Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/FwI4LvTppK0NulehHExpPthN_uE.roa
File: FwI4LvTppK0NulehHExpPthN_uE.roa (raw, json)
Hash identifier: Qm4sXrZR1Wxdvn2EXOagJl7Bwj+/3U8I43SVK/4w7XA=
Subject key identifier: 17:02:38:2E:F4:E9:A4:AD:0D:BA:57:A1:1C:4C:69:3E:D8:4D:FE:E1
Certificate issuer: /CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48
Certificate serial: 018BAEEDBBC24D9700CC4C0C77F08A9A88B0
Authority key identifier: C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/FwI4LvTppK0NulehHExpPthN_uE.roa
Signing time: Wed 08 Nov 2023 12:34:57 +0000
ROA not before: Wed 08 Nov 2023 12:34:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56911
IP address blocks: 149.62.34.0/24 maxlen: 24
89.35.118.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Dec 2023 07:43:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ae:ed:bb:c2:4d:97:00:cc:4c:0c:77:f0:8a:9a:88:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48
Validity
Not Before: Nov 8 12:34:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1702382ef4e9a4ad0dba57a11c4c693ed84dfee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:de:1c:11:de:6c:d1:a3:68:60:18:28:9c:b3:
bc:36:90:b3:83:17:89:a5:a1:7c:92:45:5d:15:da:
ce:28:10:40:5a:6a:36:56:1a:e3:55:05:a1:ec:fa:
ad:32:a6:64:b2:55:cd:be:78:42:7b:00:79:ad:2a:
8e:78:cb:84:51:10:29:a9:06:b0:b5:b3:66:db:87:
c1:16:c7:40:46:96:4d:2b:63:b2:cb:0f:f2:13:53:
ce:ec:ad:f2:4a:c1:cc:45:b2:73:13:c4:da:52:1f:
48:82:8a:48:3c:db:66:68:0f:ff:04:12:0c:02:ed:
a3:dc:fe:37:4d:e3:fb:24:41:ca:1d:58:ea:c4:e8:
01:c0:af:f6:be:e3:a9:a4:28:19:e4:da:f5:79:7e:
b8:91:a7:85:16:9b:ce:ca:0c:59:f3:d2:21:4d:4a:
77:67:e5:8f:fc:fd:04:45:59:bc:9d:f5:10:dd:9b:
85:74:5c:6d:ac:78:3b:ce:82:28:ba:13:f4:c8:3e:
78:27:c2:e6:93:de:00:2c:ec:44:6a:3c:23:80:e4:
ed:a1:c8:49:28:a2:bb:c1:e3:1b:67:92:46:18:c7:
83:fc:6b:75:ff:56:95:ec:ae:e7:b0:1d:97:2a:18:
60:57:89:60:c6:3a:15:8b:45:0a:90:ef:7b:af:93:
9d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:02:38:2E:F4:E9:A4:AD:0D:BA:57:A1:1C:4C:69:3E:D8:4D:FE:E1
X509v3 Authority Key Identifier:
keyid:C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/FwI4LvTppK0NulehHExpPthN_uE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.118.0/24
149.62.34.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:df:ef:10:13:04:05:c6:8e:86:07:eb:17:05:34:3d:47:16:
21:2b:08:22:02:82:95:fa:ea:a0:3e:ff:6c:9c:20:25:ef:e5:
83:ef:ef:13:c0:5c:2c:69:97:30:a6:6b:97:21:ba:30:43:cf:
78:1d:61:47:06:e8:71:fe:10:9a:a2:d2:bd:18:c2:1c:ac:4a:
67:ac:6e:6a:a2:8c:5f:66:4e:86:92:cc:aa:80:bf:ee:8a:35:
1e:5a:49:31:d4:45:53:95:05:8a:50:70:dd:93:e3:d1:3e:4b:
25:41:e8:1c:17:44:21:00:3b:78:20:f8:7c:48:11:c4:40:73:
42:bd:d6:cc:a6:19:eb:5c:64:31:ef:44:a1:e0:90:0e:b3:e9:
cd:5a:69:d0:5c:ca:87:40:00:03:13:c1:35:27:73:3e:3d:87:
cc:03:c6:e3:3f:7a:f9:1c:9d:39:ce:ee:fa:e7:f1:ad:ea:0d:
0e:c6:ae:29:a6:2a:f1:83:1a:28:1f:6e:34:e4:bb:2d:40:c7:
37:81:bd:2a:e5:c5:b3:3d:2a:9e:1d:ac:bd:0c:31:8a:79:51:
c3:fa:33:79:76:3c:38:21:85:8c:c1:13:28:f9:43:db:d7:1b:
7b:83:e8:1e:6f:59:0b:3a:2f:ff:6a:d3:82:4b:a9:1b:d7:a6:
c5:3a:62:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:39 2024 by rpki-client on console-ams.rpki-client.org