Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/bnjgguPvdC4FMLEYo890tsWwAPw.roa
File: bnjgguPvdC4FMLEYo890tsWwAPw.roa (raw, json)
Hash identifier: ByNAxSANjwZRreVg5jaS8Lv5wv0yY3hXiZ9MVgWRTzc=
Subject key identifier: 6E:78:E0:82:E3:EF:74:2E:05:30:B1:18:A3:CF:74:B6:C5:B0:00:FC
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018CC79542E56B290F20A5A633B60E5FF2A5
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/bnjgguPvdC4FMLEYo890tsWwAPw.roa
Signing time: Tue 02 Jan 2024 00:31:37 +0000
ROA not before: Tue 02 Jan 2024 00:31:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20616
IP address blocks: 89.34.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Jan 2024 19:16:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:42:e5:6b:29:0f:20:a5:a6:33:b6:0e:5f:f2:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:31:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e78e082e3ef742e0530b118a3cf74b6c5b000fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:41:3e:8a:f1:5c:56:8e:e5:87:c9:dc:7d:8e:
90:bf:93:14:1d:a6:22:17:ca:77:37:6e:f2:b5:2f:
27:59:0d:ab:af:e6:b9:77:67:08:3b:13:d8:c5:ea:
c8:86:3e:0b:49:26:06:d8:51:4b:58:8c:0e:06:40:
70:d0:60:7a:d6:7d:a3:84:de:1e:a4:ea:98:5e:d8:
9b:87:af:20:47:4f:fe:d0:3c:d1:eb:7b:68:bb:30:
0a:62:f7:7f:b5:b0:f8:df:97:45:cd:1b:20:a9:b6:
1e:a5:d8:e5:46:c8:05:80:77:9c:a9:8e:a6:23:13:
8f:d2:4d:96:f1:ca:f5:85:9c:ce:dc:81:f1:e2:f9:
a8:51:fe:f6:3a:f6:f0:2d:ca:e2:7e:3c:cd:b8:49:
97:58:4b:aa:01:3a:db:9c:ed:d6:e3:ef:98:79:d3:
5d:d8:d7:2d:a7:cf:29:87:b7:ab:e5:fd:6f:ae:eb:
cf:c3:13:52:74:69:42:f5:9b:af:6c:06:83:23:6e:
8d:48:61:12:5f:a8:5c:4c:42:30:a7:6c:e5:fa:66:
83:3e:45:d2:fc:74:9d:fc:85:33:31:a0:52:78:5b:
94:b3:f7:d5:91:78:5c:81:e6:5d:c8:8a:3f:99:7a:
60:6f:98:c5:67:1c:51:c2:f4:00:9e:1f:b5:b1:b8:
a0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:78:E0:82:E3:EF:74:2E:05:30:B1:18:A3:CF:74:B6:C5:B0:00:FC
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/bnjgguPvdC4FMLEYo890tsWwAPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.107.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:23:40:71:10:cc:73:9c:37:ea:23:18:55:95:a3:3e:27:95:
68:a6:52:57:75:87:47:f4:1e:e6:01:4d:f2:ec:7d:6f:e1:46:
7c:a4:2c:61:46:0c:ff:ba:1e:0e:46:74:54:af:85:71:d8:dc:
7b:cf:5a:3d:16:8c:9f:c6:69:34:9e:97:b2:9c:51:1a:a1:a5:
3c:f7:a8:bf:26:65:0b:0b:b0:34:72:da:df:86:13:65:06:62:
83:36:63:30:6b:99:77:06:e2:2e:0b:13:60:4c:20:7f:ca:91:
6d:3d:73:fa:92:83:a2:42:c2:72:30:a9:05:8c:b5:38:ad:73:
1c:1a:ad:65:dc:3e:1c:6b:3b:0b:8a:64:54:01:85:a5:07:27:
dd:2e:ed:58:9f:60:96:e4:1e:6c:12:5b:70:95:c3:9d:41:f0:
2a:ae:4e:8a:75:fb:b4:1d:0c:22:46:b1:01:35:d1:3d:6d:53:
9b:00:da:e8:ce:1b:98:13:a4:28:d1:dc:9f:36:ff:81:c9:e8:
ea:ca:dc:1b:3c:f0:52:25:a0:d0:fa:e1:dd:fa:2e:c3:62:2b:
59:87:cb:d5:2c:46:e7:48:83:28:f8:68:21:00:c7:32:2f:5d:
c0:7d:53:fd:7a:7a:f6:08:5f:40:9d:ed:e8:2d:84:38:67:3f:
62:07:2c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:42 2024 by rpki-client on console-fra.rpki-client.org