Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/cv8R7W-WpFEM9JlVSLj6wCYD3ug.roa
File: cv8R7W-WpFEM9JlVSLj6wCYD3ug.roa (raw, json)
Hash identifier: gDqBtBYoXvuVDHIAnbUXa5v8z8jAn+Ew9d/UXVvN7LE=
Subject key identifier: 72:FF:11:ED:6F:96:A4:51:0C:F4:99:55:48:B8:FA:C0:26:03:DE:E8
Certificate issuer: /CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Certificate serial: 019290E0E90CCDDBF489B2F0671D9013C1C5
Authority key identifier: 0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/cv8R7W-WpFEM9JlVSLj6wCYD3ug.roa
Signing time: Tue 15 Oct 2024 15:51:51 +0000
ROA not before: Tue 15 Oct 2024 15:51:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 89.150.49.0/24 maxlen: 24
185.33.26.0/24 maxlen: 24
185.162.176.0/24 maxlen: 24
194.99.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Nov 2024 11:31:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:90:e0:e9:0c:cd:db:f4:89:b2:f0:67:1d:90:13:c1:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Validity
Not Before: Oct 15 15:51:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=72ff11ed6f96a4510cf4995548b8fac02603dee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e5:2c:15:b2:26:37:f7:0b:a8:db:43:7a:0e:
b6:1a:27:1d:72:a7:7e:5f:36:59:16:b1:00:9d:2c:
9a:e0:dc:fd:19:65:f9:fe:28:c1:e4:c2:2c:f6:cd:
65:f6:43:99:ed:f9:fd:8d:5d:0b:d0:85:55:30:2e:
9d:6e:66:eb:f3:e7:2a:aa:97:70:25:41:e8:9a:36:
50:47:18:22:3b:22:1d:d0:a3:1f:09:9b:26:6f:ae:
8f:0a:21:f4:9a:e9:71:0c:6b:d3:76:e2:11:6c:84:
42:da:94:92:2f:3b:4b:d5:60:fd:f4:cd:3b:9a:67:
9f:e2:b7:7a:6d:41:68:25:94:12:26:20:c3:7c:7c:
da:0f:a4:41:2f:53:7f:94:be:f3:40:ef:76:95:2c:
69:66:06:3d:ee:77:b9:bf:3a:db:33:83:36:53:f9:
0c:55:1f:a1:92:8f:f5:fb:d5:e7:2a:f3:cc:b1:ab:
0b:f3:dd:87:6b:b5:95:20:bf:57:89:a4:59:d7:b9:
b2:f2:b6:7d:7b:fa:03:20:18:8c:00:51:0e:c0:17:
1e:9d:d9:e4:4d:07:aa:cd:e1:23:7d:db:09:a3:04:
a3:55:2a:86:3a:65:cf:cf:a9:59:13:60:2e:25:4d:
8b:6c:a8:c0:38:9d:a9:47:78:7c:df:43:97:57:5f:
f6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:FF:11:ED:6F:96:A4:51:0C:F4:99:55:48:B8:FA:C0:26:03:DE:E8
X509v3 Authority Key Identifier:
keyid:0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/cv8R7W-WpFEM9JlVSLj6wCYD3ug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.150.49.0/24
185.33.26.0/24
185.162.176.0/24
194.99.156.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:e9:aa:56:8f:8b:8f:eb:a2:20:a3:4f:43:ce:1f:61:d5:33:
5c:1b:82:5f:b0:45:61:c6:df:39:99:b5:87:c8:74:37:a4:25:
32:48:6c:c7:a1:ab:be:6a:20:a9:a1:4f:82:c0:73:c8:ec:e3:
8f:c8:10:bd:35:ec:a0:b7:0c:17:38:1e:2c:38:6a:63:3a:32:
41:d0:40:78:56:db:62:e7:8a:f1:ae:82:68:72:ee:61:c1:5c:
fc:0d:2d:f5:e3:8d:7b:fe:5e:d7:9b:2b:e6:d3:e9:28:73:78:
a2:f8:5f:34:42:c1:9e:44:8c:55:3d:82:85:02:a9:06:62:05:
9d:de:bd:73:cf:fb:d5:8b:61:31:f8:08:86:24:8c:c2:88:2a:
73:35:fd:1a:1d:a1:ea:74:d3:4c:16:c0:5f:52:cb:72:bd:0a:
1e:f0:c1:b8:34:b4:e8:8b:50:13:84:b2:33:48:fc:e4:af:83:
f8:aa:ac:bf:e9:a7:33:22:c8:f4:94:76:b5:ee:d0:88:cb:44:
03:07:48:1b:9a:6e:ba:99:bb:e7:db:67:03:29:b6:98:d7:d5:
77:d7:ff:ea:92:f7:e1:5d:32:b2:d7:01:0a:43:48:bd:cd:03:
74:02:c2:67:28:6e:77:4b:ff:aa:d5:d6:79:ab:a9:05:9d:34:
56:ea:08:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 13:32:29 2024 by rpki-client on console-ams.rpki-client.org