Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/xgBQCSaHlCW8YquZPfH-zchUi4E.roa
File: xgBQCSaHlCW8YquZPfH-zchUi4E.roa (raw, json)
Hash identifier: CPc4sSycX1IBSu47F/cXA0n1AJtISditGlYMjl4T/IE=
Subject key identifier: C6:00:50:09:26:87:94:25:BC:62:AB:99:3D:F1:FE:CD:C8:54:8B:81
Certificate issuer: /CN=dc2c2fef9c8caf8f2f08211ef02c3d0ad3474917
Certificate serial: 018D64E082D9BEA476EC90A080DEDB3D5815
Authority key identifier: DC:2C:2F:EF:9C:8C:AF:8F:2F:08:21:1E:F0:2C:3D:0A:D3:47:49:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cwv75yMr48vCCEe8Cw9CtNHSRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/xgBQCSaHlCW8YquZPfH-zchUi4E.roa
Signing time: Thu 01 Feb 2024 13:34:11 +0000
ROA not before: Thu 01 Feb 2024 13:34:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56496
IP address blocks: 89.19.52.0/22 maxlen: 24
89.19.52.0/24 maxlen: 24
91.224.210.0/23 maxlen: 23
2a0d:bac0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 08 Feb 2024 12:44:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:64:e0:82:d9:be:a4:76:ec:90:a0:80:de:db:3d:58:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc2c2fef9c8caf8f2f08211ef02c3d0ad3474917
Validity
Not Before: Feb 1 13:34:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c600500926879425bc62ab993df1fecdc8548b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d6:97:58:3a:5e:9d:f5:00:34:58:27:3e:4c:
b2:f8:ee:e4:db:79:85:ad:9a:f5:2b:40:fc:73:dd:
ef:ad:9b:32:cc:ec:80:bc:f3:ce:7f:fd:57:d0:2b:
51:8f:9a:4e:85:a4:e3:91:9c:de:04:c1:6b:9c:be:
d9:db:f3:7c:56:a8:ca:c2:3b:de:5f:29:51:9e:2a:
8e:bc:71:66:4b:fc:fe:4f:08:b2:69:cd:b1:73:43:
9e:44:39:b9:18:f1:bf:f9:2c:1a:ea:8d:cd:03:d3:
74:4e:19:4e:18:91:43:bb:0c:1d:2a:53:9f:f3:bc:
be:f7:5b:a2:66:72:bb:98:59:49:b6:f1:fd:1f:fe:
a1:f0:59:79:51:72:a7:8c:29:f3:63:b4:8b:6d:90:
4c:b3:7e:c4:f0:96:06:4f:a8:b9:52:52:aa:cb:e5:
d5:76:1e:3c:b5:d3:6d:37:21:b6:e6:85:ab:dd:84:
8a:f4:fe:f4:bc:29:df:92:e7:d9:7f:30:c7:92:19:
6c:f8:f6:86:71:ac:aa:ac:52:76:8f:58:93:b0:e7:
0f:93:cc:2d:5e:9c:71:05:6b:7c:84:ef:e8:cb:c6:
68:91:b3:c2:67:83:87:d3:7e:ea:75:b2:6f:0e:62:
93:12:2a:da:e6:92:16:26:60:b3:f3:39:3e:fe:4c:
01:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:00:50:09:26:87:94:25:BC:62:AB:99:3D:F1:FE:CD:C8:54:8B:81
X509v3 Authority Key Identifier:
keyid:DC:2C:2F:EF:9C:8C:AF:8F:2F:08:21:1E:F0:2C:3D:0A:D3:47:49:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cwv75yMr48vCCEe8Cw9CtNHSRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/xgBQCSaHlCW8YquZPfH-zchUi4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.19.52.0/22
91.224.210.0/23
IPv6:
2a0d:bac0::/29
Signature Algorithm: sha256WithRSAEncryption
c2:bb:90:fe:b1:1f:05:65:e4:31:72:11:86:0d:d9:e9:d7:ae:
7f:89:20:a1:8d:df:fc:e1:b1:1a:a1:57:4c:8c:24:01:f3:69:
17:6c:1c:3d:46:68:d4:6f:f0:48:8c:72:01:5a:9e:92:b6:1d:
87:9a:a1:7d:d4:78:eb:5f:88:be:6a:bf:55:fe:cc:2b:80:1c:
c7:6c:48:a8:02:50:95:fd:ae:55:0b:e3:a6:7c:fb:45:cc:93:
c6:b4:6c:e0:2b:3a:b9:cf:0c:eb:1d:9a:4a:5a:98:ed:17:bd:
80:49:68:5a:d1:e1:83:cb:99:6c:cf:da:e6:5a:c4:8c:be:0c:
57:ad:67:c4:70:46:e5:28:64:44:f1:f2:1b:d6:dd:b9:35:60:
93:28:07:69:4e:16:59:a2:69:d0:89:8c:e7:bd:83:c8:00:e7:
fd:85:1e:b6:c1:be:24:e3:8e:c3:97:3d:04:a1:59:4b:b6:43:
9d:2b:48:da:10:94:14:33:b2:e9:1f:a8:bc:a3:bc:52:19:25:
b4:78:b8:48:6e:10:35:81:6d:a6:cc:99:23:d6:47:a5:e7:fb:
b1:82:65:97:81:b3:54:45:8d:a1:b5:56:a2:ae:77:9d:3b:54:
d5:52:8b:8e:61:a6:c9:95:48:8c:41:02:6a:72:02:aa:98:a7:
74:20:35:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:24 2024 by rpki-client on console-ams.rpki-client.org