Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/wB-24f8XpmjXTaQ2tmM32dIi-z8.roa
File: wB-24f8XpmjXTaQ2tmM32dIi-z8.roa (raw, json)
Hash identifier: enZ3w0ma2CtYLM3/KQTFHM72JLsW1ad++7kslp2+Nm0=
Subject key identifier: C0:1F:B6:E1:FF:17:A6:68:D7:4D:A4:36:B6:63:37:D9:D2:22:FB:3F
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 0186070B042A6D4D9DC33014D656D3BA5392
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/wB-24f8XpmjXTaQ2tmM32dIi-z8.roa
Signing time: Tue 31 Jan 2023 08:56:47 +0000
ROA not before: Tue 31 Jan 2023 08:56:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 89.23.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Aug 2023 09:38:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:07:0b:04:2a:6d:4d:9d:c3:30:14:d6:56:d3:ba:53:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Jan 31 08:56:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c01fb6e1ff17a668d74da436b66337d9d222fb3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c3:c3:a7:d8:21:5f:ca:b8:63:69:9b:3c:bf:
10:6b:a6:7e:ca:3b:f1:e5:f0:f4:ad:ae:c1:aa:dc:
a6:f6:fb:cf:5e:c5:07:75:27:c0:d8:ab:bb:76:43:
00:3a:e8:ad:d2:a2:38:c5:90:7d:6e:af:66:be:15:
6f:2c:e7:ba:4b:f5:ca:2d:8b:b7:6a:46:52:6f:2a:
78:75:41:b2:12:96:3a:b5:da:2e:33:da:e6:7f:8d:
45:30:2a:ac:92:92:b1:12:c6:62:1b:a5:56:78:e7:
ec:ca:18:19:e6:55:79:fd:ce:00:d7:52:2e:c6:ad:
2c:e6:b8:29:55:23:a4:4d:aa:1f:5b:82:da:97:1c:
f7:c9:ab:be:0d:e9:99:96:f0:ec:6e:d2:ff:db:47:
02:6e:c7:82:01:ff:30:c7:6f:c9:59:49:d2:09:97:
a6:e2:15:d9:e6:e1:d6:14:d5:57:46:c1:bd:af:94:
8a:e1:bb:0e:aa:c5:3a:51:b9:e1:59:de:e9:46:0c:
55:6b:eb:12:2f:3f:02:bc:e8:d4:5c:72:17:a7:23:
25:81:d1:3c:b0:5d:8e:53:32:9b:46:a2:25:42:c4:
e1:51:54:c8:b2:4c:20:d6:ba:5c:aa:d7:1e:6b:c4:
5a:90:4d:11:c8:bd:c0:ad:49:53:50:c9:54:ad:83:
91:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:1F:B6:E1:FF:17:A6:68:D7:4D:A4:36:B6:63:37:D9:D2:22:FB:3F
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/wB-24f8XpmjXTaQ2tmM32dIi-z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.110.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:6b:f4:fd:7c:2b:42:9f:aa:3f:5c:98:5d:05:41:47:ee:4d:
35:cc:8b:84:73:42:b3:72:cd:34:3c:f7:60:1c:3d:2f:6c:76:
10:56:77:1c:b7:fe:05:c5:2e:10:07:e9:8f:70:2f:e2:45:83:
9b:f5:e5:88:a9:97:36:c5:af:cb:8d:a8:3c:23:1d:9a:a3:84:
1f:c0:08:4c:b4:b5:e2:eb:a6:be:58:c0:21:a6:57:ae:53:48:
e6:20:a5:58:76:8b:b7:2c:86:66:62:92:87:78:ef:e0:a1:9b:
c1:a0:63:73:a3:62:06:b4:a2:04:d6:c6:b5:e3:57:49:b0:9f:
0e:91:fe:ff:8f:4c:08:b3:b6:f3:58:ea:6b:40:e1:b1:b5:e2:
b9:b6:ed:d0:69:3c:80:5b:22:85:36:b5:41:ca:dd:6f:9a:59:
64:e0:23:d9:0b:ce:57:03:f3:98:52:72:90:a4:26:ff:35:81:
82:ac:ad:83:02:04:d9:5b:fd:6c:96:bb:c3:66:28:71:59:b6:
97:b2:58:c8:dc:cf:49:f5:e2:24:83:ae:78:a2:0d:76:54:31:
7a:8f:6d:71:c3:47:63:ec:25:f3:44:7b:f7:f6:c3:aa:1a:dc:
87:7b:91:34:42:f8:c2:ab:bb:10:ec:a6:41:88:a9:06:9d:be:
27:0b:c6:a4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYYHCwQqbU2dwzAU1lbTulOSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl
NWVjZjIwHhcNMjMwMTMxMDg1NjQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDFmYjZlMWZmMTdhNjY4ZDc0ZGE0MzZiNjYzMzdkOWQyMjJmYjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcPDp9ghX8q4Y2mbPL8Qa6Z+yjvx
5fD0ra7Bqtym9vvPXsUHdSfA2Ku7dkMAOuit0qI4xZB9bq9mvhVvLOe6S/XKLYu3
akZSbyp4dUGyEpY6tdouM9rmf41FMCqskpKxEsZiG6VWeOfsyhgZ5lV5/c4A11Iu
xq0s5rgpVSOkTaofW4Lalxz3yau+DemZlvDsbtL/20cCbseCAf8wx2/JWUnSCZem
4hXZ5uHWFNVXRsG9r5SK4bsOqsU6UbnhWd7pRgxVa+sSLz8CvOjUXHIXpyMlgdE8
sF2OUzKbRqIlQsThUVTIskwg1rpcqtcea8RakE0RyL3ArUlTUMlUrYOReQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMAftuH/F6Zo102kNrZjN9nSIvs/MB8GA1UdIwQY
MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt
MTcxYzM2N2JlNzgyLzEvd0ItMjRmOFhwbWpYVGFRMnRtTTMyZElpLXo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy
LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWRduMA0G
CSqGSIb3DQEBCwUAA4IBAQCda/T9fCtCn6o/XJhdBUFH7k01zIuEc0Kzcs00PPdg
HD0vbHYQVncct/4FxS4QB+mPcC/iRYOb9eWIqZc2xa/Ljag8Ix2ao4QfwAhMtLXi
66a+WMAhpleuU0jmIKVYdou3LIZmYpKHeO/goZvBoGNzo2IGtKIE1sa141dJsJ8O
kf7/j0wIs7bzWOprQOGxteK5tu3QaTyAWyKFNrVByt1vmllk4CPZC85XA/OYUnKQ
pCb/NYGCrK2DAgTZW/1slrvDZihxWbaXsljI3M9J9eIkg654og12VDF6j21xw0dj
7CXzRHv39sOqGtyHe5E0QvjCq7sQ7KZBiKkGnb4nC8ak
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:33 2024 by rpki-client on console-ams.rpki-client.org