Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/mf6VEPFLqPbFvoQX2T4U7Etpj_g.roa
File: mf6VEPFLqPbFvoQX2T4U7Etpj_g.roa (raw, json)
Hash identifier: GgS9fC6O5o6PKXeJ5Q51wVXtAK8J/Q/sgTcojeuw08A=
Subject key identifier: 99:FE:95:10:F1:4B:A8:F6:C5:BE:84:17:D9:3E:14:EC:4B:69:8F:F8
Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Certificate serial: 01879F38A16D5DE5910AD146735F2633A1D6
Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/mf6VEPFLqPbFvoQX2T4U7Etpj_g.roa
Signing time: Thu 20 Apr 2023 15:11:41 +0000
ROA not before: Thu 20 Apr 2023 15:11:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209372
IP address blocks: 89.185.78.0/24 maxlen: 24
89.185.86.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9f:38:a1:6d:5d:e5:91:0a:d1:46:73:5f:26:33:a1:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Validity
Not Before: Apr 20 15:11:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99fe9510f14ba8f6c5be8417d93e14ec4b698ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:44:18:0e:9e:d5:1e:4b:20:54:ea:45:e5:e5:
59:21:11:af:ce:3f:2a:43:54:77:2f:1d:c3:99:df:
4a:6b:5f:96:d1:29:84:f1:c7:a6:73:91:22:fd:c9:
c7:a8:74:48:68:cb:43:98:bf:6d:e8:96:63:ed:0c:
dc:0e:1f:96:d8:24:90:1a:7e:bf:3d:05:ed:b4:86:
fd:59:45:1c:61:a5:09:56:2c:01:34:6c:3c:dc:90:
b4:f1:fb:fd:d0:82:1d:5b:93:10:6b:32:35:3e:76:
9a:f8:8b:d2:71:64:0b:3d:b5:96:a9:4b:d6:ad:8e:
93:8c:35:81:bd:d8:3f:10:8e:a4:9e:34:72:5d:06:
ec:f1:6f:44:59:62:b0:7f:81:70:1c:d7:13:ec:69:
e1:a6:e3:eb:e2:b8:c6:a1:fd:41:8f:90:a3:ff:e8:
49:4c:15:52:28:d0:5b:c4:2a:18:ee:1b:13:e0:79:
74:af:9d:ef:5d:28:65:c0:3e:09:42:08:fe:99:8b:
04:9e:55:d8:e2:ec:29:03:c5:1e:12:7b:a6:1b:5f:
4c:bc:a0:d1:2f:d1:ee:dc:8e:44:55:1d:af:c4:9b:
9f:ed:85:75:96:22:ee:89:94:d6:bb:0a:b3:b5:ba:
e0:40:a5:fd:8c:92:51:ad:25:7e:0d:a3:59:03:c7:
e1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FE:95:10:F1:4B:A8:F6:C5:BE:84:17:D9:3E:14:EC:4B:69:8F:F8
X509v3 Authority Key Identifier:
keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/mf6VEPFLqPbFvoQX2T4U7Etpj_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.78.0/24
89.185.86.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:70:16:16:f9:ba:9c:5a:28:4b:61:35:c8:d5:64:66:49:d1:
7f:ae:0a:36:3c:f8:df:be:81:79:0b:ec:54:e3:e0:05:6f:1b:
0c:f7:e6:cf:4d:6d:98:b2:b1:6c:0d:7e:40:98:50:61:b1:d4:
65:77:51:3c:92:df:1b:53:14:96:ec:d1:be:5e:e7:48:b8:97:
c3:bb:a6:c1:10:4c:d6:a8:b1:18:1c:ec:49:bf:fc:0a:8f:af:
e1:62:e7:7c:1d:7d:93:7f:37:b5:b8:43:9e:3e:a0:16:8e:c1:
dc:75:d1:70:70:61:6f:42:ab:ee:04:62:be:f6:bf:f8:b8:9f:
2d:33:88:b8:71:96:44:fb:79:6c:a0:9d:18:ac:f2:64:4a:63:
26:66:48:28:dc:df:7a:c5:19:fd:d4:08:7a:ad:ad:de:0b:92:
af:a5:e6:7d:72:55:75:53:c6:1f:99:89:70:1e:c0:42:53:c2:
56:65:ca:e5:10:b0:b5:03:fe:de:77:8e:5d:f7:c1:28:92:86:
fb:66:e9:39:15:ef:ae:5c:1b:84:35:97:78:8f:ba:5c:2b:be:
09:27:a2:33:14:2a:b1:f7:47:60:38:4f:69:e7:9e:24:b7:4f:
ef:38:02:a3:c5:92:24:1a:f9:94:48:9c:ae:cc:f4:33:6c:a3:
27:d1:0e:ad
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYefOKFtXeWRCtFGc18mM6HWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNTdjMmQ5ZDkzYWM3Y2Y5YjJmMTdjYWE3ODU5YjY5ODVi
MzliOWQwHhcNMjMwNDIwMTUxMTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OWZlOTUxMGYxNGJhOGY2YzViZTg0MTdkOTNlMTRlYzRiNjk4ZmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUQYDp7VHksgVOpF5eVZIRGvzj8q
Q1R3Lx3Dmd9Ka1+W0SmE8cemc5Ei/cnHqHRIaMtDmL9t6JZj7QzcDh+W2CSQGn6/
PQXttIb9WUUcYaUJViwBNGw83JC08fv90IIdW5MQazI1Pnaa+IvScWQLPbWWqUvW
rY6TjDWBvdg/EI6knjRyXQbs8W9EWWKwf4FwHNcT7GnhpuPr4rjGof1Bj5Cj/+hJ
TBVSKNBbxCoY7hsT4Hl0r53vXShlwD4JQgj+mYsEnlXY4uwpA8UeEnumG19MvKDR
L9Hu3I5EVR2vxJuf7YV1liLuiZTWuwqztbrgQKX9jJJRrSV+DaNZA8fhnwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJn+lRDxS6j2xb6EF9k+FOxLaY/4MB8GA1UdIwQY
MBaAFO9XwtnZOsfPmy8XyqeFm2mFs5udMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2Njct
OGU2Zjg3OGRiNWY0LzEvbWY2VkVQRkxxUGJGdm9RWDJUNFU3RXRwal9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2NjctOGU2Zjg3OGRiNWY0
LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWblOAwQB
WblWMA0GCSqGSIb3DQEBCwUAA4IBAQCrcBYW+bqcWihLYTXI1WRmSdF/rgo2PPjf
voF5C+xU4+AFbxsM9+bPTW2YsrFsDX5AmFBhsdRld1E8kt8bUxSW7NG+XudIuJfD
u6bBEEzWqLEYHOxJv/wKj6/hYud8HX2Tfze1uEOePqAWjsHcddFwcGFvQqvuBGK+
9r/4uJ8tM4i4cZZE+3lsoJ0YrPJkSmMmZkgo3N96xRn91Ah6ra3eC5KvpeZ9clV1
U8YfmYlwHsBCU8JWZcrlELC1A/7ed45d98Eokob7Zuk5Fe+uXBuENZd4j7pcK74J
J6IzFCqx90dgOE9p554kt0/vOAKjxZIkGvmUSJyuzPQzbKMn0Q6t
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:06 2023 by rpki-client on console-ams.rpki-client.org