0afVaUFZqSRpjPz1o017KSYH6dbavVunm77dTk/WFDUavOMerR4D1sUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGXyRtolFnsEnh7QVwizCXfgpsgGMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvWmZKRzJpVVdld1NlSHRCWENMTUpkLUNteUFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSpYMA0G
CSqGSIb3DQEBCwUAA4IBAQAAcEmz3kF8TDxx4FICl88AwPH0ezw5dw72hBO+lTGB
1QKW1IF+1E8gRzk0GhTyXEoMuatZIEHReewptsstVZ9VLY/iaS2wGH37T009cGw3
7xwDGhTh2sgLBA6b3STiduVM1InMmJVwjoKhKtGsMNJUTaeBkE2ziO37A+A8grej
PStn+JbuO7og9wS6N52/CE9LP9QARqPNX6D726VftMmgxTAp0spwLk7x81u/ArYO
afgSIz5ureT3+p4YCDRXA7YJzDVeOnwcbrzX6KnWsDRN26dcouAiUmDSG3utvK1v
VKpd4sGsDbUs7P2k19GIJU5J43OK7M5AXAi3wmPOdUaC
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:19 2024 by rpki-client on console-fra.rpki-client.org