Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/2iZcbVzNOV0bz9YXCnQIRmuGjjY.roa
File: 2iZcbVzNOV0bz9YXCnQIRmuGjjY.roa (raw, json)
Hash identifier: 0yFHKx49K/nVF4bZM3JX3n5wNZYdExuxK6S4rzYyS2E=
Subject key identifier: DA:26:5C:6D:5C:CD:39:5D:1B:CF:D6:17:0A:74:08:46:6B:86:8E:36
Certificate issuer: /CN=fe1d18d9a222736dbac231110b88deac8db0336d
Certificate serial: 01856BE5B2E5CDDD18F74C32FC6B1F04C223
Authority key identifier: FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/2iZcbVzNOV0bz9YXCnQIRmuGjjY.roa
Signing time: Sun 01 Jan 2023 05:54:53 +0000
ROA not before: Sun 01 Jan 2023 05:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57286
IP address blocks: 89.26.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:e5:b2:e5:cd:dd:18:f7:4c:32:fc:6b:1f:04:c2:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe1d18d9a222736dbac231110b88deac8db0336d
Validity
Not Before: Jan 1 05:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da265c6d5ccd395d1bcfd6170a7408466b868e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:88:b0:56:01:25:c9:e0:f3:54:22:ab:23:f9:
b1:97:72:df:11:4c:7a:73:c4:1d:55:ff:17:09:c7:
16:14:3f:44:d6:bd:0f:ec:9b:b7:d1:b8:49:4c:96:
85:d6:48:e7:ad:31:38:70:e8:d1:47:19:14:35:7f:
05:0f:5b:fc:b9:c6:89:db:17:f6:70:a6:65:86:ee:
6f:8e:6d:a5:ab:7e:3f:7c:71:51:62:5f:3e:5f:ba:
28:b5:e0:01:29:6e:f7:9c:ec:35:92:82:e2:85:aa:
7e:79:99:db:45:c3:88:ef:19:de:a7:15:6c:cd:6f:
b8:fa:99:4c:12:f8:06:6e:ed:61:a5:b8:6c:c9:7d:
f1:02:dc:6f:71:17:5c:91:62:04:eb:dc:c2:06:0e:
f7:01:07:a6:02:17:76:9d:36:60:31:96:22:52:6a:
f4:2c:a6:0e:06:a3:87:6c:aa:6f:35:46:c4:4c:b3:
7f:25:0c:95:c8:a3:45:bb:fd:3d:fa:22:c3:f3:b3:
9a:98:c4:1b:12:19:d9:e8:94:c4:4d:6d:f0:33:7b:
6f:30:16:39:fc:3b:5b:45:9f:29:7b:5a:5d:d9:97:
05:12:35:0d:5c:9c:9b:79:f4:05:7a:6c:bb:64:89:
7a:4d:72:0b:79:1d:c0:4a:ae:ae:11:86:90:18:1a:
d4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:26:5C:6D:5C:CD:39:5D:1B:CF:D6:17:0A:74:08:46:6B:86:8E:36
X509v3 Authority Key Identifier:
keyid:FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/2iZcbVzNOV0bz9YXCnQIRmuGjjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.26.229.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:96:70:c1:b4:1e:17:89:81:5c:0c:08:5a:e1:3b:3e:45:e5:
b4:e6:76:e6:0b:7f:48:2a:e7:04:de:ce:34:f3:eb:19:7f:50:
5f:07:7d:61:fc:44:8e:6f:89:7a:58:c5:cb:be:fe:91:c8:4f:
0e:03:c8:dd:4b:a2:43:4e:f3:e3:42:3b:50:70:84:9f:d9:59:
d7:44:e6:51:a1:93:89:d3:4e:24:e4:a2:23:97:38:e8:74:41:
11:72:f6:62:56:73:98:c3:16:c3:36:b8:4f:d8:a3:b1:83:2f:
fa:8f:d0:65:44:d0:96:57:3e:d9:ac:52:ba:40:71:b3:82:bf:
89:17:60:01:6a:20:9e:a8:0b:16:69:8f:a4:05:38:6b:12:4a:
34:4b:52:80:d6:13:60:49:99:39:ee:15:52:b3:1e:5a:fe:3d:
e8:9b:1e:4a:e8:fb:ac:65:2e:ec:54:41:2a:2a:02:a6:5c:0d:
48:f7:ba:55:fa:73:e5:fb:9b:df:e8:88:05:18:9e:a9:53:f1:
a3:c7:84:23:38:9a:b1:96:ea:97:3d:84:00:00:25:76:88:95:
38:64:63:ac:f7:ee:74:f5:6f:03:c2:96:c9:b0:01:7f:01:3b:
46:39:6f:8a:bd:da:c0:7b:04:b9:58:53:64:4b:02:5d:87:78:
2f:75:90:3c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVr5bLlzd0Y90wy/GsfBMIjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlMWQxOGQ5YTIyMjczNmRiYWMyMzExMTBiODhkZWFjOGRi
MDMzNmQwHhcNMjMwMTAxMDU1NDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTI2NWM2ZDVjY2QzOTVkMWJjZmQ2MTcwYTc0MDg0NjZiODY4ZTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIiwVgElyeDzVCKrI/mxl3LfEUx6
c8QdVf8XCccWFD9E1r0P7Ju30bhJTJaF1kjnrTE4cOjRRxkUNX8FD1v8ucaJ2xf2
cKZlhu5vjm2lq34/fHFRYl8+X7ooteABKW73nOw1koLihap+eZnbRcOI7xnepxVs
zW+4+plMEvgGbu1hpbhsyX3xAtxvcRdckWIE69zCBg73AQemAhd2nTZgMZYiUmr0
LKYOBqOHbKpvNUbETLN/JQyVyKNFu/09+iLD87OamMQbEhnZ6JTETW3wM3tvMBY5
/DtbRZ8pe1pd2ZcFEjUNXJybefQFemy7ZIl6TXILeR3ASq6uEYaQGBrUtwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNomXG1czTldG8/WFwp0CEZrho42MB8GA1UdIwQY
MBaAFP4dGNmiInNtusIxEQuI3qyNsDNtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2gwWTJhSWljMjI2d2pFUkM0amVySTJ3TTIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC82NGUxZWYtOWJhOC00MzA3LWJmYWQt
NjU4N2Y3NmZkODEwLzEvMmlaY2JWek5PVjBiejlZWENuUUlSbXVHampZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC82NGUxZWYtOWJhOC00MzA3LWJmYWQtNjU4N2Y3NmZkODEw
LzEvX2gwWTJhSWljMjI2d2pFUkM0amVySTJ3TTIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWRrlMA0G
CSqGSIb3DQEBCwUAA4IBAQBOlnDBtB4XiYFcDAha4Ts+ReW05nbmC39IKucE3s40
8+sZf1BfB31h/ESOb4l6WMXLvv6RyE8OA8jdS6JDTvPjQjtQcISf2VnXROZRoZOJ
004k5KIjlzjodEERcvZiVnOYwxbDNrhP2KOxgy/6j9BlRNCWVz7ZrFK6QHGzgr+J
F2ABaiCeqAsWaY+kBThrEko0S1KA1hNgSZk57hVSsx5a/j3omx5K6PusZS7sVEEq
KgKmXA1I97pV+nPl+5vf6IgFGJ6pU/Gjx4QjOJqxluqXPYQAACV2iJU4ZGOs9+50
9W8DwpbJsAF/ATtGOW+KvdrAewS5WFNkSwJdh3gvdZA8
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:34 2024 by rpki-client on console-ams.rpki-client.org