Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/ttHtS9Hy4yW5zsljBqNLS5-2bSo.roa
File: ttHtS9Hy4yW5zsljBqNLS5-2bSo.roa (raw, json)
Hash identifier: WFG8DmcGIqn+vp8d0KKnj55ZPWxeRSTTMqz8i2ojdJ8=
Subject key identifier: B6:D1:ED:4B:D1:F2:E3:25:B9:CE:C9:63:06:A3:4B:4B:9F:B6:6D:2A
Certificate issuer: /CN=0c1037c17bc15a7c9d8569887f5b05835ce32d27
Certificate serial: 01856FA6EE7C273374CC8A45E70FEC300FAD
Authority key identifier: 0C:10:37:C1:7B:C1:5A:7C:9D:85:69:88:7F:5B:05:83:5C:E3:2D:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/ttHtS9Hy4yW5zsljBqNLS5-2bSo.roa
Signing time: Sun 01 Jan 2023 23:24:48 +0000
ROA not before: Sun 01 Jan 2023 23:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41557
IP address blocks: 89.205.0.0/17 maxlen: 17
89.205.0.0/21 maxlen: 21
89.205.8.0/21 maxlen: 21
89.205.16.0/21 maxlen: 21
89.205.24.0/21 maxlen: 21
185.47.56.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a6:ee:7c:27:33:74:cc:8a:45:e7:0f:ec:30:0f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c1037c17bc15a7c9d8569887f5b05835ce32d27
Validity
Not Before: Jan 1 23:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6d1ed4bd1f2e325b9cec96306a34b4b9fb66d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d2:23:a1:2a:97:b8:8e:15:22:24:4d:99:a1:
93:25:54:3a:81:a3:35:0b:cf:11:3f:f1:0a:43:e2:
2a:9a:78:0c:ee:f0:14:7f:6f:29:49:75:c2:c1:03:
05:e7:97:ac:7c:ee:e9:fb:a5:fd:e2:b6:ea:fd:69:
e5:df:a6:0a:2d:f0:e0:48:61:b3:e9:0d:43:8e:4f:
9d:d1:36:42:73:b8:3c:09:32:77:b0:a4:a3:33:23:
3c:e5:a5:9e:ca:79:47:19:f4:3b:e7:0e:dd:88:95:
0b:c1:67:51:c3:e4:94:a1:ce:fb:2f:53:70:fe:37:
ca:3c:ad:33:37:1b:58:74:62:05:cb:72:14:b0:d1:
76:66:ab:ca:d4:2c:a5:0c:dd:b6:f7:6a:df:d7:e1:
5c:30:c6:37:e7:96:ed:87:34:2d:75:62:64:94:c9:
9c:a4:bd:e1:2b:e8:0f:8d:f4:b9:7c:5f:43:71:5a:
ef:3b:c8:b5:7d:a6:e0:61:7a:7c:6d:3a:64:7a:18:
4f:7c:2a:6a:fd:4b:0f:31:a6:a3:06:e4:c8:00:2d:
3f:2a:7a:2a:e0:11:1a:3f:64:12:ac:4e:9a:8d:76:
18:0d:13:b5:b3:9c:e5:e6:f7:85:c7:ec:49:c3:69:
43:dd:15:b0:4e:ff:7c:c5:19:1d:2e:98:5e:12:dc:
0a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D1:ED:4B:D1:F2:E3:25:B9:CE:C9:63:06:A3:4B:4B:9F:B6:6D:2A
X509v3 Authority Key Identifier:
keyid:0C:10:37:C1:7B:C1:5A:7C:9D:85:69:88:7F:5B:05:83:5C:E3:2D:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/ttHtS9Hy4yW5zsljBqNLS5-2bSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.205.0.0/17
185.47.56.0/22
Signature Algorithm: sha256WithRSAEncryption
43:61:12:46:0e:41:fa:bb:43:92:07:86:cd:f3:2c:15:29:fd:
0f:64:c2:55:7e:8c:22:4b:d9:b0:db:86:42:30:79:29:4f:db:
41:d9:ef:87:3d:e8:37:54:10:b8:92:42:af:db:65:86:3a:f6:
e9:ba:37:89:46:23:49:c4:bc:5d:8c:3d:3f:eb:e8:ac:d8:a7:
08:ac:8a:ca:05:ad:88:39:50:09:8c:21:67:c3:c4:61:01:12:
42:a1:c9:47:52:cd:3c:a9:3e:d7:fb:17:b9:27:9f:31:d0:cf:
5d:a2:27:c3:19:3a:a9:e5:46:df:4b:d4:5d:14:52:f7:4e:eb:
16:13:82:5d:c2:47:ad:33:b8:1c:34:b2:a3:a0:7d:7d:d9:0e:
98:65:c8:d5:54:ee:db:1f:6a:e8:f0:fb:e4:4d:e3:15:64:a2:
14:77:34:6f:e5:28:6e:2d:4f:36:5d:10:ae:fe:de:81:e5:07:
bc:4b:90:2f:1a:38:00:92:97:a6:3f:6e:d7:10:dc:08:7b:dc:
fb:1d:08:15:bf:74:d7:27:d4:59:f6:67:aa:18:5f:32:f9:6b:
78:13:36:02:c3:05:91:ed:d0:70:7e:fd:60:d7:eb:80:68:b5:
d0:7a:32:01:1f:a3:a2:b6:4e:80:79:d4:6c:a6:4a:ba:81:3b:
3e:63:46:53
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVvpu58JzN0zIpF5w/sMA+tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMTAzN2MxN2JjMTVhN2M5ZDg1Njk4ODdmNWIwNTgzNWNl
MzJkMjcwHhcNMjMwMTAxMjMyNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNmQxZWQ0YmQxZjJlMzI1YjljZWM5NjMwNmEzNGI0YjlmYjY2ZDJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9IjoSqXuI4VIiRNmaGTJVQ6gaM1
C88RP/EKQ+IqmngM7vAUf28pSXXCwQMF55esfO7p+6X94rbq/Wnl36YKLfDgSGGz
6Q1Djk+d0TZCc7g8CTJ3sKSjMyM85aWeynlHGfQ75w7diJULwWdRw+SUoc77L1Nw
/jfKPK0zNxtYdGIFy3IUsNF2ZqvK1CylDN2292rf1+FcMMY355bthzQtdWJklMmc
pL3hK+gPjfS5fF9DcVrvO8i1fabgYXp8bTpkehhPfCpq/UsPMaajBuTIAC0/Knoq
4BEaP2QSrE6ajXYYDRO1s5zl5veFx+xJw2lD3RWwTv98xRkdLpheEtwKXwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLbR7UvR8uMluc7JYwajS0uftm0qMB8GA1UdIwQY
MBaAFAwQN8F7wVp8nYVpiH9bBYNc4y0nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREJBM3dYdkJXbnlkaFdtSWYxc0ZnMXpqTFNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hNjJhN2ItOGY3Ni00ODk5LWExNTMt
OGM1MDAyOTVjYjk2LzEvdHRIdFM5SHk0eVc1enNsakJxTkxTNS0yYlNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9hNjJhN2ItOGY3Ni00ODk5LWExNTMtOGM1MDAyOTVjYjk2
LzEvREJBM3dYdkJXbnlkaFdtSWYxc0ZnMXpqTFNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQHWc0AAwQC
uS84MA0GCSqGSIb3DQEBCwUAA4IBAQBDYRJGDkH6u0OSB4bN8ywVKf0PZMJVfowi
S9mw24ZCMHkpT9tB2e+HPeg3VBC4kkKv22WGOvbpujeJRiNJxLxdjD0/6+is2KcI
rIrKBa2IOVAJjCFnw8RhARJCoclHUs08qT7X+xe5J58x0M9doifDGTqp5UbfS9Rd
FFL3TusWE4JdwketM7gcNLKjoH192Q6YZcjVVO7bH2ro8PvkTeMVZKIUdzRv5Shu
LU82XRCu/t6B5Qe8S5AvGjgAkpemP27XENwIe9z7HQgVv3TXJ9RZ9meqGF8y+Wt4
EzYCwwWR7dBwfv1g1+uAaLXQejIBH6Oitk6AedRspkq6gTs+Y0ZT
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:48 2023 by rpki-client on console-ams.rpki-client.org