Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/pcbeOsZmIzq3JJ_mW3y7SzhHxwQ.roa
File: pcbeOsZmIzq3JJ_mW3y7SzhHxwQ.roa (raw, json)
Hash identifier: 2YuTvLIyD60xQi/7EO4Y6Yj0veWJ9PaibutA5GuaJp4=
Subject key identifier: A5:C6:DE:3A:C6:66:23:3A:B7:24:9F:E6:5B:7C:BB:4B:38:47:C7:04
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018ADA6290F8D70DACF26565A2CC5AB42D08
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/pcbeOsZmIzq3JJ_mW3y7SzhHxwQ.roa
Signing time: Thu 28 Sep 2023 06:03:27 +0000
ROA not before: Thu 28 Sep 2023 06:03:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 265919
IP address blocks: 93.119.106.0/24 maxlen: 24
89.46.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Oct 2023 11:41:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:da:62:90:f8:d7:0d:ac:f2:65:65:a2:cc:5a:b4:2d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Sep 28 06:03:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5c6de3ac666233ab7249fe65b7cbb4b3847c704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:6c:3a:22:c8:03:44:8f:e4:91:9e:6e:30:9b:
2c:2b:26:eb:11:6a:64:08:4b:b2:63:d9:a2:74:dc:
b5:7a:77:e5:c6:a4:3d:13:0a:be:a0:0f:cc:c7:0a:
62:8e:d3:d8:2b:3e:24:1d:29:55:9a:f9:d6:d4:34:
e2:d6:51:77:64:72:b6:39:c9:2d:6b:9d:f7:03:d4:
a0:a5:41:c6:6c:5d:37:0d:9c:82:4f:cb:40:56:11:
7a:c5:3b:1b:9c:b8:6b:35:3f:eb:03:fb:e4:a7:51:
e1:ba:25:1b:c1:c5:b9:dc:bb:56:c6:a2:86:bf:50:
e1:9c:40:db:71:4b:19:f1:c3:e3:a8:1f:1a:49:c2:
ec:02:b0:4a:28:e3:24:4a:b8:bd:50:cf:c0:43:d5:
1d:8e:3e:44:54:c8:7f:6e:75:4b:60:97:72:e0:c6:
8b:a7:42:34:b4:62:1d:ef:cd:a7:0f:79:0e:c8:c3:
38:3f:17:56:6d:bc:25:b7:9d:6f:58:56:b1:59:6a:
12:cc:de:57:a5:7b:e4:90:c2:2c:19:c5:1b:ec:03:
c3:8a:b3:29:aa:81:23:3e:44:5f:44:00:9e:73:02:
3b:3a:61:f2:20:78:24:3c:05:86:ef:10:de:53:8e:
e1:c8:66:ee:fa:53:e1:b8:10:d0:9b:b2:ac:87:39:
ca:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C6:DE:3A:C6:66:23:3A:B7:24:9F:E6:5B:7C:BB:4B:38:47:C7:04
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/pcbeOsZmIzq3JJ_mW3y7SzhHxwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.0.0/24
93.119.106.0/24
Signature Algorithm: sha256WithRSAEncryption
02:bf:de:b4:0a:5f:a5:c0:e1:4d:7a:e1:b4:57:2a:5b:fc:c2:
2a:ca:f9:2c:5c:55:c8:b4:9c:22:c1:ea:78:31:b7:0e:6b:45:
6f:f5:f7:91:ef:13:f0:5f:85:2e:12:7e:11:54:df:5e:05:bf:
81:db:89:29:d1:46:82:c4:a8:d5:10:da:4c:4e:a8:6c:e4:e7:
9e:02:d6:9a:87:16:69:42:31:03:51:ea:51:ce:12:69:f2:dd:
9a:52:6d:7e:80:61:75:4e:ff:2a:61:f4:31:0d:40:e8:97:55:
ab:c1:63:b6:ca:b5:2f:03:be:96:85:ee:a3:a9:e6:53:a0:66:
19:65:61:c4:31:1c:20:db:bd:4d:56:7f:8f:63:fc:7f:fa:d7:
5c:45:be:3f:c3:18:22:c9:87:03:24:17:7d:ad:c1:c0:ad:e6:
0e:0d:e5:a0:bc:38:4a:c3:3b:e4:4f:99:cf:99:f4:5f:af:97:
40:7e:7d:1d:fd:4d:b9:70:51:fd:39:98:a8:b4:07:af:52:60:
cd:b4:6b:75:3b:d3:eb:e4:ae:29:f7:c2:bd:7f:93:8e:55:bc:
7b:03:dc:84:9b:1b:8b:95:7a:ed:7d:9b:83:48:36:f9:bc:57:
65:30:5a:d6:5c:2e:42:cf:7d:cf:97:4d:63:34:24:d7:5a:cc:
9e:c1:ff:d6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYraYpD41w2s8mVlosxatC0IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjMwOTI4MDYwMzI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNWM2ZGUzYWM2NjYyMzNhYjcyNDlmZTY1YjdjYmI0YjM4NDdjNzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2w6IsgDRI/kkZ5uMJssKybrEWpk
CEuyY9midNy1enflxqQ9Ewq+oA/MxwpijtPYKz4kHSlVmvnW1DTi1lF3ZHK2Ockt
a533A9SgpUHGbF03DZyCT8tAVhF6xTsbnLhrNT/rA/vkp1HhuiUbwcW53LtWxqKG
v1DhnEDbcUsZ8cPjqB8aScLsArBKKOMkSri9UM/AQ9Udjj5EVMh/bnVLYJdy4MaL
p0I0tGId782nD3kOyMM4PxdWbbwlt51vWFaxWWoSzN5XpXvkkMIsGcUb7APDirMp
qoEjPkRfRACecwI7OmHyIHgkPAWG7xDeU47hyGbu+lPhuBDQm7KshznKGwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKXG3jrGZiM6tySf5lt8u0s4R8cEMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvcGNiZU9zWm1JenEzSkpfbVczeTdTemhIeHdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWS4AAwQA
XXdqMA0GCSqGSIb3DQEBCwUAA4IBAQACv960Cl+lwOFNeuG0Vypb/MIqyvksXFXI
tJwiwep4MbcOa0Vv9feR7xPwX4UuEn4RVN9eBb+B24kp0UaCxKjVENpMTqhs5Oee
AtaahxZpQjEDUepRzhJp8t2aUm1+gGF1Tv8qYfQxDUDol1WrwWO2yrUvA76Whe6j
qeZToGYZZWHEMRwg271NVn+PY/x/+tdcRb4/wxgiyYcDJBd9rcHAreYODeWgvDhK
wzvkT5nPmfRfr5dAfn0d/U25cFH9OZiotAevUmDNtGt1O9Pr5K4p98K9f5OOVbx7
A9yEmxuLlXrtfZuDSDb5vFdlMFrWXC5Cz33Pl01jNCTXWsyewf/W
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:19 2024 by rpki-client on console-fra.rpki-client.org