Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/esiSaMX-r45GG3zjA8plr564agI.roa
File: esiSaMX-r45GG3zjA8plr564agI.roa (raw, json)
Hash identifier: /UqOfgZxx7IqJyHvGGtV55OpuevUgkj6nYMmH8pSAL8=
Subject key identifier: 7A:C8:92:68:C5:FE:AF:8E:46:1B:7C:E3:03:CA:65:AF:9E:B8:6A:02
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018AD6EE2A4DD27553C26ED93DBAD48A5624
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/esiSaMX-r45GG3zjA8plr564agI.roa
Signing time: Wed 27 Sep 2023 13:57:27 +0000
ROA not before: Wed 27 Sep 2023 13:57:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.42.82.0/23 maxlen: 23
89.42.80.0/23 maxlen: 23
93.119.105.0/24 maxlen: 24
89.46.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Sep 2023 08:40:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d6:ee:2a:4d:d2:75:53:c2:6e:d9:3d:ba:d4:8a:56:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Sep 27 13:57:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ac89268c5feaf8e461b7ce303ca65af9eb86a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:75:df:3f:b0:a8:70:e0:a2:4e:d3:1c:cf:ea:
98:3b:31:5c:f1:24:1e:45:9e:33:8e:d3:b3:a2:7c:
d6:1a:d5:24:89:42:39:e3:ca:02:ec:04:1d:92:27:
3f:c0:17:84:22:a8:01:07:06:6c:be:bb:44:be:88:
70:a3:ca:d7:9a:2f:c6:6e:d9:b9:67:38:74:df:4a:
e6:6a:1a:b4:59:3b:47:c2:f1:10:6b:89:c2:78:66:
7e:58:0e:9b:fa:07:66:6e:f1:21:20:b7:5c:f0:76:
fb:18:a6:09:c7:c9:fc:6a:9f:14:28:99:86:2b:9e:
37:c0:6c:16:c4:7d:60:ab:55:a0:df:f1:21:02:c6:
d4:a2:0b:b0:9a:fb:5a:2c:ae:a3:24:f8:50:e0:aa:
62:e3:e9:e6:b3:45:fc:99:7b:ab:72:b5:bf:c0:b2:
43:36:86:6e:67:8e:e9:af:76:18:e0:98:ff:d5:0c:
b7:9a:10:cf:66:14:dc:12:6a:c8:1b:ca:67:dd:f2:
a4:16:75:82:3b:e1:04:ae:1b:52:42:15:2b:d1:e6:
f3:f2:ad:d6:3c:5d:e8:38:5b:a8:31:29:e9:d0:de:
d6:a6:3d:20:ee:50:ce:94:5e:d7:36:13:13:dd:92:
86:b1:b1:97:b6:7d:a7:1b:40:9e:c7:22:d8:39:a7:
6b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C8:92:68:C5:FE:AF:8E:46:1B:7C:E3:03:CA:65:AF:9E:B8:6A:02
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/esiSaMX-r45GG3zjA8plr564agI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.80.0/22
89.46.4.0/24
93.119.105.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:f0:d4:fa:67:1c:e4:9b:2c:c7:a8:9d:70:35:f2:44:a6:72:
4d:3c:31:42:9d:61:56:bc:60:0d:25:62:c7:a5:e7:51:e0:57:
04:17:ac:d3:17:fc:19:e1:45:82:62:db:d7:ab:f2:b8:42:f8:
25:72:a3:31:65:8d:fe:1d:78:2e:0e:6a:cc:63:39:05:1a:2f:
76:f0:24:28:8f:38:76:27:0d:06:d9:7c:a2:66:84:90:3b:18:
85:44:c3:fc:1b:e3:58:11:a1:f1:4c:b3:20:81:e8:08:9d:a3:
76:4b:c3:56:05:02:43:93:58:d8:6d:85:a6:be:80:f3:56:4b:
34:f6:07:f1:6d:d7:b7:d8:33:80:50:7c:53:1d:57:8c:c8:bc:
18:df:d1:d0:ef:ba:fa:e8:b1:78:52:b7:71:3b:cc:7d:d1:80:
a2:c0:36:20:a1:e8:53:da:77:47:fd:82:57:b7:f1:cf:51:d3:
88:30:5f:96:9f:84:ec:23:4c:6c:09:19:a8:aa:53:76:46:43:
06:ef:60:d8:c1:3d:36:a5:27:95:08:d8:96:44:87:00:b1:84:
b3:f6:49:d5:45:f0:35:73:a1:dd:49:14:bd:bb:5a:6a:cb:d7:
e8:8e:df:27:9a:99:40:5c:8c:d3:03:8b:fc:70:35:8e:80:38:
66:ec:e0:3c
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYrW7ipN0nVTwm7ZPbrUilYkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjMwOTI3MTM1NzI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YWM4OTI2OGM1ZmVhZjhlNDYxYjdjZTMwM2NhNjVhZjllYjg2YTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnXfP7CocOCiTtMcz+qYOzFc8SQe
RZ4zjtOzonzWGtUkiUI548oC7AQdkic/wBeEIqgBBwZsvrtEvohwo8rXmi/Gbtm5
Zzh030rmahq0WTtHwvEQa4nCeGZ+WA6b+gdmbvEhILdc8Hb7GKYJx8n8ap8UKJmG
K543wGwWxH1gq1Wg3/EhAsbUoguwmvtaLK6jJPhQ4Kpi4+nms0X8mXurcrW/wLJD
NoZuZ47pr3YY4Jj/1Qy3mhDPZhTcEmrIG8pn3fKkFnWCO+EErhtSQhUr0ebz8q3W
PF3oOFuoMSnp0N7Wpj0g7lDOlF7XNhMT3ZKGsbGXtn2nG0CexyLYOadrywIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHrIkmjF/q+ORht84wPKZa+euGoCMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvZXNpU2FNWC1yNDVHRzN6akE4cGxyNTY0YWdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCWSpQAwQA
WS4EAwQAXXdpMA0GCSqGSIb3DQEBCwUAA4IBAQAP8NT6ZxzkmyzHqJ1wNfJEpnJN
PDFCnWFWvGANJWLHpedR4FcEF6zTF/wZ4UWCYtvXq/K4QvglcqMxZY3+HXguDmrM
YzkFGi928CQojzh2Jw0G2XyiZoSQOxiFRMP8G+NYEaHxTLMggegInaN2S8NWBQJD
k1jYbYWmvoDzVks09gfxbde32DOAUHxTHVeMyLwY39HQ77r66LF4UrdxO8x90YCi
wDYgoehT2ndH/YJXt/HPUdOIMF+Wn4TsI0xsCRmoqlN2RkMG72DYwT02pSeVCNiW
RIcAsYSz9knVRfA1c6HdSRS9u1pqy9fojt8nmplAXIzTA4v8cDWOgDhm7OA8
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:50 2024 by rpki-client on console-ams.rpki-client.org