Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/D-wtfvxi9cMPEcyfm6tnSp5zHqQ.roa
File: D-wtfvxi9cMPEcyfm6tnSp5zHqQ.roa (raw, json)
Hash identifier: sdmd3C2hvLRkZB3JotNB0+Finuwng2nPWwU00mY4vt0=
Subject key identifier: 0F:EC:2D:7E:FC:62:F5:C3:0F:11:CC:9F:9B:AB:67:4A:9E:73:1E:A4
Certificate issuer: /CN=fe1d18d9a222736dbac231110b88deac8db0336d
Certificate serial: 01856BE5B23C25412E41B81ACEE9C96A728F
Authority key identifier: FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/D-wtfvxi9cMPEcyfm6tnSp5zHqQ.roa
Signing time: Sun 01 Jan 2023 05:54:53 +0000
ROA not before: Sun 01 Jan 2023 05:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13156
IP address blocks: 89.26.188.0/22 maxlen: 24
89.26.176.0/22 maxlen: 24
89.26.184.0/22 maxlen: 24
89.26.180.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Feb 2023 18:48:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:e5:b2:3c:25:41:2e:41:b8:1a:ce:e9:c9:6a:72:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe1d18d9a222736dbac231110b88deac8db0336d
Validity
Not Before: Jan 1 05:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0fec2d7efc62f5c30f11cc9f9bab674a9e731ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:60:f9:b9:15:0b:73:bc:ab:de:86:65:74:57:
8b:9a:96:f5:f2:f8:86:a4:f7:bf:44:d1:05:53:b3:
95:4d:d2:ef:64:44:33:4d:41:35:2f:b4:7b:93:29:
d3:d3:c4:11:28:e1:e8:6c:21:40:2a:14:e5:a5:3d:
9d:a6:ec:58:bf:4d:d2:6b:ea:5f:8e:1b:92:71:95:
38:7a:c0:3a:da:95:da:4d:8a:60:bd:4a:2b:b1:de:
23:57:a8:60:90:0c:b6:28:80:1a:de:78:df:a5:cd:
10:02:98:cb:19:56:0c:f2:00:6e:08:fb:7c:13:d2:
ec:4f:b7:b0:8b:95:c4:66:2b:70:a3:f8:2c:be:ed:
ba:bb:8f:6c:8c:d1:81:61:28:45:9f:75:35:52:d6:
5c:76:7b:b3:e5:f6:10:e7:cd:1c:3e:69:38:79:fb:
34:47:3f:fb:80:0d:d2:95:d6:3a:18:b1:f6:6d:90:
27:0b:ec:64:6a:51:0b:b3:5f:67:2a:0f:5f:db:80:
d3:4a:6f:98:59:90:81:61:b2:c0:a8:8b:92:27:51:
e7:51:fe:6f:d4:d7:4d:12:e1:f4:0e:18:87:9f:e8:
95:b9:08:c4:6d:ad:52:b5:c0:f6:7a:d6:25:24:ec:
8c:01:bf:6e:45:61:d1:11:d8:5e:14:c4:4a:71:16:
d0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:EC:2D:7E:FC:62:F5:C3:0F:11:CC:9F:9B:AB:67:4A:9E:73:1E:A4
X509v3 Authority Key Identifier:
keyid:FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/D-wtfvxi9cMPEcyfm6tnSp5zHqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.26.176.0/20
Signature Algorithm: sha256WithRSAEncryption
3e:f0:a9:1f:4a:23:fa:d6:c5:fd:9f:03:95:a7:0b:33:11:89:
17:ce:f7:af:e3:10:ac:47:df:71:57:0e:55:3d:3d:f6:c4:ec:
c9:1b:af:e6:45:c3:d9:46:91:18:95:5f:26:9f:a0:46:f5:e9:
1e:94:f2:dc:88:dd:c3:a4:d2:c0:e5:cf:fa:c6:7c:c0:a9:17:
8f:af:60:e9:f8:03:0b:7c:7f:c4:19:0a:22:14:c2:95:c4:d5:
63:61:0a:42:75:5b:c3:27:76:63:d8:65:e0:08:41:f4:f3:b7:
b4:ad:d3:60:a5:14:8f:49:44:b3:1f:1c:a5:fe:13:7e:45:f4:
e9:d9:c5:b0:dc:8e:21:ab:db:73:d4:12:d3:68:f7:f7:f6:49:
b2:b5:f7:80:80:fc:8e:f0:00:13:15:49:6b:d2:8e:78:c4:7e:
ab:15:4c:8b:bb:9c:27:f7:d7:61:12:77:8a:be:6c:7a:1b:44:
f3:f4:7e:c3:79:9d:01:82:16:a8:86:eb:ed:47:53:b2:4a:07:
3b:cb:18:e9:8f:a4:53:0e:40:b8:f9:47:e5:3a:19:59:2f:20:
b2:01:ca:c7:d6:4a:ce:e9:f3:6d:8e:df:7e:dd:2f:32:91:30:
b7:a7:2e:b1:89:d6:88:67:20:75:e7:ee:c6:97:1a:51:f3:4d:
64:8d:a4:b4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVr5bI8JUEuQbgazunJanKPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlMWQxOGQ5YTIyMjczNmRiYWMyMzExMTBiODhkZWFjOGRi
MDMzNmQwHhcNMjMwMTAxMDU1NDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZmVjMmQ3ZWZjNjJmNWMzMGYxMWNjOWY5YmFiNjc0YTllNzMxZWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGD5uRULc7yr3oZldFeLmpb18viG
pPe/RNEFU7OVTdLvZEQzTUE1L7R7kynT08QRKOHobCFAKhTlpT2dpuxYv03Sa+pf
jhuScZU4esA62pXaTYpgvUorsd4jV6hgkAy2KIAa3njfpc0QApjLGVYM8gBuCPt8
E9LsT7ewi5XEZitwo/gsvu26u49sjNGBYShFn3U1UtZcdnuz5fYQ580cPmk4efs0
Rz/7gA3SldY6GLH2bZAnC+xkalELs19nKg9f24DTSm+YWZCBYbLAqIuSJ1HnUf5v
1NdNEuH0DhiHn+iVuQjEba1StcD2etYlJOyMAb9uRWHREdheFMRKcRbQ3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA/sLX78YvXDDxHMn5urZ0qecx6kMB8GA1UdIwQY
MBaAFP4dGNmiInNtusIxEQuI3qyNsDNtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2gwWTJhSWljMjI2d2pFUkM0amVySTJ3TTIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC82NGUxZWYtOWJhOC00MzA3LWJmYWQt
NjU4N2Y3NmZkODEwLzEvRC13dGZ2eGk5Y01QRWN5Zm02dG5TcDV6SHFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC82NGUxZWYtOWJhOC00MzA3LWJmYWQtNjU4N2Y3NmZkODEw
LzEvX2gwWTJhSWljMjI2d2pFUkM0amVySTJ3TTIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEWRqwMA0G
CSqGSIb3DQEBCwUAA4IBAQA+8KkfSiP61sX9nwOVpwszEYkXzvev4xCsR99xVw5V
PT32xOzJG6/mRcPZRpEYlV8mn6BG9ekelPLciN3DpNLA5c/6xnzAqRePr2Dp+AML
fH/EGQoiFMKVxNVjYQpCdVvDJ3Zj2GXgCEH087e0rdNgpRSPSUSzHxyl/hN+RfTp
2cWw3I4hq9tz1BLTaPf39kmytfeAgPyO8AATFUlr0o54xH6rFUyLu5wn99dhEneK
vmx6G0Tz9H7DeZ0BghaohuvtR1OySgc7yxjpj6RTDkC4+UflOhlZLyCyAcrH1krO
6fNtjt9+3S8ykTC3py6xidaIZyB15+7GlxpR801kjaS0
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:46 2024 by rpki-client on console-fra.rpki-client.org