Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/sE2cSCbZyJh0R1sdf5OsKT5i7Uw.roa
File: sE2cSCbZyJh0R1sdf5OsKT5i7Uw.roa (raw, json)
Hash identifier: fPrQz2qIR3VEQKfJQPdeOVKRXYIjBr44HCsglnfcj6c=
Subject key identifier: B0:4D:9C:48:26:D9:C8:98:74:47:5B:1D:7F:93:AC:29:3E:62:ED:4C
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 0189685695EE4F55B86B5B56BCF90672D63F
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/sE2cSCbZyJh0R1sdf5OsKT5i7Uw.roa
Signing time: Tue 18 Jul 2023 09:30:52 +0000
ROA not before: Tue 18 Jul 2023 09:30:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207141
IP address blocks: 89.44.240.0/24 maxlen: 24
89.44.241.0/24 maxlen: 24
89.44.242.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 05 Aug 2023 07:42:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:68:56:95:ee:4f:55:b8:6b:5b:56:bc:f9:06:72:d6:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Jul 18 09:30:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b04d9c4826d9c89874475b1d7f93ac293e62ed4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:92:8a:a4:1b:6f:64:90:5e:18:c5:c1:67:4f:
78:78:f9:39:64:d2:62:f5:26:be:96:83:94:30:82:
a0:5b:58:8e:18:e0:98:ed:53:f3:74:8c:d3:6f:7e:
f0:bd:c3:ff:10:6d:05:ff:c4:75:ee:55:a3:8c:73:
6e:3e:68:37:8b:81:90:9d:19:79:c0:f3:61:31:ac:
49:82:e1:84:67:e8:61:d9:5a:55:75:75:95:09:0f:
68:34:e7:9f:4c:79:e5:aa:80:0c:ee:21:21:c9:9a:
50:27:82:da:28:d4:15:77:0d:65:0d:1c:16:b9:07:
c4:ad:13:50:3d:0d:13:e7:f9:5f:ec:29:f9:cc:a1:
b9:68:3f:b2:e1:04:d3:2f:06:1b:bf:d1:ea:29:04:
4d:c4:4d:5d:d2:8f:ee:30:7d:f3:31:81:89:0c:64:
74:2d:d0:03:07:6c:98:fd:67:a2:8e:b0:f9:fb:31:
4b:a8:fd:db:af:e8:5a:1f:fc:25:47:95:88:fa:87:
0a:e6:c3:a7:c0:ea:2c:60:53:52:1a:d4:fc:0c:ef:
1a:85:2c:39:a9:23:53:8c:fb:2d:44:0d:77:2c:f9:
01:9b:33:67:e4:72:c0:0f:67:39:a5:a7:6b:30:7d:
a7:a2:d6:3d:e5:fe:02:c7:d1:cf:78:4d:32:54:5e:
f0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:4D:9C:48:26:D9:C8:98:74:47:5B:1D:7F:93:AC:29:3E:62:ED:4C
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/sE2cSCbZyJh0R1sdf5OsKT5i7Uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.240.0-89.44.242.255
Signature Algorithm: sha256WithRSAEncryption
9f:57:85:99:1e:aa:10:2e:55:e2:bb:56:f5:d3:a7:27:4c:36:
ca:16:aa:9d:58:a9:a2:9e:32:ef:fa:5a:a0:41:fa:4a:0f:30:
bb:76:8e:11:0f:c4:40:ca:25:cd:ab:db:95:e4:4a:93:72:2f:
57:02:ca:b4:ad:bd:78:f5:fd:ff:44:7d:b0:4b:f2:e4:2c:c3:
9b:68:80:e4:e1:7e:1a:61:1f:e2:84:ab:2d:83:e5:79:1b:b4:
2c:d9:63:63:30:92:a7:89:a3:bc:c1:63:fc:b8:fa:1b:90:7f:
6f:19:b3:85:dd:7b:de:7c:0b:c4:7f:58:c7:e0:90:7c:e5:8a:
bd:3d:95:d1:1e:ee:5c:75:41:32:ad:82:2c:8b:f0:d4:41:d7:
33:2b:90:12:88:b7:49:17:1c:b6:9d:61:d0:54:41:ba:e7:05:
cc:59:18:3b:51:54:2b:94:6e:4b:68:92:07:93:4f:1b:6a:1d:
85:35:f9:7d:7a:c8:49:f4:57:15:e8:f5:55:12:99:e7:3c:97:
ee:12:f4:c2:01:02:17:53:81:80:09:13:7e:0f:36:7c:67:d0:
7d:b3:0a:72:a8:0b:4f:a3:9d:e4:b1:a9:15:67:80:e3:69:78:
69:66:c7:6e:13:eb:cd:bc:ab:b9:76:9c:5d:39:1b:ed:bd:19:
ff:b7:bf:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:49 2024 by rpki-client on console-ams.rpki-client.org