Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/jPxAd9spsGZCe-IBSv3IgL_7qt8.roa
File: jPxAd9spsGZCe-IBSv3IgL_7qt8.roa (raw, json)
Hash identifier: bspbkI6gHzUtuDU89fztUQT9G3fKpOEi4z7vhNHJemo=
Subject key identifier: 8C:FC:40:77:DB:29:B0:66:42:7B:E2:01:4A:FD:C8:80:BF:FB:AA:DF
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018B6B8BA6315E04C6C5A51D1E0AEFADE6AA
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/jPxAd9spsGZCe-IBSv3IgL_7qt8.roa
Signing time: Thu 26 Oct 2023 10:33:16 +0000
ROA not before: Thu 26 Oct 2023 10:33:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211975
IP address blocks: 93.113.180.0/24 maxlen: 24
89.43.141.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6b:8b:a6:31:5e:04:c6:c5:a5:1d:1e:0a:ef:ad:e6:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Oct 26 10:33:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8cfc4077db29b066427be2014afdc880bffbaadf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0d:01:55:19:da:f1:12:a5:50:ff:e3:88:fb:
7d:fb:bc:3b:3f:81:bf:5e:77:54:28:99:46:d4:9a:
38:30:e2:e3:da:f0:13:ec:7a:4a:6f:ee:9e:32:82:
e9:2f:2a:7e:de:41:58:30:2f:19:ae:cd:a9:8c:b6:
60:7f:d6:32:81:8f:b4:be:cb:79:52:59:11:e6:b3:
7b:9c:11:82:be:4b:cc:d3:c0:39:c6:76:8a:df:e2:
0b:8b:77:13:73:ca:f0:18:6b:0e:8a:15:30:c4:4e:
af:bd:cb:be:e9:9d:78:55:db:9f:95:6e:e1:3a:60:
9b:82:e7:db:33:d3:ea:95:dd:6e:62:68:73:6f:3d:
b7:b5:0c:83:23:b6:40:fa:7f:f0:61:42:f7:b3:35:
92:6b:92:2b:cf:f6:8f:d3:e8:62:95:29:a4:66:ab:
e9:d3:4d:4c:ce:10:7a:92:24:5e:a8:e5:c8:37:43:
e0:95:9c:91:7a:0f:a9:54:57:62:3c:bf:a9:fb:02:
b6:16:9e:67:fc:c1:99:aa:f0:f7:1e:d5:51:fa:08:
34:f6:f5:c6:a8:2e:50:9a:8a:21:d2:7d:c6:6e:82:
c1:b4:e0:98:f6:68:b4:c6:1f:d5:52:29:30:e8:0d:
47:d4:b4:1b:b7:7e:61:6d:a3:25:03:60:fb:bd:82:
b4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:FC:40:77:DB:29:B0:66:42:7B:E2:01:4A:FD:C8:80:BF:FB:AA:DF
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/jPxAd9spsGZCe-IBSv3IgL_7qt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.43.141.0/24
93.113.180.0/24
Signature Algorithm: sha256WithRSAEncryption
63:81:d0:af:56:8b:e5:cb:74:8b:c1:25:3f:81:7c:8b:0c:b3:
54:d9:c3:09:f7:da:be:50:4a:a2:47:38:78:80:19:98:1b:3a:
28:ed:4e:d2:85:07:25:74:71:32:1a:79:f3:ab:08:34:69:97:
d3:22:c5:c2:30:93:bd:af:d2:c0:bf:0d:5c:54:66:01:4d:84:
c6:d9:2e:4b:85:3f:d0:98:00:01:a6:90:ae:89:70:1a:43:e4:
2e:3e:aa:26:ad:2a:f9:11:79:0f:22:0e:27:55:ac:28:bd:c7:
57:30:e6:56:23:3f:fa:5d:97:ee:5d:4f:57:77:56:e4:b1:8b:
0d:36:0c:87:ad:22:af:30:97:a5:8b:f8:2a:dd:7b:00:e3:2d:
29:f9:af:46:24:01:15:9c:33:07:ca:53:f8:53:60:fd:f2:19:
30:2f:a3:d7:32:b3:3f:a4:68:7a:21:3b:ed:9d:fa:ca:b5:7c:
62:f4:ce:f3:ce:05:ac:10:2a:db:9f:29:3f:74:aa:fb:aa:1a:
d8:ab:c2:c1:f8:73:b3:b8:86:c6:22:66:2d:81:c3:ae:48:63:
1c:c8:81:13:f1:cf:77:ec:13:87:d1:7b:2a:ce:20:f9:f5:9b:
07:d7:22:b6:91:9a:84:76:04:ce:27:b9:14:f6:96:e0:c0:0b:
1b:64:21:30
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYtri6YxXgTGxaUdHgrvreaqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjMxMDI2MTAzMzE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Y2ZjNDA3N2RiMjliMDY2NDI3YmUyMDE0YWZkYzg4MGJmZmJhYWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArw0BVRna8RKlUP/jiPt9+7w7P4G/
XndUKJlG1Jo4MOLj2vAT7HpKb+6eMoLpLyp+3kFYMC8Zrs2pjLZgf9YygY+0vst5
UlkR5rN7nBGCvkvM08A5xnaK3+ILi3cTc8rwGGsOihUwxE6vvcu+6Z14VduflW7h
OmCbgufbM9Pqld1uYmhzbz23tQyDI7ZA+n/wYUL3szWSa5Irz/aP0+hilSmkZqvp
001MzhB6kiReqOXIN0PglZyReg+pVFdiPL+p+wK2Fp5n/MGZqvD3HtVR+gg09vXG
qC5Qmooh0n3GboLBtOCY9mi0xh/VUikw6A1H1LQbt35hbaMlA2D7vYK0awIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIz8QHfbKbBmQnviAUr9yIC/+6rfMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvalB4QWQ5c3BzR1pDZS1JQlN2M0lnTF83cXQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWSuNAwQA
XXG0MA0GCSqGSIb3DQEBCwUAA4IBAQBjgdCvVovly3SLwSU/gXyLDLNU2cMJ99q+
UEqiRzh4gBmYGzoo7U7ShQcldHEyGnnzqwg0aZfTIsXCMJO9r9LAvw1cVGYBTYTG
2S5LhT/QmAABppCuiXAaQ+QuPqomrSr5EXkPIg4nVawovcdXMOZWIz/6XZfuXU9X
d1bksYsNNgyHrSKvMJeli/gq3XsA4y0p+a9GJAEVnDMHylP4U2D98hkwL6PXMrM/
pGh6ITvtnfrKtXxi9M7zzgWsECrbnyk/dKr7qhrYq8LB+HOzuIbGImYtgcOuSGMc
yIET8c937BOH0XsqziD59ZsH1yK2kZqEdgTOJ7kU9pbgwAsbZCEw
-----END CERTIFICATE-----
Generated at Mon Jan 1 02:54:12 2024 by rpki-client on console-ams.rpki-client.org