Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/Jtnec6ZujI6kgInj5XdCYGNLMuI.roa
File: Jtnec6ZujI6kgInj5XdCYGNLMuI.roa (raw, json)
Hash identifier: ttDDEkaNOq1lGWSXze5rg3kQBqDtQNsEFvK8mb9I9C0=
Subject key identifier: 26:D9:DE:73:A6:6E:8C:8E:A4:80:89:E3:E5:77:42:60:63:4B:32:E2
Certificate issuer: /CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
Certificate serial: 018FE213029AC213BBEDF4770D800F314926
Authority key identifier: AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/Jtnec6ZujI6kgInj5XdCYGNLMuI.roa
Signing time: Tue 04 Jun 2024 07:07:27 +0000
ROA not before: Tue 04 Jun 2024 07:07:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 89.49.0.0/21 maxlen: 24
89.49.8.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jul 2024 07:27:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e2:13:02:9a:c2:13:bb:ed:f4:77:0d:80:0f:31:49:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
Validity
Not Before: Jun 4 07:07:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26d9de73a66e8c8ea48089e3e5774260634b32e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f7:88:8b:74:e4:46:e2:a4:db:55:95:d8:60:
5f:3f:48:d1:b9:68:7a:be:76:ef:cd:08:a0:4e:e0:
6a:76:a8:07:68:9c:f8:9e:6c:3f:a5:da:0b:6c:70:
42:1a:af:b8:3a:ab:b6:10:7c:1d:d9:75:a1:7d:65:
d6:bd:77:1a:f4:f1:ba:dd:b5:ea:ec:43:7a:63:5f:
a3:1d:0a:79:c4:7e:72:ca:8f:b9:4d:ae:cd:e3:0f:
59:49:9c:fb:e5:98:3a:12:13:c1:1b:4f:12:7f:f1:
eb:42:a6:7e:1a:74:ba:8a:e5:06:de:74:d8:05:94:
3d:8e:87:76:4a:87:25:96:60:5a:b4:c4:cf:25:6e:
3c:a7:99:5c:c0:a9:a6:f9:c6:2a:0a:11:c3:a1:4f:
32:23:07:30:1c:13:ea:5f:8d:5f:4d:0d:ae:c7:b4:
d6:72:59:d5:e1:b3:4e:2e:77:3d:50:83:55:70:68:
4c:ca:1c:92:6a:2f:59:57:b0:aa:ae:59:53:13:40:
29:6f:c7:46:67:01:d5:02:84:93:30:a7:47:b2:ee:
17:3b:52:1d:82:0f:4a:70:73:66:ce:aa:f6:32:a3:
c1:b4:af:8c:02:d0:56:5b:73:b2:9d:09:6f:3f:e7:
2a:b8:0e:3e:08:20:45:39:17:e3:8a:9a:a9:15:5a:
d0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D9:DE:73:A6:6E:8C:8E:A4:80:89:E3:E5:77:42:60:63:4B:32:E2
X509v3 Authority Key Identifier:
keyid:AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/Jtnec6ZujI6kgInj5XdCYGNLMuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.49.0.0/20
Signature Algorithm: sha256WithRSAEncryption
6f:92:d6:87:ef:a6:4b:98:95:1e:ba:4a:e1:38:4f:4f:bf:10:
12:27:16:69:ea:10:07:57:88:93:ec:b3:19:a7:78:13:61:ed:
c3:7e:8e:d6:7b:3a:d6:76:d9:e6:c7:c4:ad:03:61:50:02:1d:
93:83:06:28:22:8c:a3:80:c0:11:26:b3:82:ad:b3:c5:fa:17:
f9:61:c9:58:7d:9f:99:b6:eb:14:38:7d:59:3d:d8:d1:0f:27:
b7:35:72:35:44:3b:9c:eb:d4:2f:41:5b:3b:df:04:6c:ab:e8:
3a:44:2a:ec:07:6a:66:ee:97:ae:e3:79:27:e1:de:32:11:5f:
39:02:08:56:48:88:d0:83:5d:d8:aa:c4:f9:02:ca:99:6c:8d:
19:8a:8f:be:fb:f7:e4:e3:d1:c6:ff:34:ae:c2:5b:a8:c6:d3:
37:62:3b:11:c6:c5:65:7e:d9:8d:61:cd:a5:1c:68:f5:a8:08:
51:c6:f5:dd:c0:d9:6c:c7:0e:53:bd:b6:17:39:33:c0:8a:a6:
16:1d:a7:26:2e:f3:9f:f0:c2:96:11:39:26:f6:3e:14:36:bd:
e9:6f:b0:6f:87:19:78:ff:de:97:e4:fd:44:f9:de:70:22:de:
d1:74:40:b0:3e:f1:d2:83:18:5c:e0:af:2f:2c:89:79:ac:6a:
8e:c1:62:fc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY/iEwKawhO77fR3DYAPMUkmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmODAxOTg0Y2MzOGYwYTRmYzVhZmUxYWRlYWI2ODBjMWI4
OWU5NWIwHhcNMjQwNjA0MDcwNzI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNmQ5ZGU3M2E2NmU4YzhlYTQ4MDg5ZTNlNTc3NDI2MDYzNGIzMmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfeIi3TkRuKk21WV2GBfP0jRuWh6
vnbvzQigTuBqdqgHaJz4nmw/pdoLbHBCGq+4Oqu2EHwd2XWhfWXWvXca9PG63bXq
7EN6Y1+jHQp5xH5yyo+5Ta7N4w9ZSZz75Zg6EhPBG08Sf/HrQqZ+GnS6iuUG3nTY
BZQ9jod2SocllmBatMTPJW48p5lcwKmm+cYqChHDoU8yIwcwHBPqX41fTQ2ux7TW
clnV4bNOLnc9UINVcGhMyhySai9ZV7CqrllTE0Apb8dGZwHVAoSTMKdHsu4XO1Id
gg9KcHNmzqr2MqPBtK+MAtBWW3OynQlvP+cquA4+CCBFORfjipqpFVrQkwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCbZ3nOmboyOpICJ4+V3QmBjSzLiMB8GA1UdIwQY
MBaAFK+AGYTMOPCk/Fr+Gt6raAwbielbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjRBWmhNdzQ4S1Q4V3Y0YTNxdG9EQnVKNlZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9iZmQzN2MtY2IxMi00YTljLThmNWQt
NDAyMTI2NWMzOWIwLzEvSnRuZWM2WnVqSTZrZ0luajVYZENZR05MTXVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9iZmQzN2MtY2IxMi00YTljLThmNWQtNDAyMTI2NWMzOWIw
LzEvcjRBWmhNdzQ4S1Q4V3Y0YTNxdG9EQnVKNlZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEWTEAMA0G
CSqGSIb3DQEBCwUAA4IBAQBvktaH76ZLmJUeukrhOE9PvxASJxZp6hAHV4iT7LMZ
p3gTYe3Dfo7WezrWdtnmx8StA2FQAh2TgwYoIoyjgMARJrOCrbPF+hf5YclYfZ+Z
tusUOH1ZPdjRDye3NXI1RDuc69QvQVs73wRsq+g6RCrsB2pm7peu43kn4d4yEV85
AghWSIjQg13YqsT5AsqZbI0Zio+++/fk49HG/zSuwluoxtM3YjsRxsVlftmNYc2l
HGj1qAhRxvXdwNlsxw5TvbYXOTPAiqYWHacmLvOf8MKWETkm9j4UNr3pb7Bvhxl4
/96X5P1E+d5wIt7RdECwPvHSgxhc4K8vLIl5rGqOwWL8
-----END CERTIFICATE-----
Generated at Tue Jul 30 09:47:36 2024 by rpki-client on console-fra.rpki-client.org