Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/289Nl2cPTaE1XqpAp9ohw5KoRD4.roa
File: 289Nl2cPTaE1XqpAp9ohw5KoRD4.roa (raw, json)
Hash identifier: SL66wzHXvgOdKzAAj8piLUjy6ZNdxcomk+h9ZpcBARw=
Subject key identifier: DB:CF:4D:97:67:0F:4D:A1:35:5E:AA:40:A7:DA:21:C3:92:A8:44:3E
Certificate issuer: /CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Certificate serial: 018B1E25A2E159E1379534D857AB2EF2A292
Authority key identifier: 34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/289Nl2cPTaE1XqpAp9ohw5KoRD4.roa
Signing time: Wed 11 Oct 2023 09:51:04 +0000
ROA not before: Wed 11 Oct 2023 09:51:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59642
IP address blocks: 195.189.96.0/22 maxlen: 32
2a02:ae01::/36 maxlen: 36
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1e:25:a2:e1:59:e1:37:95:34:d8:57:ab:2e:f2:a2:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Validity
Not Before: Oct 11 09:51:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dbcf4d97670f4da1355eaa40a7da21c392a8443e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:21:a7:a7:10:14:00:fe:dc:e2:18:23:c9:25:
d0:d6:29:00:c0:59:5c:ad:fb:58:16:a4:13:72:86:
c7:91:a7:f6:ae:b9:6a:08:6a:c6:0d:fb:33:f6:c9:
b0:3a:8e:9a:d1:1d:73:c2:1b:2e:a4:2f:9a:7c:94:
55:c0:4f:85:f0:75:bb:a5:f3:9b:d7:4e:e6:ee:4c:
ef:0d:db:dc:67:3b:f1:85:eb:a2:25:5f:cd:b5:04:
4d:ba:be:2b:2f:bf:b3:3f:d7:2c:9b:ed:78:f7:d9:
0a:f7:fd:e9:88:fe:20:b7:d8:0c:a7:38:94:a4:04:
35:97:0f:4c:67:db:60:9b:37:15:f5:e1:74:53:29:
d1:04:72:1a:54:f6:22:79:dc:a9:fe:f0:10:37:7a:
97:f2:25:01:93:e4:d2:23:3f:c4:c7:64:05:f0:6f:
0e:56:a5:fd:ee:4c:09:c1:1e:83:35:ba:f8:34:f9:
8c:ed:21:9b:47:28:6e:26:34:b2:4f:5d:ff:41:a6:
0c:3b:9a:91:01:1b:5d:91:21:19:ac:3b:e5:3b:b6:
55:40:32:6b:70:6d:6a:46:3b:ba:d8:3f:44:19:a9:
a7:20:aa:b5:dd:c6:6f:b6:0e:43:da:93:2a:e0:b9:
f3:2f:cc:f6:32:b6:94:5c:95:f4:8a:79:e2:ea:14:
ba:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:CF:4D:97:67:0F:4D:A1:35:5E:AA:40:A7:DA:21:C3:92:A8:44:3E
X509v3 Authority Key Identifier:
keyid:34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/289Nl2cPTaE1XqpAp9ohw5KoRD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.189.96.0/22
IPv6:
2a02:ae01::/36
Signature Algorithm: sha256WithRSAEncryption
2c:e2:8a:e9:f8:2f:a2:aa:76:ff:62:20:f1:36:2b:fe:13:5d:
18:32:3b:76:ab:16:24:9f:c7:34:f0:4a:04:72:e5:81:cd:2b:
3a:c9:e9:bc:63:5b:4a:30:11:97:d6:be:1b:77:ca:03:91:b8:
b5:0f:ef:93:37:2a:55:61:3a:26:3e:8d:69:c4:4d:ee:71:17:
75:70:97:79:d9:32:a7:fc:bb:2a:6f:e3:f2:7f:b7:d0:23:b8:
56:e2:de:fb:86:f1:c8:4c:ad:7c:9d:e6:f7:07:16:2d:71:9a:
f1:3a:41:37:be:0b:56:f7:a7:4c:02:e1:64:05:49:1b:2a:82:
64:50:3d:d8:7b:b3:80:65:11:34:81:43:49:08:79:02:95:18:
7f:4d:c4:1a:34:d5:92:19:54:8e:9b:a3:c2:b1:be:cc:bc:ee:
cc:36:2c:08:04:23:d9:64:c3:7d:d2:32:d6:b9:a3:cb:63:e2:
2f:1b:50:90:6b:17:2b:f5:f6:04:79:44:d0:ce:7b:ff:19:65:
0d:6b:36:ba:ef:14:77:ca:b6:ed:5a:0a:e1:34:1c:5c:32:1c:
10:f8:cc:5c:bb:3a:6d:b1:b7:91:54:00:60:2c:e2:37:1b:6f:
56:7b:70:1d:ac:ad:f6:25:38:29:03:25:b4:fa:a6:95:11:9e:
d1:52:df:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:13 2024 by rpki-client on console-fra.rpki-client.org