Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/IhLyxgWqRnxanDpFFmVe_R8e8fo.roa
File: IhLyxgWqRnxanDpFFmVe_R8e8fo.roa (raw, json)
Hash identifier: b0gBbQm0cYj5FTdQWJ5W8nk3YKYJYMl3MaC5P1WKOHM=
Subject key identifier: 22:12:F2:C6:05:AA:46:7C:5A:9C:3A:45:16:65:5E:FD:1F:1E:F1:FA
Certificate issuer: /CN=d7d0674bd6f0cc9175219a328c8b396829f6c0af
Certificate serial: 019227B41FE29493E1602DD390192B56950E
Authority key identifier: D7:D0:67:4B:D6:F0:CC:91:75:21:9A:32:8C:8B:39:68:29:F6:C0:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/IhLyxgWqRnxanDpFFmVe_R8e8fo.roa
Signing time: Wed 25 Sep 2024 05:42:49 +0000
ROA not before: Wed 25 Sep 2024 05:42:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 32787
IP address blocks: 89.147.32.0/23 maxlen: 23
89.147.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Oct 2024 12:47:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:27:b4:1f:e2:94:93:e1:60:2d:d3:90:19:2b:56:95:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7d0674bd6f0cc9175219a328c8b396829f6c0af
Validity
Not Before: Sep 25 05:42:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2212f2c605aa467c5a9c3a4516655efd1f1ef1fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9b:2a:ba:d3:d0:89:16:ad:78:4f:66:01:24:
4f:cf:1d:05:1c:c3:1f:86:c0:ea:52:5e:36:d6:03:
71:34:9f:62:70:19:6c:92:b0:4d:33:0c:a1:b1:03:
65:02:b1:b0:78:cd:3a:dd:99:d9:d1:98:1a:17:1a:
1e:66:7e:75:44:45:d8:3a:0a:b3:b2:dd:e0:c4:cc:
ec:36:92:9b:5e:05:39:bd:35:f1:e2:83:12:d1:f3:
2b:f1:92:2c:54:5b:79:6f:5b:8f:8f:ee:ab:ab:be:
85:b9:4b:2b:18:1d:88:2b:ec:61:74:81:76:be:86:
33:1f:45:2a:f9:38:cf:ad:a6:6c:b9:97:90:e0:58:
35:5a:5d:36:b2:26:ed:ca:03:96:aa:f8:15:7e:d0:
5b:c3:82:0d:47:2a:e3:77:97:1e:8b:32:ed:e0:3b:
7f:13:04:a8:20:90:e4:8d:f3:be:30:5f:e5:2c:db:
6f:e6:b3:21:76:0b:d1:b8:b0:29:aa:ae:b5:59:e2:
c7:1e:17:c9:7c:59:2a:37:1a:b6:9b:6d:72:d9:e0:
1a:fa:65:65:1b:9b:a7:d4:b3:ef:04:44:fb:6b:1f:
f0:14:eb:f5:d3:d2:5e:7c:4f:9b:bc:5c:da:c9:53:
19:51:34:d9:27:37:40:af:74:e3:af:aa:ee:6a:36:
20:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:12:F2:C6:05:AA:46:7C:5A:9C:3A:45:16:65:5E:FD:1F:1E:F1:FA
X509v3 Authority Key Identifier:
keyid:D7:D0:67:4B:D6:F0:CC:91:75:21:9A:32:8C:8B:39:68:29:F6:C0:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/IhLyxgWqRnxanDpFFmVe_R8e8fo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.147.32.0-89.147.34.255
Signature Algorithm: sha256WithRSAEncryption
41:9f:08:00:91:30:16:d8:1c:55:0c:56:19:a8:89:7f:ce:2e:
e6:ab:6f:bb:d2:33:61:be:69:45:3b:db:f6:72:48:17:f9:94:
af:72:c2:9f:29:8b:4a:1b:39:68:67:3b:bd:2f:48:e4:bc:5f:
12:da:2c:7a:b8:e8:a3:36:e2:18:96:2a:47:15:82:1f:c1:8d:
d1:cc:94:d7:f0:95:c7:af:99:55:64:42:75:49:cb:f3:67:d6:
b7:05:6e:5d:60:d2:ea:da:6d:5e:61:49:5e:8e:fc:81:be:ef:
f5:a3:43:60:a0:83:74:4e:1d:fd:60:43:6d:10:a8:82:0e:80:
6d:40:c8:c2:02:8c:66:c9:b6:1b:10:3f:34:8d:c5:0b:9f:fd:
7d:cb:43:55:3c:e2:cd:57:ae:2c:94:af:24:41:5f:1a:94:b3:
5c:71:08:68:13:9a:b5:da:aa:ea:b4:d5:a4:55:22:00:70:e5:
ee:d0:d3:b8:ae:20:6e:0b:bf:f6:b7:3c:10:4c:53:0f:ff:42:
1e:fa:85:14:ef:79:9a:cd:46:04:ac:e8:96:1b:9c:c2:0e:5a:
91:a2:b8:86:97:2d:4c:dc:9c:f4:22:56:dc:2f:0e:8b:33:90:
a6:31:09:4d:9f:e0:90:30:fc:65:ae:1d:5c:9e:66:b6:02:2c:
71:ce:6a:37
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZIntB/ilJPhYC3TkBkrVpUOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3ZDA2NzRiZDZmMGNjOTE3NTIxOWEzMjhjOGIzOTY4Mjlm
NmMwYWYwHhcNMjQwOTI1MDU0MjQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjEyZjJjNjA1YWE0NjdjNWE5YzNhNDUxNjY1NWVmZDFmMWVmMWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JsqutPQiRateE9mASRPzx0FHMMf
hsDqUl421gNxNJ9icBlskrBNMwyhsQNlArGweM063ZnZ0ZgaFxoeZn51REXYOgqz
st3gxMzsNpKbXgU5vTXx4oMS0fMr8ZIsVFt5b1uPj+6rq76FuUsrGB2IK+xhdIF2
voYzH0Uq+TjPraZsuZeQ4Fg1Wl02sibtygOWqvgVftBbw4INRyrjd5ceizLt4Dt/
EwSoIJDkjfO+MF/lLNtv5rMhdgvRuLApqq61WeLHHhfJfFkqNxq2m21y2eAa+mVl
G5un1LPvBET7ax/wFOv109JefE+bvFzayVMZUTTZJzdAr3Tjr6ruajYgPQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFCIS8sYFqkZ8Wpw6RRZlXv0fHvH6MB8GA1UdIwQY
MBaAFNfQZ0vW8MyRdSGaMoyLOWgp9sCvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTlCblM5Ynd6SkYxSVpveWpJczVhQ24yd0s4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9iMzBlNWQtOGIzYi00Mjg3LTliM2It
ODIzMmZhM2U2MjlkLzEvSWhMeXhnV3FSbnhhbkRwRkZtVmVfUjhlOGZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9iMzBlNWQtOGIzYi00Mjg3LTliM2ItODIzMmZhM2U2Mjlk
LzEvMTlCblM5Ynd6SkYxSVpveWpJczVhQ24yd0s4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAVZkyAD
BABZkyIwDQYJKoZIhvcNAQELBQADggEBAEGfCACRMBbYHFUMVhmoiX/OLuarb7vS
M2G+aUU72/ZySBf5lK9ywp8pi0obOWhnO70vSOS8XxLaLHq46KM24hiWKkcVgh/B
jdHMlNfwlcevmVVkQnVJy/Nn1rcFbl1g0urabV5hSV6O/IG+7/WjQ2Cgg3ROHf1g
Q20QqIIOgG1AyMICjGbJthsQPzSNxQuf/X3LQ1U84s1XriyUryRBXxqUs1xxCGgT
mrXaquq01aRVIgBw5e7Q07iuIG4Lv/a3PBBMUw//Qh76hRTveZrNRgSs6JYbnMIO
WpGiuIaXLUzcnPQiVtwvDoszkKYxCU2f4JAw/GWuHVyeZrYCLHHOajc=
-----END CERTIFICATE-----
Generated at Thu Oct 24 16:00:44 2024 by rpki-client on console-ams.rpki-client.org