Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/E2YGODnQnEIY8BWKWx--ibTcGt4.roa
File: E2YGODnQnEIY8BWKWx--ibTcGt4.roa (raw, json)
Hash identifier: UvbY04zyRIo8eH7WPVUW5ELOvlpB2rJQJ7DJ6InQeMI=
Subject key identifier: 13:66:06:38:39:D0:9C:42:18:F0:15:8A:5B:1F:BE:89:B4:DC:1A:DE
Certificate issuer: /CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Certificate serial: 018D078B06A3CFF7C497EF870269C046221B
Authority key identifier: B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/E2YGODnQnEIY8BWKWx--ibTcGt4.roa
Signing time: Sun 14 Jan 2024 10:36:08 +0000
ROA not before: Sun 14 Jan 2024 10:36:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62055
IP address blocks: 89.38.42.0/24 maxlen: 24
89.38.45.0/24 maxlen: 24
185.48.192.0/22 maxlen: 22
188.215.80.0/24 maxlen: 24
2a01:98e0::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 17 Jan 2024 19:18:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:07:8b:06:a3:cf:f7:c4:97:ef:87:02:69:c0:46:22:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Validity
Not Before: Jan 14 10:36:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1366063839d09c4218f0158a5b1fbe89b4dc1ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:7d:78:eb:ec:6d:36:64:83:64:fa:d1:7d:8c:
65:03:4c:f5:85:41:e8:09:ae:3c:1d:1c:97:55:dd:
fd:bd:82:ce:13:23:73:ba:a4:93:6e:27:f7:fd:6f:
b7:f6:9f:73:1b:05:57:f2:69:4d:fa:d5:73:1b:5b:
2a:3a:e9:3c:db:1c:d1:87:61:e7:12:17:93:1e:65:
7f:e7:79:54:3f:50:28:a6:08:74:a4:22:2d:4f:bc:
e5:2b:e1:58:f9:9e:54:5b:76:aa:4f:b7:2d:05:d3:
33:9c:4b:f1:21:45:1c:bc:87:ee:ef:13:73:1b:b2:
06:4f:9d:5f:b7:45:74:a9:2c:e1:cb:bc:f0:88:21:
40:6b:cc:00:5f:92:01:2a:39:b7:95:2a:e1:ce:2a:
62:d8:dd:6d:5e:6c:a8:63:17:d7:a6:6a:91:c8:4b:
c2:7e:37:56:db:ed:76:87:16:10:67:ef:9d:ae:94:
4e:09:b6:68:b1:c8:bd:ab:95:fa:ee:fd:e3:9f:99:
1d:5d:6e:03:fe:bb:fc:81:7e:53:e4:d0:e4:8c:bb:
57:5a:35:26:b7:6b:b6:ed:ae:c1:e5:5f:10:ab:d6:
4f:c8:36:de:ef:f9:b6:d8:95:fd:c9:8c:aa:d5:02:
3d:5e:4e:d9:18:1c:5e:8f:2a:52:1c:84:bf:65:82:
a1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:66:06:38:39:D0:9C:42:18:F0:15:8A:5B:1F:BE:89:B4:DC:1A:DE
X509v3 Authority Key Identifier:
keyid:B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/E2YGODnQnEIY8BWKWx--ibTcGt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.38.42.0/24
89.38.45.0/24
185.48.192.0/22
188.215.80.0/24
IPv6:
2a01:98e0::/32
Signature Algorithm: sha256WithRSAEncryption
16:24:23:38:94:93:fc:c4:d3:1a:fd:4d:e2:97:e2:5b:a1:ab:
07:b5:6f:5e:ca:73:46:cb:3d:9a:eb:dc:51:62:4c:09:0e:8d:
ff:4a:34:ea:8b:db:ec:79:46:8a:f9:e0:bd:69:1a:86:3b:71:
5f:d6:f6:9e:8b:9e:1b:09:a8:57:f0:f6:ef:bf:41:8b:ab:ec:
c3:fb:6f:33:a6:95:00:34:8f:ce:c2:ca:f0:d9:df:1f:f7:e9:
4c:7b:9e:5e:a2:1d:c6:58:ee:25:6e:db:ef:48:fa:8d:98:dd:
8a:a5:b9:64:54:7c:cc:32:ec:6f:b1:af:f5:a3:ae:07:ff:6f:
8e:79:d6:08:07:8d:10:7d:81:df:89:3b:de:86:36:b2:02:d5:
83:17:84:20:9a:9b:14:57:42:0c:71:6b:64:4b:07:20:17:c3:
9b:6f:5c:f8:2a:f4:8f:6a:09:46:6d:cb:3f:65:34:8a:0d:02:
f0:0d:24:4c:29:ea:1d:aa:03:39:6a:7e:57:6a:9e:48:34:5a:
c8:8b:c6:7a:d2:34:b4:88:fb:9b:34:7e:46:2c:a7:ed:0a:96:
8c:29:46:52:49:a4:5b:bc:d4:a8:08:1a:48:f1:9b:61:86:68:
ae:40:f0:50:f1:ea:af:85:0e:40:a7:ec:6f:fc:e6:68:2d:12:
54:9e:1e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:04 2024 by rpki-client on console-fra.rpki-client.org