Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/5ySNsoSCqs08tMc2AebghKBnzcI.roa
File: 5ySNsoSCqs08tMc2AebghKBnzcI.roa (raw, json)
Hash identifier: hUACm3ECty9NkDfB30qTDJhmFLq881z8XFAo0Qzj/Dw=
Subject key identifier: E7:24:8D:B2:84:82:AA:CD:3C:B4:C7:36:01:E6:E0:84:A0:67:CD:C2
Certificate issuer: /CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Certificate serial: 0192770076A72BC158CC2F32A0145060404C
Authority key identifier: 0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/5ySNsoSCqs08tMc2AebghKBnzcI.roa
Signing time: Thu 10 Oct 2024 15:16:11 +0000
ROA not before: Thu 10 Oct 2024 15:16:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 89.150.49.0/24 maxlen: 24
185.162.176.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Oct 2024 15:51:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:77:00:76:a7:2b:c1:58:cc:2f:32:a0:14:50:60:40:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Validity
Not Before: Oct 10 15:16:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e7248db28482aacd3cb4c73601e6e084a067cdc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b6:c2:c7:9f:40:a1:54:a8:c6:71:24:c6:99:
71:79:0e:e2:87:e8:49:2f:d5:1d:55:10:47:80:95:
2d:9c:fa:01:cc:ac:42:a5:ef:75:8f:ba:96:3a:78:
01:93:2a:66:c7:b1:a4:d1:f7:82:d7:94:b6:4a:b1:
88:69:53:b2:e1:d1:6d:55:b4:09:da:20:4b:7f:41:
b4:ab:28:2f:63:67:63:c3:0d:50:59:b7:46:78:48:
e6:ed:ee:fe:fd:7c:01:23:79:2f:bc:79:5b:ac:4f:
03:1e:45:a0:71:14:fb:a6:e1:5f:f5:5c:38:1d:26:
33:ae:7b:67:15:3a:32:33:34:3c:b9:79:07:a4:d4:
01:9e:d5:cf:b1:2d:c9:2e:fd:a1:2e:c0:4a:71:aa:
98:4f:b3:89:ca:3b:20:32:5f:c2:7d:b6:ab:c5:a2:
66:00:75:11:a0:22:c8:0d:28:19:63:9c:81:71:6a:
28:ee:99:d8:10:23:ed:e1:74:fd:6e:4f:d4:91:f3:
c8:03:26:e1:7a:ab:c1:94:db:80:5f:11:b2:34:bb:
9f:2a:f9:d3:26:9f:39:37:38:d4:c9:0d:04:ea:c1:
1c:9f:ae:ab:f9:e7:8d:d6:60:90:20:17:b6:70:c3:
bb:c3:2a:bc:a5:2d:57:17:32:33:ee:bb:d5:4e:dc:
48:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:24:8D:B2:84:82:AA:CD:3C:B4:C7:36:01:E6:E0:84:A0:67:CD:C2
X509v3 Authority Key Identifier:
keyid:0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/5ySNsoSCqs08tMc2AebghKBnzcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.150.49.0/24
185.162.176.0/24
Signature Algorithm: sha256WithRSAEncryption
87:2b:5a:d4:f2:90:9e:f9:64:4c:5c:58:3d:65:53:a4:23:79:
02:b2:50:37:43:30:75:dc:a1:27:01:fc:13:f4:16:00:74:6d:
36:c9:34:2e:d3:a9:b4:6e:70:15:99:fa:13:15:7b:e4:d0:22:
85:c1:69:4d:c1:04:ec:2b:58:74:15:7f:ca:5c:ee:d1:0d:f0:
8b:d3:bd:47:aa:e4:ae:6f:59:14:76:9c:c4:73:39:4f:be:c7:
b3:43:46:1d:a7:fd:02:77:07:cb:09:1c:25:9c:ca:5e:1b:6e:
e9:99:ec:2b:eb:d3:b1:31:3d:e8:df:e1:e2:71:3e:61:36:27:
b4:13:aa:04:b7:52:fe:9e:34:05:5b:65:a8:ff:ee:36:4e:01:
cf:06:e6:83:e3:4d:af:cf:e6:06:67:8a:38:e5:88:b2:8d:0d:
50:5b:12:29:79:63:d1:1e:a8:fb:3d:da:97:ec:72:03:85:f9:
9d:d3:2d:0a:b4:b4:57:85:07:09:58:0a:07:b3:d3:f2:a2:fa:
4c:7c:c8:2c:fb:aa:7c:8e:68:f1:89:e8:de:8d:8a:a8:a8:0b:
dd:4b:71:48:1a:df:02:19:bd:5f:84:e3:0e:d2:be:16:c1:01:
d4:0a:11:15:9c:06:d9:f6:65:7d:2f:0f:ff:f9:d8:99:ba:a1:
11:0d:c6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 20:42:51 2024 by rpki-client on console-ams.rpki-client.org