Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/izEdWGziijLFEAMductP4lEZ6Ic.roa
File: izEdWGziijLFEAMductP4lEZ6Ic.roa (raw, json)
Hash identifier: AHSCRa1IF3Dj12Iw9OXq2+c+gnTW3UpQ12usoYAQ6uo=
Subject key identifier: 8B:31:1D:58:6C:E2:8A:32:C5:10:03:1D:B9:CB:4F:E2:51:19:E8:87
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018CC26D254D9090B87C24816F01DF6621DC
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/izEdWGziijLFEAMductP4lEZ6Ic.roa
Signing time: Mon 01 Jan 2024 00:29:42 +0000
ROA not before: Mon 01 Jan 2024 00:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50131
IP address blocks: 89.46.2.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jan 2024 10:31:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:25:4d:90:90:b8:7c:24:81:6f:01:df:66:21:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 00:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b311d586ce28a32c510031db9cb4fe25119e887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b8:ad:1c:a6:18:92:9a:21:fc:96:8c:1f:99:
ca:fb:e4:4a:27:a8:74:c9:f2:94:7c:2b:6d:b3:4e:
8a:67:25:fd:94:b1:98:34:91:45:03:03:26:b7:19:
7f:c6:e0:08:8a:a2:44:58:34:9a:82:83:cc:51:79:
0b:c8:5a:4e:5b:91:7f:e4:e4:f1:fd:25:d9:2f:d9:
c7:6a:6d:01:5c:06:8d:6f:bd:33:54:96:c5:5b:a3:
b4:c5:fb:06:7c:7a:9f:ae:05:8c:c4:92:7d:bc:89:
ae:49:d7:c1:86:fe:15:02:f4:af:18:da:4a:9a:84:
5b:aa:25:66:0f:a2:bf:ef:bd:30:f4:98:5d:22:78:
c6:20:9e:5f:f8:4a:3e:6d:00:a0:bd:95:02:16:ed:
c4:03:18:0a:3b:23:64:2d:ff:90:3c:45:ff:27:e9:
6c:d7:17:3d:39:b6:2c:ae:97:a9:ac:3a:a0:ab:fe:
6f:97:74:fe:bc:a6:4b:f5:a5:de:af:75:dc:21:e4:
74:0c:4e:e6:7d:2a:88:1f:9e:41:d1:95:97:25:ce:
cc:4f:4f:e8:82:db:9e:b5:61:1c:1e:fc:9b:9b:1d:
0f:b2:b5:eb:2d:c9:0c:cb:b8:17:cd:64:ee:39:ae:
74:a5:60:81:8a:de:c5:fe:4e:98:77:7a:00:76:5f:
47:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:31:1D:58:6C:E2:8A:32:C5:10:03:1D:B9:CB:4F:E2:51:19:E8:87
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/izEdWGziijLFEAMductP4lEZ6Ic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.2.0/24
Signature Algorithm: sha256WithRSAEncryption
70:a4:c4:38:64:e2:b4:5f:81:0d:9e:48:f6:7c:1e:2c:cb:79:
fb:d2:74:b4:da:b3:3d:5f:53:d4:bd:5c:7f:fc:6e:1e:29:03:
5c:27:d4:0c:da:82:50:fb:96:3d:0c:1f:b9:35:1c:cc:12:73:
5b:4e:99:a0:33:41:3f:29:4a:7d:a9:29:02:5c:1b:64:dc:10:
ab:ef:fe:c3:c0:69:f6:f2:17:d1:7c:f2:ef:0a:54:35:64:c1:
7e:00:ec:48:02:1b:99:48:d3:c7:6a:b6:6e:dc:ef:d4:c8:91:
13:1b:2e:0f:7a:b6:f1:87:d4:e0:95:74:35:e0:cd:0f:bf:f4:
f3:bf:b9:48:89:a8:d9:74:03:d2:4e:5e:78:8a:a2:cd:a6:e5:
af:fa:4c:cb:0c:59:43:6a:11:29:f0:7f:2a:63:31:fe:03:dc:
13:a7:c4:54:3e:92:85:8f:77:b6:d9:56:2f:da:2b:f7:8d:93:
25:e1:a8:eb:c7:a4:ec:3f:b0:17:b8:b6:c1:7a:44:d6:36:26:
98:4a:44:ae:a6:63:c7:31:89:86:95:48:47:04:5c:9e:16:96:
cb:77:3b:ed:c1:04:53:00:b4:c8:47:de:e6:4d:0c:12:94:f0:
b2:9e:d7:bb:68:87:75:5a:c2:57:f8:a1:6b:71:98:1e:56:a6:
7f:e7:b3:16
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzCbSVNkJC4fCSBbwHfZiHcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjQwMTAxMDAyOTQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjMxMWQ1ODZjZTI4YTMyYzUxMDAzMWRiOWNiNGZlMjUxMTllODg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbitHKYYkpoh/JaMH5nK++RKJ6h0
yfKUfCtts06KZyX9lLGYNJFFAwMmtxl/xuAIiqJEWDSagoPMUXkLyFpOW5F/5OTx
/SXZL9nHam0BXAaNb70zVJbFW6O0xfsGfHqfrgWMxJJ9vImuSdfBhv4VAvSvGNpK
moRbqiVmD6K/770w9JhdInjGIJ5f+Eo+bQCgvZUCFu3EAxgKOyNkLf+QPEX/J+ls
1xc9ObYsrpeprDqgq/5vl3T+vKZL9aXer3XcIeR0DE7mfSqIH55B0ZWXJc7MT0/o
gtuetWEcHvybmx0PsrXrLckMy7gXzWTuOa50pWCBit7F/k6Yd3oAdl9HxwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIsxHVhs4ooyxRADHbnLT+JRGeiHMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvaXpFZFdHemlpakxGRUFNZHVjdFA0bEVaNkljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWS4CMA0G
CSqGSIb3DQEBCwUAA4IBAQBwpMQ4ZOK0X4ENnkj2fB4sy3n70nS02rM9X1PUvVx/
/G4eKQNcJ9QM2oJQ+5Y9DB+5NRzMEnNbTpmgM0E/KUp9qSkCXBtk3BCr7/7DwGn2
8hfRfPLvClQ1ZMF+AOxIAhuZSNPHarZu3O/UyJETGy4Perbxh9TglXQ14M0Pv/Tz
v7lIiajZdAPSTl54iqLNpuWv+kzLDFlDahEp8H8qYzH+A9wTp8RUPpKFj3e22VYv
2iv3jZMl4ajrx6TsP7AXuLbBekTWNiaYSkSupmPHMYmGlUhHBFyeFpbLdzvtwQRT
ALTIR97mTQwSlPCynte7aId1WsJX+KFrcZgeVqZ/57MW
-----END CERTIFICATE-----
Generated at Tue Jan 23 14:58:10 2024 by rpki-client on console-ams.rpki-client.org