Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/Iud5WYQefrp99ArfEvr0a-s_2Lw.roa
File: Iud5WYQefrp99ArfEvr0a-s_2Lw.roa (raw, json)
Hash identifier: 3bz7DjODwisPschiLXImSEBLPAJMzxdTQLh0GBHtuYw=
Subject key identifier: 22:E7:79:59:84:1E:7E:BA:7D:F4:0A:DF:12:FA:F4:6B:EB:3F:D8:BC
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 01856E41E582C297A2DB51C8FFB0F66CC2E7
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/Iud5WYQefrp99ArfEvr0a-s_2Lw.roa
Signing time: Sun 01 Jan 2023 16:54:50 +0000
ROA not before: Sun 01 Jan 2023 16:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207958
IP address blocks: 89.39.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:41:e5:82:c2:97:a2:db:51:c8:ff:b0:f6:6c:c2:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 16:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22e77959841e7eba7df40adf12faf46beb3fd8bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:26:2c:e7:cf:89:06:8c:28:c2:35:af:0f:e7:
1c:b1:4a:e0:f7:31:6f:81:ec:54:1b:97:81:6b:27:
f8:17:9d:b1:45:84:89:fe:37:ec:54:ca:90:39:13:
88:69:4c:e8:39:5e:66:64:0d:c8:44:3c:2d:86:b0:
b1:14:8d:cc:f9:60:54:b8:13:2f:8b:e1:c4:1a:f9:
e9:5d:92:3a:53:ff:c3:58:63:5b:c7:3f:52:bc:09:
cb:c5:cf:5a:e8:2f:39:7d:64:f4:fa:31:eb:e5:8f:
a1:07:73:dd:08:a3:b7:3e:33:9c:b0:a9:09:f7:fe:
eb:f7:61:9b:5e:e4:7c:21:4f:5b:ea:05:dd:cd:a4:
a9:09:52:05:77:0b:a4:15:25:c9:75:c9:a2:4b:7b:
53:b8:c5:1b:a1:8a:16:62:52:95:b3:ec:4a:42:e4:
95:65:74:3b:4c:b3:47:42:f5:46:40:f9:46:0e:f9:
3c:b9:1f:1e:60:67:4b:80:d3:97:11:82:a4:8c:b6:
7b:48:d6:61:ab:be:36:56:e3:0f:98:16:72:4a:28:
27:64:2f:9b:89:2c:35:bb:bc:f6:68:77:e2:fc:a7:
48:06:e3:06:83:a5:01:34:6c:ef:88:8f:b9:9a:f3:
f4:aa:af:72:a6:6a:c6:e8:62:c1:1f:28:52:4a:b0:
bc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E7:79:59:84:1E:7E:BA:7D:F4:0A:DF:12:FA:F4:6B:EB:3F:D8:BC
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/Iud5WYQefrp99ArfEvr0a-s_2Lw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.93.0/24
Signature Algorithm: sha256WithRSAEncryption
95:0a:13:15:16:8e:4d:74:60:c5:be:00:2e:66:19:b2:ac:ff:
9c:c0:7f:4e:50:ad:d6:fb:53:f4:b0:65:3b:4d:cf:79:b3:28:
d8:01:55:c4:89:6a:b0:8b:b0:61:6c:0d:e1:55:cf:ab:a4:07:
fe:68:fe:60:4d:8d:74:f0:be:28:0d:eb:8a:fb:cd:66:8c:ed:
d6:4c:0c:da:5a:97:af:b7:3e:15:68:ee:d3:16:70:80:a9:ce:
74:88:6c:51:05:56:56:b9:a2:29:c1:22:f9:57:1f:34:81:88:
8b:36:05:ec:17:f2:6f:89:82:52:f3:6f:10:e1:3f:6a:8b:cc:
60:5e:cf:43:76:63:98:65:93:a3:8b:ed:83:5c:fe:13:60:f5:
5b:a6:6d:6d:f9:e7:35:6f:dd:4f:0b:99:a2:21:ec:25:08:7d:
9b:83:e8:5c:b8:55:4d:d7:56:bc:01:4b:c7:ea:5d:f7:32:61:
e2:96:f9:51:09:91:f2:78:c3:a8:ba:a1:1c:81:74:eb:4e:95:
1c:a5:ab:39:ba:9e:68:de:23:52:e6:f8:d2:73:83:35:3a:8c:
26:ec:a9:0d:33:6b:2d:94:8f:09:7c:f3:6d:12:66:1d:3d:66:
f0:96:d9:28:8a:51:27:f4:c0:2f:17:c4:9c:21:34:2b:6f:d2:
3a:b3:6d:db
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuQeWCwpei21HI/7D2bMLnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZjEzMmRmMTNlNGJlNTNkODI1MGM4YzQ4NDIwMjY0ZWVm
NmMxNGMwHhcNMjMwMTAxMTY1NDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMmU3Nzk1OTg0MWU3ZWJhN2RmNDBhZGYxMmZhZjQ2YmViM2ZkOGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCYs58+JBowowjWvD+ccsUrg9zFv
gexUG5eBayf4F52xRYSJ/jfsVMqQOROIaUzoOV5mZA3IRDwthrCxFI3M+WBUuBMv
i+HEGvnpXZI6U//DWGNbxz9SvAnLxc9a6C85fWT0+jHr5Y+hB3PdCKO3PjOcsKkJ
9/7r92GbXuR8IU9b6gXdzaSpCVIFdwukFSXJdcmiS3tTuMUboYoWYlKVs+xKQuSV
ZXQ7TLNHQvVGQPlGDvk8uR8eYGdLgNOXEYKkjLZ7SNZhq742VuMPmBZySignZC+b
iSw1u7z2aHfi/KdIBuMGg6UBNGzviI+5mvP0qq9ypmrG6GLBHyhSSrC8swIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCLneVmEHn66ffQK3xL69GvrP9i8MB8GA1UdIwQY
MBaAFH3xMt8T5L5T2CUMjEhCAmTu9sFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYt
OTc3ODY3NGVkYzk3LzEvSXVkNVdZUWVmcnA5OUFyZkV2cjBhLXNfMkx3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYtOTc3ODY3NGVkYzk3
LzEvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSddMA0G
CSqGSIb3DQEBCwUAA4IBAQCVChMVFo5NdGDFvgAuZhmyrP+cwH9OUK3W+1P0sGU7
Tc95syjYAVXEiWqwi7BhbA3hVc+rpAf+aP5gTY108L4oDeuK+81mjO3WTAzaWpev
tz4VaO7TFnCAqc50iGxRBVZWuaIpwSL5Vx80gYiLNgXsF/JviYJS828Q4T9qi8xg
Xs9DdmOYZZOji+2DXP4TYPVbpm1t+ec1b91PC5miIewlCH2bg+hcuFVN11a8AUvH
6l33MmHilvlRCZHyeMOouqEcgXTrTpUcpas5up5o3iNS5vjSc4M1Oowm7KkNM2st
lI8JfPNtEmYdPWbwltkoilEn9MAvF8ScITQrb9I6s23b
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:41 2024 by rpki-client on console-ams.rpki-client.org