Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/t7AbljR6rkFRG6JgsZLxp9vhq9g.roa
File: t7AbljR6rkFRG6JgsZLxp9vhq9g.roa (raw, json)
Hash identifier: MCDOTO55fr4Y4KLw1GThw+5Hjh/ZUKHMjN5iGeVr3KM=
Subject key identifier: B7:B0:1B:96:34:7A:AE:41:51:1B:A2:60:B1:92:F1:A7:DB:E1:AB:D8
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019270692604F2D13BFF10BA133E039A6115
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/t7AbljR6rkFRG6JgsZLxp9vhq9g.roa
Signing time: Wed 09 Oct 2024 08:33:12 +0000
ROA not before: Wed 09 Oct 2024 08:33:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 89.36.22.0/24 maxlen: 24
185.121.122.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sun 13 Oct 2024 11:28:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:70:69:26:04:f2:d1:3b:ff:10:ba:13:3e:03:9a:61:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Oct 9 08:33:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b7b01b96347aae41511ba260b192f1a7dbe1abd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b3:0b:1c:b5:f8:45:4e:1c:d3:c7:a8:79:65:
d4:b5:ce:41:83:ec:4d:d0:0a:ad:38:60:d9:ca:1b:
81:60:c6:13:a5:21:72:6d:d3:67:bb:8a:48:32:ec:
4c:b6:2b:8f:00:9a:9f:e4:0e:d2:a3:6a:45:89:1e:
79:3a:dd:22:2a:8b:89:57:61:57:33:22:fa:bf:ee:
3c:b6:d2:72:4a:ce:10:18:55:bd:2c:46:be:8c:03:
91:f7:42:08:33:3a:31:f5:f4:fb:42:fc:71:51:23:
d6:cc:70:14:6a:bf:84:e9:d2:6b:58:34:88:08:23:
e5:e3:3d:3b:25:cf:e1:94:90:87:b3:49:e6:92:83:
91:f4:c9:9d:52:de:2e:d1:84:95:44:8f:04:6e:52:
ad:d3:2f:05:33:68:30:18:d6:3f:7e:55:8c:c5:f1:
fc:06:a6:a8:01:35:28:63:0f:d6:a9:27:77:9f:7d:
78:0a:9b:12:e3:88:56:b6:99:aa:6e:20:8e:29:19:
69:a9:0e:c1:9a:ed:9a:4b:83:2d:6a:c9:92:07:0a:
37:f1:de:f5:29:31:bf:81:83:2a:06:e5:1d:c5:75:
71:b5:f4:76:6d:18:2f:fd:c2:b4:71:d8:e8:ed:6e:
9c:7f:39:35:e1:ee:98:3b:24:f7:43:bb:4d:ca:30:
90:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B0:1B:96:34:7A:AE:41:51:1B:A2:60:B1:92:F1:A7:DB:E1:AB:D8
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/t7AbljR6rkFRG6JgsZLxp9vhq9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.36.22.0/24
185.121.122.0/23
Signature Algorithm: sha256WithRSAEncryption
44:20:d4:7d:91:36:e5:94:ad:26:24:a8:39:c2:20:6c:28:01:
b7:34:d5:92:79:e3:74:9d:64:d3:d8:10:fd:0c:81:ef:e7:45:
3f:06:ec:6a:ad:91:ef:75:38:99:9e:ed:87:eb:44:cd:dd:1e:
0a:af:c4:31:04:fb:93:36:83:cb:f0:ed:10:16:41:63:63:65:
7a:25:eb:7c:fc:a1:e3:3b:de:8f:6a:76:f5:d4:10:67:6a:94:
4d:fc:0c:f7:ea:94:93:3c:88:6e:4a:50:b0:dd:f4:58:61:f1:
70:74:61:4c:45:71:71:26:4c:eb:e6:46:08:f8:04:ec:1c:57:
4a:f5:8d:43:3f:27:af:89:45:c2:16:ee:2d:41:1d:a5:75:da:
dc:96:3e:b1:ed:ff:22:69:60:84:cb:1d:b6:bf:b5:96:f9:e2:
13:a8:fd:86:39:53:5c:c8:8d:2c:7c:8d:a2:ba:f8:82:fa:bc:
17:61:c5:a4:74:3d:38:7d:19:63:07:b1:3c:76:da:ad:8b:b7:
5b:4b:f4:f3:89:74:c3:bd:25:90:d1:97:79:75:c3:37:c3:b8:
87:2e:3d:31:25:6d:8e:41:18:b0:7c:82:79:05:74:e6:a1:37:
79:b1:cd:35:6d:b1:95:e4:04:59:33:ea:37:84:fe:b2:a4:57:
44:5b:34:8a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZJwaSYE8tE7/xC6Ez4DmmEVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjQxMDA5MDgzMzEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiN2IwMWI5NjM0N2FhZTQxNTExYmEyNjBiMTkyZjFhN2RiZTFhYmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrMLHLX4RU4c08eoeWXUtc5Bg+xN
0AqtOGDZyhuBYMYTpSFybdNnu4pIMuxMtiuPAJqf5A7So2pFiR55Ot0iKouJV2FX
MyL6v+48ttJySs4QGFW9LEa+jAOR90IIMzox9fT7QvxxUSPWzHAUar+E6dJrWDSI
CCPl4z07Jc/hlJCHs0nmkoOR9MmdUt4u0YSVRI8EblKt0y8FM2gwGNY/flWMxfH8
BqaoATUoYw/WqSd3n314CpsS44hWtpmqbiCOKRlpqQ7Bmu2aS4MtasmSBwo38d71
KTG/gYMqBuUdxXVxtfR2bRgv/cK0cdjo7W6cfzk14e6YOyT3Q7tNyjCQCwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLewG5Y0eq5BURuiYLGS8afb4avYMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvdDdBYmxqUjZya0ZSRzZKZ3NaTHhwOXZocTlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWSQWAwQB
uXl6MA0GCSqGSIb3DQEBCwUAA4IBAQBEINR9kTbllK0mJKg5wiBsKAG3NNWSeeN0
nWTT2BD9DIHv50U/BuxqrZHvdTiZnu2H60TN3R4Kr8QxBPuTNoPL8O0QFkFjY2V6
Jet8/KHjO96Panb11BBnapRN/Az36pSTPIhuSlCw3fRYYfFwdGFMRXFxJkzr5kYI
+ATsHFdK9Y1DPyeviUXCFu4tQR2lddrclj6x7f8iaWCEyx22v7WW+eITqP2GOVNc
yI0sfI2iuviC+rwXYcWkdD04fRljB7E8dtqti7dbS/TziXTDvSWQ0Zd5dcM3w7iH
Lj0xJW2OQRiwfIJ5BXTmoTd5sc01bbGV5ARZM+o3hP6ypFdEWzSK
-----END CERTIFICATE-----
Generated at Sun Oct 13 16:46:26 2024 by rpki-client on console-ams.rpki-client.org