Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/v8q37rZGe0AQBGYJPnQuu3WiUwo.roa
File: v8q37rZGe0AQBGYJPnQuu3WiUwo.roa (raw, json)
Hash identifier: 7EAJ6erdmQ65LEqQqFWx1Cs4nZEwQT0jg/BvxGK3+PU=
Subject key identifier: BF:CA:B7:EE:B6:46:7B:40:10:04:66:09:3E:74:2E:BB:75:A2:53:0A
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018CC26D2CC4E19EC3D2B2E69DF8360D2095
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/v8q37rZGe0AQBGYJPnQuu3WiUwo.roa
Signing time: Mon 01 Jan 2024 00:29:43 +0000
ROA not before: Mon 01 Jan 2024 00:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199707
IP address blocks: 89.34.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:47:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:2c:c4:e1:9e:c3:d2:b2:e6:9d:f8:36:0d:20:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 00:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bfcab7eeb6467b40100466093e742ebb75a2530a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:cd:36:f5:85:f7:4f:80:e7:5d:90:ce:4d:e8:
b1:69:fb:04:d8:d0:78:0e:42:a7:bd:35:06:69:a2:
3f:94:3e:8c:fe:b6:7c:c7:e4:78:98:5c:f0:b0:83:
d1:ff:a9:d2:3e:43:d0:d0:6c:59:18:2d:1b:7b:3a:
73:a7:09:d1:f9:cf:69:08:62:43:ac:0f:41:01:61:
46:4d:11:24:34:be:46:fc:f0:e5:81:f3:80:4d:60:
26:33:4f:fa:ac:d1:dc:a1:55:2b:16:75:bd:b1:ee:
93:89:54:46:5c:9a:8b:72:1f:b2:b5:05:96:51:da:
52:fa:0f:20:65:2a:99:fd:f6:e9:00:c0:c2:b3:08:
fd:6a:9a:7e:a7:71:79:32:3c:3d:38:b0:b5:99:02:
cd:54:f8:73:e2:ac:9b:ca:8e:37:64:85:7d:b7:1a:
e9:4d:fd:da:a4:14:8e:be:bd:7f:9c:1c:ed:68:d5:
6f:c8:2b:50:4f:24:94:49:bf:8b:99:e9:dc:cc:fb:
d6:ba:20:42:9a:f0:f2:1f:d5:ac:67:1f:33:c8:e4:
d5:c2:7a:10:8b:5b:06:c4:d3:ee:01:79:91:d4:14:
d3:2b:dd:7c:94:24:c3:09:65:20:b6:7d:58:92:4e:
c1:7b:29:38:ad:eb:ed:b1:6d:62:a3:6f:ba:39:4f:
3e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:CA:B7:EE:B6:46:7B:40:10:04:66:09:3E:74:2E:BB:75:A2:53:0A
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/v8q37rZGe0AQBGYJPnQuu3WiUwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.227.0/24
Signature Algorithm: sha256WithRSAEncryption
26:67:87:ac:b7:89:17:72:13:7c:16:b5:c9:22:e2:73:0a:08:
64:17:a4:75:c8:1a:cf:cf:d2:86:48:21:1d:53:d1:48:9e:cd:
b2:97:40:c4:81:fb:bd:e6:af:89:68:90:57:a3:78:bf:d3:34:
e8:fd:4b:9d:6a:19:5f:30:dd:3b:1f:e8:a7:c2:72:76:2e:67:
4d:63:45:f3:d4:ce:b1:f5:87:57:18:f1:72:24:4a:45:91:e7:
85:17:0f:3f:ea:17:35:12:2b:bd:1a:50:8a:fc:00:f4:1d:8f:
2f:24:f6:97:a5:89:d7:f4:4e:90:aa:52:4c:7a:a2:c5:93:c9:
fc:b5:5a:11:80:9d:82:b0:be:3d:02:96:d2:72:45:01:e7:ac:
f8:bf:10:de:aa:84:38:16:4c:86:90:36:cc:e5:9c:61:a9:e7:
ca:e8:91:e1:92:fb:8b:6b:78:4f:5f:b8:c6:fc:6a:c7:ff:20:
8f:79:b2:e7:91:fe:27:79:4d:31:3c:12:5e:c2:d5:51:92:18:
2d:4b:26:72:cf:5c:35:d7:22:03:df:9f:2b:01:28:df:bb:11:
77:50:7a:17:c5:da:73:8e:69:42:a2:ae:52:c0:16:da:3d:64:
55:e7:d0:e0:64:62:ea:5d:1f:ab:dc:3d:42:38:f0:cd:96:d2:
4e:46:15:19
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzCbSzE4Z7D0rLmnfg2DSCVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjQwMTAxMDAyOTQzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZmNhYjdlZWI2NDY3YjQwMTAwNDY2MDkzZTc0MmViYjc1YTI1MzBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAks029YX3T4DnXZDOTeixafsE2NB4
DkKnvTUGaaI/lD6M/rZ8x+R4mFzwsIPR/6nSPkPQ0GxZGC0bezpzpwnR+c9pCGJD
rA9BAWFGTREkNL5G/PDlgfOATWAmM0/6rNHcoVUrFnW9se6TiVRGXJqLch+ytQWW
UdpS+g8gZSqZ/fbpAMDCswj9app+p3F5Mjw9OLC1mQLNVPhz4qybyo43ZIV9txrp
Tf3apBSOvr1/nBztaNVvyCtQTySUSb+LmenczPvWuiBCmvDyH9WsZx8zyOTVwnoQ
i1sGxNPuAXmR1BTTK918lCTDCWUgtn1Ykk7Beyk4revtsW1io2+6OU8+vwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL/Kt+62RntAEARmCT50Lrt1olMKMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvdjhxMzdyWkdlMEFRQkdZSlBuUXV1M1dpVXdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSLjMA0G
CSqGSIb3DQEBCwUAA4IBAQAmZ4est4kXchN8FrXJIuJzCghkF6R1yBrPz9KGSCEd
U9FIns2yl0DEgfu95q+JaJBXo3i/0zTo/UudahlfMN07H+inwnJ2LmdNY0Xz1M6x
9YdXGPFyJEpFkeeFFw8/6hc1Eiu9GlCK/AD0HY8vJPaXpYnX9E6QqlJMeqLFk8n8
tVoRgJ2CsL49ApbSckUB56z4vxDeqoQ4FkyGkDbM5ZxhqefK6JHhkvuLa3hPX7jG
/GrH/yCPebLnkf4neU0xPBJewtVRkhgtSyZyz1w11yID358rASjfuxF3UHoXxdpz
jmlCoq5SwBbaPWRV59DgZGLqXR+r3D1COPDNltJORhUZ
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:40:27 2025 by rpki-client