Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/f-VUJI6thwAgJ9_j6eIwI_F96PA.roa
File: f-VUJI6thwAgJ9_j6eIwI_F96PA.roa (raw, json)
Hash identifier: FvF+mCWfZryzsZXGvgUVORdk4A7wSlOL9VbNfULWtRI=
Subject key identifier: 7F:E5:54:24:8E:AD:87:00:20:27:DF:E3:E9:E2:30:23:F1:7D:E8:F0
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018CE919A34B772F0B56CD959BC96378FD99
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/f-VUJI6thwAgJ9_j6eIwI_F96PA.roa
Signing time: Mon 08 Jan 2024 12:43:40 +0000
ROA not before: Mon 08 Jan 2024 12:43:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
89.37.196.0/24 maxlen: 24
89.34.230.0/24 maxlen: 24
89.46.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Jan 2024 16:11:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e9:19:a3:4b:77:2f:0b:56:cd:95:9b:c9:63:78:fd:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 8 12:43:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7fe554248ead87002027dfe3e9e23023f17de8f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:69:f2:09:c4:c6:77:53:7e:b0:33:79:e2:44:
ad:d9:09:8c:fc:0c:62:af:85:74:0c:72:a4:7e:c4:
0d:51:17:fc:30:66:2a:f2:d5:fb:60:e3:03:a2:9a:
b8:8e:14:74:52:56:42:c1:c4:d1:67:56:aa:33:28:
b6:ca:b2:61:24:7c:a0:3f:57:e8:8e:94:84:4e:de:
83:2c:f3:3a:52:dc:ce:bf:37:1f:70:4e:46:2f:ae:
70:d8:61:ea:31:10:ed:ee:43:fb:b5:19:ad:81:1e:
90:f7:c1:12:2d:41:e6:55:62:71:79:3e:fb:13:df:
0b:fe:a7:3c:71:bb:b0:42:65:e3:72:c8:ef:ef:06:
1c:35:d5:fd:f8:99:72:93:a6:06:76:28:07:20:fd:
f2:c0:60:45:77:19:fb:50:a7:31:d3:96:19:3a:31:
e3:30:b9:c5:ee:dd:b0:a8:b9:bf:e9:31:ba:d4:9f:
0e:4c:6d:86:af:f7:7f:99:f4:e4:4b:57:30:1c:2c:
b1:e0:1c:51:a6:90:7d:6a:c0:00:91:33:ff:6b:4f:
a6:1c:bd:7a:6a:e1:9f:53:68:36:e2:d8:be:6a:89:
76:c5:22:4c:05:a7:d0:6b:b8:9c:ea:43:e5:ad:03:
91:bd:2f:fe:66:58:44:85:e7:b5:ce:31:d2:5e:50:
fb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E5:54:24:8E:AD:87:00:20:27:DF:E3:E9:E2:30:23:F1:7D:E8:F0
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/f-VUJI6thwAgJ9_j6eIwI_F96PA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.230.0/24
89.37.196.0/24
89.42.81.0-89.42.83.255
89.46.3.0/24
Signature Algorithm: sha256WithRSAEncryption
12:57:67:40:4c:82:84:1d:c9:22:fd:84:c8:84:b9:58:dd:c3:
77:a4:86:a5:ac:60:11:ac:2f:1b:20:fe:59:0d:cf:e3:f8:7b:
e4:12:87:de:7a:05:d0:1e:75:f1:8c:4e:23:20:a7:32:f0:8a:
1f:41:ec:17:7d:25:a5:0e:e1:49:f9:8b:63:56:7f:0d:be:d3:
be:82:ba:d3:46:06:9b:8b:d6:60:64:ce:7c:40:78:11:45:9a:
ae:ff:47:91:11:2a:eb:22:c4:c3:d9:a6:ad:73:79:9a:2d:db:
05:b7:bd:a4:b4:95:dd:8f:7b:b9:c0:56:34:35:2b:9a:be:69:
4f:2a:76:e8:66:4f:d5:15:91:3d:02:21:1f:0f:c3:a7:2b:d4:
29:4a:73:e5:09:ac:e7:90:f7:3a:1f:1d:2e:11:d8:df:2b:d1:
b1:21:2b:34:74:ee:78:9e:78:fb:0e:06:4d:27:ba:c0:28:f9:
eb:cc:00:97:10:41:9a:c6:e0:51:dc:16:74:40:5e:cc:3f:e8:
49:e7:3a:ec:d3:90:7f:9b:8a:e8:87:fb:ad:b8:b4:77:89:e3:
90:c0:48:fb:31:4e:c8:1a:37:55:ac:3d:e4:25:ed:61:e9:58:
92:4b:a9:36:a2:cd:d0:dd:62:7c:d3:4b:a1:a4:cd:8d:fe:30:
b8:26:46:20
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYzpGaNLdy8LVs2Vm8ljeP2ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjQwMTA4MTI0MzQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmU1NTQyNDhlYWQ4NzAwMjAyN2RmZTNlOWUyMzAyM2YxN2RlOGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGnyCcTGd1N+sDN54kSt2QmM/Axi
r4V0DHKkfsQNURf8MGYq8tX7YOMDopq4jhR0UlZCwcTRZ1aqMyi2yrJhJHygP1fo
jpSETt6DLPM6UtzOvzcfcE5GL65w2GHqMRDt7kP7tRmtgR6Q98ESLUHmVWJxeT77
E98L/qc8cbuwQmXjcsjv7wYcNdX9+Jlyk6YGdigHIP3ywGBFdxn7UKcx05YZOjHj
MLnF7t2wqLm/6TG61J8OTG2Gr/d/mfTkS1cwHCyx4BxRppB9asAAkTP/a0+mHL16
auGfU2g24ti+aol2xSJMBafQa7ic6kPlrQORvS/+ZlhEhee1zjHSXlD7ywIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFH/lVCSOrYcAICff4+niMCPxfejwMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvZi1WVUpJNnRod0FnSjlfajZlSXdJX0Y5NlBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAWSLmAwQA
WSXEMAwDBABZKlEDBAJZKlADBABZLgMwDQYJKoZIhvcNAQELBQADggEBABJXZ0BM
goQdySL9hMiEuVjdw3ekhqWsYBGsLxsg/lkNz+P4e+QSh956BdAedfGMTiMgpzLw
ih9B7Bd9JaUO4Un5i2NWfw2+076CutNGBpuL1mBkznxAeBFFmq7/R5ERKusixMPZ
pq1zeZot2wW3vaS0ld2Pe7nAVjQ1K5q+aU8qduhmT9UVkT0CIR8Pw6cr1ClKc+UJ
rOeQ9zofHS4R2N8r0bEhKzR07nieePsOBk0nusAo+evMAJcQQZrG4FHcFnRAXsw/
6EnnOuzTkH+biuiH+624tHeJ45DASPsxTsgaN1WsPeQl7WHpWJJLqTaizdDdYnzT
S6GkzY3+MLgmRiA=
-----END CERTIFICATE-----
Generated at Tue Jan 9 21:33:19 2024 by rpki-client on console-fra.rpki-client.org