Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/lMy1ntdxG0xLc2MCuIAfIoFgcag.roa
File: lMy1ntdxG0xLc2MCuIAfIoFgcag.roa (raw, json)
Hash identifier: HycwOuaOMEK1HHzDp8wICQnn/YWg56J+XOy4xJERPgU=
Subject key identifier: 94:CC:B5:9E:D7:71:1B:4C:4B:73:63:02:B8:80:1F:22:81:60:71:A8
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018B3C225B59BCF4C3EA7DD7775B60A52435
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/lMy1ntdxG0xLc2MCuIAfIoFgcag.roa
Signing time: Tue 17 Oct 2023 05:36:06 +0000
ROA not before: Tue 17 Oct 2023 05:36:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.42.82.0/23 maxlen: 23
89.42.80.0/23 maxlen: 23
89.46.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Oct 2023 07:28:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3c:22:5b:59:bc:f4:c3:ea:7d:d7:77:5b:60:a5:24:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Oct 17 05:36:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94ccb59ed7711b4c4b736302b8801f22816071a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:22:55:34:31:ed:72:50:13:0e:a3:e2:58:4a:
26:cc:50:03:13:7b:fc:e9:8c:c8:f0:5c:fa:0c:80:
57:e5:95:6a:5c:c9:ce:a6:7b:0f:6f:10:32:de:81:
57:69:7e:c2:6f:74:c2:ff:c3:37:d1:c1:a9:2c:33:
48:4e:76:55:94:82:21:d0:50:f2:3c:22:a5:11:8e:
68:dc:53:92:0f:34:1d:90:24:50:87:ec:69:c3:c7:
45:7b:4c:5b:bd:50:bd:ca:67:c3:ea:62:43:a0:80:
fa:e6:5c:48:c0:74:0f:13:ed:d1:0b:6c:dc:8f:9c:
82:3d:97:c8:25:46:ab:6e:ef:18:7e:c6:f3:69:5f:
e6:7b:0b:e7:ba:ac:0e:e6:da:2a:a1:f1:8a:ba:16:
6d:1c:8b:ff:cb:a5:ce:3b:09:a4:75:07:04:78:c1:
3e:7d:48:2b:8b:90:43:26:e3:5c:24:e1:99:eb:7a:
de:c5:ac:8f:25:af:bf:18:a3:0d:0d:e4:9d:0f:c6:
cb:a7:98:a9:df:c7:45:63:08:9c:65:20:ef:48:a7:
f0:0e:2e:95:b5:c4:0e:fd:21:57:7f:03:e7:e3:19:
27:69:c1:2d:0f:8c:34:af:4a:25:8b:9e:c2:0f:9b:
e5:7d:70:6d:34:2d:30:77:f5:15:fb:0f:72:5b:b6:
38:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:CC:B5:9E:D7:71:1B:4C:4B:73:63:02:B8:80:1F:22:81:60:71:A8
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/lMy1ntdxG0xLc2MCuIAfIoFgcag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.80.0/22
89.46.0.0/24
Signature Algorithm: sha256WithRSAEncryption
27:88:f0:47:00:4c:8a:fc:82:e4:1a:0a:05:2c:d0:d6:7e:a6:
06:13:ef:c9:71:0f:9c:98:2c:1c:89:3f:b8:21:0a:f3:23:5c:
4f:86:60:56:f1:0a:0b:45:aa:fc:68:7e:32:e3:c1:72:c4:26:
4c:a0:9d:33:1b:d3:ac:94:7d:13:29:b6:0f:af:0a:49:f6:a9:
c2:a8:2c:3f:f7:9b:ad:2e:52:01:c9:eb:c6:12:6a:2b:72:97:
ae:0c:eb:7c:88:49:bb:e6:18:95:2d:70:5a:68:89:8c:80:ce:
c1:e0:11:c7:fd:1d:93:e7:b1:dd:a2:07:11:a9:01:db:9b:ef:
41:bb:47:91:9d:aa:1e:4e:bf:19:c6:4c:1b:63:84:01:ee:37:
84:12:f0:0e:2b:47:bd:50:62:1a:15:19:c0:d5:76:74:4b:e9:
79:2d:6c:6a:89:24:c0:b5:d8:c0:24:04:c7:f4:59:a7:de:4a:
37:73:58:84:f7:45:98:e7:9e:a2:ad:c7:8d:b4:0c:d2:61:8c:
d1:27:22:23:21:15:37:a0:21:ca:54:2c:b6:a0:9a:3c:45:a3:
15:8e:e2:13:9a:f7:05:43:e3:45:52:9d:06:26:44:c6:b4:27:
e3:f2:21:93:1a:27:e7:ca:5e:c3:4f:c4:9c:44:9f:c0:ce:e7:
e2:42:a3:b9
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYs8IltZvPTD6n3Xd1tgpSQ1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjMxMDE3MDUzNjA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NGNjYjU5ZWQ3NzExYjRjNGI3MzYzMDJiODgwMWYyMjgxNjA3MWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCJVNDHtclATDqPiWEomzFADE3v8
6YzI8Fz6DIBX5ZVqXMnOpnsPbxAy3oFXaX7Cb3TC/8M30cGpLDNITnZVlIIh0FDy
PCKlEY5o3FOSDzQdkCRQh+xpw8dFe0xbvVC9ymfD6mJDoID65lxIwHQPE+3RC2zc
j5yCPZfIJUarbu8YfsbzaV/mewvnuqwO5toqofGKuhZtHIv/y6XOOwmkdQcEeME+
fUgri5BDJuNcJOGZ63rexayPJa+/GKMNDeSdD8bLp5ip38dFYwicZSDvSKfwDi6V
tcQO/SFXfwPn4xknacEtD4w0r0oli57CD5vlfXBtNC0wd/UV+w9yW7Y4+wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJTMtZ7XcRtMS3NjAriAHyKBYHGoMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvbE15MW50ZHhHMHhMYzJNQ3VJQWZJb0ZnY2FnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCWSpQAwQA
WS4AMA0GCSqGSIb3DQEBCwUAA4IBAQAniPBHAEyK/ILkGgoFLNDWfqYGE+/JcQ+c
mCwciT+4IQrzI1xPhmBW8QoLRar8aH4y48FyxCZMoJ0zG9OslH0TKbYPrwpJ9qnC
qCw/95utLlIByevGEmorcpeuDOt8iEm75hiVLXBaaImMgM7B4BHH/R2T57HdogcR
qQHbm+9Bu0eRnaoeTr8ZxkwbY4QB7jeEEvAOK0e9UGIaFRnA1XZ0S+l5LWxqiSTA
tdjAJATH9Fmn3ko3c1iE90WY556irceNtAzSYYzRJyIjIRU3oCHKVCy2oJo8RaMV
juITmvcFQ+NFUp0GJkTGtCfj8iGTGifnyl7DT8ScRJ/AzufiQqO5
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:50 2024 by rpki-client on console-ams.rpki-client.org