Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/fXjjzLVFFfliF2hWJNCLgaSY5bA.roa
File: fXjjzLVFFfliF2hWJNCLgaSY5bA.roa (raw, json)
Hash identifier: jDbDZsofufpqz0NVdKb1CqQ5JpU+j4wxoRAzampj9P0=
Subject key identifier: 7D:78:E3:CC:B5:45:15:F9:62:17:68:56:24:D0:8B:81:A4:98:E5:B0
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01922CCAEB4C6047FF839C41F9543FD0B24D
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/fXjjzLVFFfliF2hWJNCLgaSY5bA.roa
Signing time: Thu 26 Sep 2024 05:25:48 +0000
ROA not before: Thu 26 Sep 2024 05:25:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
93.114.88.0/24 maxlen: 24
93.114.90.0/24 maxlen: 24
93.114.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Oct 2024 05:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:2c:ca:eb:4c:60:47:ff:83:9c:41:f9:54:3f:d0:b2:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Sep 26 05:25:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d78e3ccb54515f96217685624d08b81a498e5b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a7:f0:58:07:71:32:9c:4c:e8:6f:bd:19:70:
bc:db:da:78:ae:8e:76:79:8a:e8:17:3d:b1:9e:5a:
51:02:61:b6:11:70:48:bb:b6:b2:ee:6f:04:22:50:
97:05:cf:03:4f:58:4b:67:0e:83:ed:ed:c6:0b:28:
f1:10:b7:88:07:9d:0f:59:19:31:4b:29:20:c4:49:
b4:b5:92:02:cc:18:1b:77:e6:e8:46:54:75:cd:84:
48:18:a3:84:88:c4:93:66:3b:c1:1a:7c:90:6e:3c:
aa:f1:bc:26:b7:ae:2b:2c:c7:9e:08:98:8b:99:e8:
46:ca:5d:49:ae:eb:a9:16:42:86:48:b5:3b:23:7f:
63:f0:29:94:d4:e6:12:a8:86:0a:43:6d:91:87:b5:
3f:0e:31:02:02:ca:f4:b8:a2:66:fd:00:3d:25:f5:
f2:81:b0:d8:83:e7:f3:50:0d:e0:70:62:85:ca:9f:
bb:e2:56:de:10:d8:12:59:eb:b8:1e:68:59:fd:29:
5a:17:4e:7a:72:f3:47:6a:90:32:c2:22:5f:48:cb:
d0:3e:8c:1d:16:8d:07:05:f2:6c:79:43:50:3a:0e:
86:11:47:ca:fa:2e:22:78:6f:f3:07:b3:83:4e:ae:
58:e9:02:50:c4:26:a6:f7:67:33:a3:d9:9d:f3:9a:
7f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:78:E3:CC:B5:45:15:F9:62:17:68:56:24:D0:8B:81:A4:98:E5:B0
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/fXjjzLVFFfliF2hWJNCLgaSY5bA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.81.0-89.42.83.255
93.114.88.0/24
93.114.90.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:d3:85:6b:e2:62:bd:a3:18:50:1d:7c:90:95:11:4e:18:db:
92:f7:3a:c3:3b:99:58:39:82:a1:b7:8d:32:91:16:8a:23:8d:
a3:17:14:f7:a8:c9:60:43:b4:41:f0:c2:8e:26:24:fe:ff:40:
27:8e:5e:36:1d:f2:5a:21:02:3f:29:38:88:9a:7d:a7:22:55:
ea:08:02:95:82:e3:9b:27:54:d3:b8:c3:7f:77:ce:25:79:6b:
57:a7:08:4c:30:2f:7f:e6:e3:11:12:a1:a1:8c:04:6b:8b:b6:
fb:81:d6:f9:0f:a4:e8:70:04:8c:4e:ad:c6:45:02:0b:3d:6e:
4a:3f:0f:74:c2:c2:a3:cb:48:c5:88:bc:2f:69:04:0a:1e:47:
01:49:36:51:c6:84:1d:24:9c:91:02:04:ea:54:28:3f:78:7a:
09:12:74:c2:ec:bf:aa:eb:1c:c0:2b:b2:54:e2:eb:df:9c:81:
9a:8d:b0:40:7e:6c:06:d4:6f:5d:c7:08:b3:d8:fd:aa:e1:ce:
cc:ab:c2:e1:d0:e6:fd:2a:c7:91:35:01:c8:2b:f5:c5:a2:38:
14:4b:87:08:e0:31:6e:c1:3a:bd:f2:dc:96:05:21:4c:63:9e:
24:f0:91:58:46:dd:be:a4:c7:c4:f0:ac:c0:93:4d:af:db:ac:
bc:51:8a:f0
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZIsyutMYEf/g5xB+VQ/0LJNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjQwOTI2MDUyNTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDc4ZTNjY2I1NDUxNWY5NjIxNzY4NTYyNGQwOGI4MWE0OThlNWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuafwWAdxMpxM6G+9GXC829p4ro52
eYroFz2xnlpRAmG2EXBIu7ay7m8EIlCXBc8DT1hLZw6D7e3GCyjxELeIB50PWRkx
SykgxEm0tZICzBgbd+boRlR1zYRIGKOEiMSTZjvBGnyQbjyq8bwmt64rLMeeCJiL
mehGyl1JruupFkKGSLU7I39j8CmU1OYSqIYKQ22Rh7U/DjECAsr0uKJm/QA9JfXy
gbDYg+fzUA3gcGKFyp+74lbeENgSWeu4HmhZ/SlaF056cvNHapAywiJfSMvQPowd
Fo0HBfJseUNQOg6GEUfK+i4ieG/zB7ODTq5Y6QJQxCam92czo9md85p/KwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFH1448y1RRX5YhdoViTQi4GkmOWwMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvZlhqanpMVkZGZmxpRjJoV0pOQ0xnYVNZNWJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBABZKlED
BAJZKlADBABdclgDBAFdclowDQYJKoZIhvcNAQELBQADggEBAArThWviYr2jGFAd
fJCVEU4Y25L3OsM7mVg5gqG3jTKRFoojjaMXFPeoyWBDtEHwwo4mJP7/QCeOXjYd
8lohAj8pOIiafaciVeoIApWC45snVNO4w393ziV5a1enCEwwL3/m4xESoaGMBGuL
tvuB1vkPpOhwBIxOrcZFAgs9bko/D3TCwqPLSMWIvC9pBAoeRwFJNlHGhB0knJEC
BOpUKD94egkSdMLsv6rrHMArslTi69+cgZqNsEB+bAbUb13HCLPY/arhzsyrwuHQ
5v0qx5E1Acgr9cWiOBRLhwjgMW7BOr3y3JYFIUxjniTwkVhG3b6kx8TwrMCTTa/b
rLxRivA=
-----END CERTIFICATE-----
Generated at Wed Oct 2 08:41:20 2024 by rpki-client on console-ams.rpki-client.org