Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/l9mKv0n1OddUsjbynysFjQQD_rE.roa
File: l9mKv0n1OddUsjbynysFjQQD_rE.roa (raw, json)
Hash identifier: qD5TX6z+/ugwM5c8GR9riaOwN6++BMRMD8UWIIC0a5E=
Subject key identifier: 97:D9:8A:BF:49:F5:39:D7:54:B2:36:F2:9F:2B:05:8D:04:03:FE:B1
Certificate issuer: /CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Certificate serial: 018CF89B5DEA61CEC8F169437E3C48BAFD2A
Authority key identifier: DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/l9mKv0n1OddUsjbynysFjQQD_rE.roa
Signing time: Thu 11 Jan 2024 12:59:40 +0000
ROA not before: Thu 11 Jan 2024 12:59:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210656
IP address blocks: 89.223.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Mar 2024 08:52:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f8:9b:5d:ea:61:ce:c8:f1:69:43:7e:3c:48:ba:fd:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Validity
Not Before: Jan 11 12:59:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=97d98abf49f539d754b236f29f2b058d0403feb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:dc:4d:32:d4:d5:6b:63:78:8c:65:cb:37:9b:
33:8d:79:f2:98:12:e7:1e:08:28:4f:80:2c:1b:8c:
88:f4:26:f7:ef:9c:4e:6a:97:36:9b:7e:0a:97:1f:
9a:b6:3c:90:6d:ca:49:b9:db:bd:6b:db:54:4a:76:
27:9b:21:7e:87:84:36:b2:b0:7f:89:e0:7a:3f:73:
79:2c:be:17:50:7c:1a:32:13:e0:d6:45:c0:a0:43:
c9:8f:05:2c:cf:e6:a5:22:ff:a9:3f:80:19:7d:cf:
a1:7e:86:0c:fe:35:d9:a2:22:97:61:c3:93:18:35:
50:41:d5:f6:05:81:60:90:fa:e5:3b:f0:5d:3f:30:
18:d4:7b:c9:34:2e:65:fa:69:4c:fd:a1:78:5d:65:
e1:9f:26:66:20:3e:ca:47:33:0f:40:e5:76:3e:d6:
4c:ff:34:0e:a2:a6:76:98:c1:fb:eb:bb:6b:a3:74:
4c:32:67:91:4b:2c:4b:76:d6:93:41:78:77:19:f4:
30:7a:09:af:65:7c:90:78:1b:e9:b7:d8:7b:f0:f1:
9f:83:92:6e:a6:4c:a1:22:f9:81:85:73:9a:e3:b0:
fc:38:69:da:f1:d6:5a:68:da:5e:bb:cc:7e:1b:30:
12:2d:ef:ac:fa:c0:72:d6:1d:8b:1d:21:79:82:04:
95:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D9:8A:BF:49:F5:39:D7:54:B2:36:F2:9F:2B:05:8D:04:03:FE:B1
X509v3 Authority Key Identifier:
keyid:DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/l9mKv0n1OddUsjbynysFjQQD_rE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.223.20.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:21:06:a9:40:33:e2:f6:ff:a1:2b:c8:0a:76:f3:fb:90:a9:
c1:bd:62:26:2b:76:3a:b4:88:59:fd:8b:c3:24:99:bb:21:7e:
fe:e5:5d:60:32:7d:da:29:b9:7f:ea:2d:4d:c1:b5:c2:2b:70:
54:1b:b9:86:79:a8:21:2a:60:ae:f3:32:ae:0d:07:f3:3e:6e:
8a:12:b5:1b:3a:46:1c:69:4d:94:45:07:4e:bd:e9:4d:55:d7:
4b:68:49:66:cc:1b:f1:c4:5b:9d:f6:85:f6:77:b8:9f:7d:5d:
76:be:ea:15:45:88:4c:0b:ec:2c:70:3b:8f:1a:a7:cb:93:d5:
5b:ac:c4:a5:b5:5f:fa:fd:fb:7f:42:9c:43:0d:af:e5:9b:b0:
d2:ea:72:ca:5e:a5:b6:ab:ea:c1:3e:b4:a9:2f:6b:dc:92:17:
5e:48:44:57:26:80:3a:d0:73:df:32:83:26:ba:d0:0b:fd:d6:
e3:6f:11:7a:da:75:10:33:9d:d4:26:d3:57:28:e4:ad:52:1d:
62:2a:86:7e:80:ac:a8:b1:63:5f:60:11:40:d6:4e:7c:f7:26:
7e:70:d2:4c:5c:34:c0:13:6e:d2:38:d8:28:5d:49:02:6d:f7:
8b:6a:0b:97:fe:c1:89:66:f6:90:d9:99:aa:d2:74:b4:74:df:
d6:d1:3d:5b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYz4m13qYc7I8WlDfjxIuv0qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjODZlM2U5MjhjN2YwYzlkYjY5NTE1ZmYzYWExZjY3OGNl
ZTQzYzAwHhcNMjQwMTExMTI1OTQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5N2Q5OGFiZjQ5ZjUzOWQ3NTRiMjM2ZjI5ZjJiMDU4ZDA0MDNmZWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNxNMtTVa2N4jGXLN5szjXnymBLn
HggoT4AsG4yI9Cb375xOapc2m34Klx+atjyQbcpJudu9a9tUSnYnmyF+h4Q2srB/
ieB6P3N5LL4XUHwaMhPg1kXAoEPJjwUsz+alIv+pP4AZfc+hfoYM/jXZoiKXYcOT
GDVQQdX2BYFgkPrlO/BdPzAY1HvJNC5l+mlM/aF4XWXhnyZmID7KRzMPQOV2PtZM
/zQOoqZ2mMH767tro3RMMmeRSyxLdtaTQXh3GfQwegmvZXyQeBvpt9h78PGfg5Ju
pkyhIvmBhXOa47D8OGna8dZaaNpeu8x+GzASLe+s+sBy1h2LHSF5ggSVxQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJfZir9J9TnXVLI28p8rBY0EA/6xMB8GA1UdIwQY
MBaAFNyG4+kox/DJ22lRX/OqH2eM7kPAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0liajZTakg4TW5iYVZGZjg2b2ZaNHp1UThBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC80NzFhYTUtYzNmNy00YWZkLWIxMjIt
OWM4ZTU5YzI3NzFjLzEvbDltS3YwbjFPZGRVc2pieW55c0ZqUVFEX3JFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC80NzFhYTUtYzNmNy00YWZkLWIxMjItOWM4ZTU5YzI3NzFj
LzEvM0liajZTakg4TW5iYVZGZjg2b2ZaNHp1UThBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWd8UMA0G
CSqGSIb3DQEBCwUAA4IBAQAMIQapQDPi9v+hK8gKdvP7kKnBvWImK3Y6tIhZ/YvD
JJm7IX7+5V1gMn3aKbl/6i1NwbXCK3BUG7mGeaghKmCu8zKuDQfzPm6KErUbOkYc
aU2URQdOvelNVddLaElmzBvxxFud9oX2d7iffV12vuoVRYhMC+wscDuPGqfLk9Vb
rMSltV/6/ft/QpxDDa/lm7DS6nLKXqW2q+rBPrSpL2vckhdeSERXJoA60HPfMoMm
utAL/dbjbxF62nUQM53UJtNXKOStUh1iKoZ+gKyosWNfYBFA1k589yZ+cNJMXDTA
E27SONgoXUkCbfeLaguX/sGJZvaQ2Zmq0nS0dN/W0T1b
-----END CERTIFICATE-----
Generated at Fri Mar 29 13:00:42 2024 by rpki-client on console-ams.rpki-client.org