Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/KS0RObHNRhFc6cXX3-lDq2Boyfo.roa
File: KS0RObHNRhFc6cXX3-lDq2Boyfo.roa (raw, json)
Hash identifier: zphhGN9l0Y35fzDnhwP7Y1EnamoKMg9uy+62CMkwtLY=
Subject key identifier: 29:2D:11:39:B1:CD:46:11:5C:E9:C5:D7:DF:E9:43:AB:60:68:C9:FA
Certificate issuer: /CN=1e9a92daf08c20b4691b925cf032e5491fe0acc0
Certificate serial: 01870D8F487233412456280F3AE40123AB4C
Authority key identifier: 1E:9A:92:DA:F0:8C:20:B4:69:1B:92:5C:F0:32:E5:49:1F:E0:AC:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpqS2vCMILRpG5Jc8DLlSR_grMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/KS0RObHNRhFc6cXX3-lDq2Boyfo.roa
Signing time: Thu 23 Mar 2023 08:21:46 +0000
ROA not before: Thu 23 Mar 2023 08:21:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39785
IP address blocks: 89.105.159.0/24 maxlen: 24
89.105.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Mar 2023 02:34:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0d:8f:48:72:33:41:24:56:28:0f:3a:e4:01:23:ab:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9a92daf08c20b4691b925cf032e5491fe0acc0
Validity
Not Before: Mar 23 08:21:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=292d1139b1cd46115ce9c5d7dfe943ab6068c9fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:15:e4:65:03:d4:b8:61:7d:9f:b1:dd:c3:62:
a3:1b:af:a9:9b:03:68:e2:d9:5c:07:3d:e9:4d:cf:
ce:07:b8:fb:7e:11:81:03:fc:42:18:3a:c0:fe:c7:
7c:30:a3:b3:bf:90:7b:2a:c6:35:c3:35:af:53:3f:
76:a7:2d:9b:d5:c6:1c:53:b9:1d:d1:83:26:f8:0f:
c8:ed:f4:dc:56:71:ea:76:6a:53:b8:2c:1e:e8:b9:
54:b5:5a:0a:4b:e9:d4:4a:ea:5c:e4:73:a1:cd:64:
a7:03:22:2d:f1:69:0a:9a:0d:d5:df:bb:71:eb:e1:
a3:8b:7d:cd:53:86:43:da:bf:27:b2:f2:0b:57:c6:
4a:1b:b9:cd:6b:8a:5b:02:a4:c6:a1:d2:26:0d:a7:
da:e9:c6:f2:ab:0f:06:60:5c:d4:1e:0f:f5:04:a8:
bf:77:cd:bc:52:e2:8a:34:42:0f:86:dd:2e:53:d8:
6c:5c:e1:d2:5c:94:48:09:01:2d:27:cd:78:5b:b4:
5f:3f:62:48:07:b1:79:ab:43:fa:a0:c6:25:4f:cb:
4b:56:c9:ee:b9:25:08:1a:1d:e5:a3:e0:f7:85:3a:
55:6b:63:c5:4a:bd:ab:31:a8:5f:3d:02:80:37:8a:
dc:4e:19:85:c7:75:85:f5:e1:64:95:d1:65:dc:41:
2a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:2D:11:39:B1:CD:46:11:5C:E9:C5:D7:DF:E9:43:AB:60:68:C9:FA
X509v3 Authority Key Identifier:
keyid:1E:9A:92:DA:F0:8C:20:B4:69:1B:92:5C:F0:32:E5:49:1F:E0:AC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpqS2vCMILRpG5Jc8DLlSR_grMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/KS0RObHNRhFc6cXX3-lDq2Boyfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.105.158.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:80:1a:bd:d6:21:fc:57:48:2e:89:2e:d2:26:aa:29:2b:84:
d9:8a:8a:1a:e7:95:df:f5:9a:85:24:56:b7:17:3b:91:59:a1:
4c:ea:e1:ce:7e:49:2f:41:91:43:9f:6a:69:64:58:3c:9e:ae:
98:14:a4:0b:50:20:d4:76:e0:1e:5e:9f:c8:0b:6c:3b:3c:52:
78:d8:92:db:bc:7c:27:8a:55:8c:cd:60:78:df:88:bb:71:70:
32:5e:0a:73:59:4d:4d:b1:5c:1f:37:b0:c0:f8:cc:14:5a:ec:
d0:09:77:a6:19:4e:76:13:55:73:04:55:30:d0:0e:cb:df:fa:
09:c2:e0:20:a1:21:d2:3c:27:e5:81:19:9d:13:55:db:f6:2a:
67:d9:29:32:53:61:22:ed:ab:00:90:31:d0:6d:f5:bb:cf:8f:
f7:e4:61:92:81:6b:6d:fc:c0:c7:a0:51:34:4f:76:64:de:19:
d3:c8:b2:bb:7c:1b:45:be:4e:03:81:fb:1b:3e:7f:e6:0d:84:
31:2d:f4:2d:41:b5:15:4b:41:98:ea:eb:ba:04:b1:3d:d5:bd:
f1:75:27:f8:f5:91:f8:b8:99:dc:82:fe:2d:6f:29:97:ef:5c:
3e:1f:82:5f:9a:6d:92:af:2d:e0:71:55:f7:29:3e:77:c2:6f:
91:a6:aa:9f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYcNj0hyM0EkVigPOuQBI6tMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlOWE5MmRhZjA4YzIwYjQ2OTFiOTI1Y2YwMzJlNTQ5MWZl
MGFjYzAwHhcNMjMwMzIzMDgyMTQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOTJkMTEzOWIxY2Q0NjExNWNlOWM1ZDdkZmU5NDNhYjYwNjhjOWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhXkZQPUuGF9n7Hdw2KjG6+pmwNo
4tlcBz3pTc/OB7j7fhGBA/xCGDrA/sd8MKOzv5B7KsY1wzWvUz92py2b1cYcU7kd
0YMm+A/I7fTcVnHqdmpTuCwe6LlUtVoKS+nUSupc5HOhzWSnAyIt8WkKmg3V37tx
6+Gji33NU4ZD2r8nsvILV8ZKG7nNa4pbAqTGodImDafa6cbyqw8GYFzUHg/1BKi/
d828UuKKNEIPht0uU9hsXOHSXJRICQEtJ814W7RfP2JIB7F5q0P6oMYlT8tLVsnu
uSUIGh3lo+D3hTpVa2PFSr2rMahfPQKAN4rcThmFx3WF9eFkldFl3EEqbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCktETmxzUYRXOnF19/pQ6tgaMn6MB8GA1UdIwQY
MBaAFB6aktrwjCC0aRuSXPAy5Ukf4KzAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHBxUzJ2Q01JTFJwRzVKYzhETGxTUl9nck1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9jMTQxMTUtOGNmOC00MGM4LTg3Yzgt
Y2U4MmViZTExYWM4LzEvS1MwUk9iSE5SaEZjNmNYWDMtbERxMkJveWZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9jMTQxMTUtOGNmOC00MGM4LTg3YzgtY2U4MmViZTExYWM4
LzEvSHBxUzJ2Q01JTFJwRzVKYzhETGxTUl9nck1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBWWmeMA0G
CSqGSIb3DQEBCwUAA4IBAQAdgBq91iH8V0guiS7SJqopK4TZiooa55Xf9ZqFJFa3
FzuRWaFM6uHOfkkvQZFDn2ppZFg8nq6YFKQLUCDUduAeXp/IC2w7PFJ42JLbvHwn
ilWMzWB434i7cXAyXgpzWU1NsVwfN7DA+MwUWuzQCXemGU52E1VzBFUw0A7L3/oJ
wuAgoSHSPCflgRmdE1Xb9ipn2SkyU2Ei7asAkDHQbfW7z4/35GGSgWtt/MDHoFE0
T3Zk3hnTyLK7fBtFvk4DgfsbPn/mDYQxLfQtQbUVS0GY6uu6BLE91b3xdSf49ZH4
uJncgv4tbymX71w+H4Jfmm2Sry3gcVX3KT53wm+Rpqqf
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:24 2024 by rpki-client on console-ams.rpki-client.org