Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/_SpXJQ7U8MG5ntNhv7dqZMf4nkk.roa
File: _SpXJQ7U8MG5ntNhv7dqZMf4nkk.roa (raw, json)
Hash identifier: T/RaZFCzZ0VRNfufrMJHahnzwcbNyuqLlSKc+s2sv+Y=
Subject key identifier: FD:2A:57:25:0E:D4:F0:C1:B9:9E:D3:61:BF:B7:6A:64:C7:F8:9E:49
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018FB0718C411093757D85321BAA616995E4
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/_SpXJQ7U8MG5ntNhv7dqZMf4nkk.roa
Signing time: Sat 25 May 2024 15:49:42 +0000
ROA not before: Sat 25 May 2024 15:49:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
93.113.182.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 26 May 2024 16:33:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b0:71:8c:41:10:93:75:7d:85:32:1b:aa:61:69:95:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: May 25 15:49:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd2a57250ed4f0c1b99ed361bfb76a64c7f89e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:84:82:97:a1:3a:7e:05:43:39:91:38:40:81:
02:fd:a2:3a:ce:ce:cf:da:52:7f:ba:a0:7f:79:b0:
9c:35:13:23:2f:6c:63:c1:6d:30:14:3a:c1:93:24:
d8:ba:a9:74:55:a4:b9:75:de:4c:77:77:8a:e3:90:
8d:a6:01:3f:e6:76:20:0c:d8:00:c4:7c:40:aa:cc:
c3:f3:3c:e8:ad:14:ec:df:06:16:fb:f5:da:a9:36:
9d:b4:de:c1:b1:78:29:55:69:d4:a7:eb:ec:78:db:
06:6a:fb:09:1e:2f:d2:26:a6:ab:35:dd:1b:7b:fe:
c7:5c:a1:d0:ae:42:38:47:97:e9:03:7f:72:0c:a2:
12:32:11:34:e8:dd:ac:be:54:32:06:d3:84:4b:9a:
fb:ca:45:61:89:73:16:0b:96:6a:95:54:02:01:49:
b4:9e:7f:7e:ed:3a:3b:e5:fc:2c:89:f9:7d:8b:a8:
ce:18:05:44:59:75:6f:70:98:21:c2:a2:77:6c:f2:
d6:ca:39:33:21:72:54:7a:a4:a6:d2:fe:a0:bb:ac:
93:83:c6:44:b7:e8:98:3c:8a:8f:6a:9b:2b:93:6f:
c0:84:de:fd:83:76:0e:81:a9:46:ce:d7:a2:a2:05:
66:27:19:d8:bd:e2:82:a4:dc:ec:63:38:4d:2d:ac:
28:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:2A:57:25:0E:D4:F0:C1:B9:9E:D3:61:BF:B7:6A:64:C7:F8:9E:49
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/_SpXJQ7U8MG5ntNhv7dqZMf4nkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.81.0-89.42.83.255
93.113.182.0/24
Signature Algorithm: sha256WithRSAEncryption
57:5c:9c:34:e1:33:74:45:0c:91:f8:f3:e9:f0:c1:1b:96:73:
11:98:88:14:25:7a:b0:e7:f3:f4:c3:7b:8b:40:cd:2b:10:38:
76:bc:f4:5f:b9:1c:e3:7f:dd:42:c2:74:a0:10:04:ff:5a:d6:
0e:4a:42:bf:84:61:fa:06:84:fe:76:bc:b4:c3:39:70:06:87:
4c:49:ff:59:f5:87:2d:e1:86:97:96:5c:d4:0f:bb:57:56:b7:
08:e5:10:4d:bc:01:ba:e5:f6:4a:ac:e4:e8:f5:9c:b9:f8:9b:
bf:58:19:d8:48:75:94:7d:31:a4:8a:99:5e:a6:9d:8e:1e:61:
89:a9:bd:8c:3b:fd:d5:72:e3:e6:01:c0:89:ff:dd:83:7f:69:
e8:e0:93:7e:07:f1:62:d0:e0:97:ef:09:71:1a:1b:34:38:4c:
c9:a1:0b:8c:47:35:28:b3:6f:46:73:4c:e5:52:94:9d:e4:87:
15:ca:7e:05:0e:24:4a:0c:d4:0e:d9:b9:63:99:69:25:29:68:
f4:23:01:36:d8:ce:ca:d2:af:0e:6c:57:3b:26:fd:c4:46:0b:
1e:36:75:bb:34:53:af:ac:03:0c:e6:aa:d7:ed:af:ca:28:e4:
95:f2:c3:c3:42:69:0a:5d:d7:be:b6:55:04:6b:2a:22:5c:91:
5b:71:a2:8d
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAY+wcYxBEJN1fYUyG6phaZXkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjQwNTI1MTU0OTQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDJhNTcyNTBlZDRmMGMxYjk5ZWQzNjFiZmI3NmE2NGM3Zjg5ZTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuISCl6E6fgVDOZE4QIEC/aI6zs7P
2lJ/uqB/ebCcNRMjL2xjwW0wFDrBkyTYuql0VaS5dd5Md3eK45CNpgE/5nYgDNgA
xHxAqszD8zzorRTs3wYW+/XaqTadtN7BsXgpVWnUp+vseNsGavsJHi/SJqarNd0b
e/7HXKHQrkI4R5fpA39yDKISMhE06N2svlQyBtOES5r7ykVhiXMWC5ZqlVQCAUm0
nn9+7To75fwsifl9i6jOGAVEWXVvcJghwqJ3bPLWyjkzIXJUeqSm0v6gu6yTg8ZE
t+iYPIqPapsrk2/AhN79g3YOgalGzteiogVmJxnYveKCpNzsYzhNLawokQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFP0qVyUO1PDBuZ7TYb+3amTH+J5JMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvX1NwWEpRN1U4TUc1bnROaHY3ZHFaTWY0bmtrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBABZKlED
BAJZKlADBABdcbYwDQYJKoZIhvcNAQELBQADggEBAFdcnDThM3RFDJH48+nwwRuW
cxGYiBQlerDn8/TDe4tAzSsQOHa89F+5HON/3ULCdKAQBP9a1g5KQr+EYfoGhP52
vLTDOXAGh0xJ/1n1hy3hhpeWXNQPu1dWtwjlEE28Abrl9kqs5Oj1nLn4m79YGdhI
dZR9MaSKmV6mnY4eYYmpvYw7/dVy4+YBwIn/3YN/aejgk34H8WLQ4JfvCXEaGzQ4
TMmhC4xHNSizb0ZzTOVSlJ3khxXKfgUOJEoM1A7ZuWOZaSUpaPQjATbYzsrSrw5s
Vzsm/cRGCx42dbs0U6+sAwzmqtftr8oo5JXyw8NCaQpd1762VQRrKiJckVtxoo0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:19 2024 by rpki-client on console-fra.rpki-client.org