Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/oCtC8CzI_w4qSFUV40y_H7R_bjM.roa
File: oCtC8CzI_w4qSFUV40y_H7R_bjM.roa (raw, json)
Hash identifier: Sl036ebJxKFoYf5mmuq0m/FNyVnzI6U5A+8I6qeyoTQ=
Subject key identifier: A0:2B:42:F0:2C:C8:FF:0E:2A:48:55:15:E3:4C:BF:1F:B4:7F:6E:33
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018C05E150D35F5D525B1363DDECDCC1EEBE
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/oCtC8CzI_w4qSFUV40y_H7R_bjM.roa
Signing time: Sat 25 Nov 2023 09:48:21 +0000
ROA not before: Sat 25 Nov 2023 09:48:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
89.42.80.0/23 maxlen: 23
89.34.227.0/24 maxlen: 24
93.113.183.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:05:e1:50:d3:5f:5d:52:5b:13:63:dd:ec:dc:c1:ee:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Nov 25 09:48:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a02b42f02cc8ff0e2a485515e34cbf1fb47f6e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cb:15:72:e6:aa:e8:98:c1:17:e9:f7:4b:fc:
7d:aa:56:b5:18:c1:7e:e5:8a:cd:6e:89:7c:13:cd:
53:86:75:3e:b1:b2:cf:c8:9d:77:d3:61:bf:2e:68:
ff:55:90:96:f3:8f:de:ea:bb:f8:e6:b1:2e:8e:65:
8d:8f:fd:91:df:39:c3:10:33:39:12:95:eb:97:47:
cd:97:46:0a:fe:b3:fd:80:de:98:4e:3b:78:37:4d:
dd:9a:2a:39:72:6c:51:15:3b:80:25:b7:aa:c8:d1:
b5:47:e1:08:a7:6b:3b:19:8e:22:27:22:db:32:e6:
66:2f:e5:b4:c2:87:09:1e:0f:d6:56:e8:22:de:a2:
9f:9c:6e:95:b0:f7:6a:bc:d4:b3:bc:8d:74:ea:f7:
25:d2:ee:aa:a0:98:c0:0c:02:3d:cd:b8:ec:ec:a8:
62:97:b4:2c:ca:86:a7:38:b4:24:12:9f:e3:8b:de:
39:c7:c6:cc:49:0a:7d:8a:1d:a2:ac:05:60:93:53:
61:92:e0:89:45:e3:64:c5:4b:d0:2a:6e:5c:ca:42:
c9:d8:2e:67:f1:b3:f3:d5:65:d3:0f:c2:58:6d:49:
a0:1d:c1:55:3c:3f:6d:ef:df:fd:32:02:cd:29:01:
00:49:db:3e:8f:8f:c4:86:63:ce:c4:8e:e7:c1:ca:
54:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2B:42:F0:2C:C8:FF:0E:2A:48:55:15:E3:4C:BF:1F:B4:7F:6E:33
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/oCtC8CzI_w4qSFUV40y_H7R_bjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.227.0/24
89.42.80.0/22
93.113.183.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:da:18:1f:6f:0d:f0:e8:87:5a:74:88:44:91:7d:c4:28:15:
43:f9:99:de:c7:48:6b:08:c5:1f:6e:e3:e2:48:2a:1b:4e:cf:
6e:31:48:9c:52:8a:92:00:92:e6:c4:83:29:a4:46:83:3c:a0:
a8:22:ca:85:e1:10:15:1b:f8:d6:24:08:89:cd:2d:36:d8:ba:
85:bb:09:ac:15:b1:74:fc:bf:e6:89:64:a0:76:69:3f:16:b5:
05:3e:9f:cb:eb:67:f5:2f:53:ee:88:8e:24:9d:f5:31:bd:66:
21:7f:24:15:03:22:a0:58:39:5b:6b:26:15:6e:38:48:a4:0b:
02:eb:13:45:94:ca:f0:80:57:3b:2d:a8:0c:6a:f5:fa:74:f0:
06:df:d6:70:61:31:2f:99:a1:2e:11:40:0e:ca:e7:a2:df:34:
47:c3:b4:56:84:7e:7d:ad:71:43:a7:58:a1:ee:c0:82:97:fa:
d4:4d:1d:19:17:13:85:d1:e0:d7:05:54:9c:5d:79:e4:77:41:
f3:80:6b:39:cd:67:20:b9:07:8b:ae:9a:a9:c3:5f:97:48:0e:
ac:87:5c:59:50:f2:54:e1:a6:74:44:b8:4e:ed:e2:5a:f4:a5:
d3:bf:a0:0b:75:82:b8:c5:0c:0b:b7:58:a5:55:5e:21:c6:27:
4d:ce:07:a1
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYwF4VDTX11SWxNj3ezcwe6+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjMxMTI1MDk0ODIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMDJiNDJmMDJjYzhmZjBlMmE0ODU1MTVlMzRjYmYxZmI0N2Y2ZTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMsVcuaq6JjBF+n3S/x9qla1GMF+
5YrNbol8E81ThnU+sbLPyJ1302G/Lmj/VZCW84/e6rv45rEujmWNj/2R3znDEDM5
EpXrl0fNl0YK/rP9gN6YTjt4N03dmio5cmxRFTuAJbeqyNG1R+EIp2s7GY4iJyLb
MuZmL+W0wocJHg/WVugi3qKfnG6VsPdqvNSzvI106vcl0u6qoJjADAI9zbjs7Khi
l7QsyoanOLQkEp/ji945x8bMSQp9ih2irAVgk1NhkuCJReNkxUvQKm5cykLJ2C5n
8bPz1WXTD8JYbUmgHcFVPD9t79/9MgLNKQEASds+j4/EhmPOxI7nwcpU0QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFKArQvAsyP8OKkhVFeNMvx+0f24zMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvb0N0QzhDeklfdzRxU0ZVVjQweV9IN1JfYmpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWSLjAwQC
WSpQAwQAXXG3MA0GCSqGSIb3DQEBCwUAA4IBAQBP2hgfbw3w6IdadIhEkX3EKBVD
+Znex0hrCMUfbuPiSCobTs9uMUicUoqSAJLmxIMppEaDPKCoIsqF4RAVG/jWJAiJ
zS022LqFuwmsFbF0/L/miWSgdmk/FrUFPp/L62f1L1PuiI4knfUxvWYhfyQVAyKg
WDlbayYVbjhIpAsC6xNFlMrwgFc7LagMavX6dPAG39ZwYTEvmaEuEUAOyuei3zRH
w7RWhH59rXFDp1ih7sCCl/rUTR0ZFxOF0eDXBVScXXnkd0HzgGs5zWcguQeLrpqp
w1+XSA6sh1xZUPJU4aZ0RLhO7eJa9KXTv6ALdYK4xQwLt1ilVV4hxidNzgeh
-----END CERTIFICATE-----
Generated at Sun Nov 26 08:59:15 2023 by rpki-client on console-ams.rpki-client.org