Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/0sOSTZXdDGuNEQEXqckrICxyVIM.roa
File: 0sOSTZXdDGuNEQEXqckrICxyVIM.roa (raw, json)
Hash identifier: zQXmV7DnA+NngWG1mv9H/YN4MKj32/6tbK+ftN7G7to=
Subject key identifier: D2:C3:92:4D:95:DD:0C:6B:8D:11:01:17:A9:C9:2B:20:2C:72:54:83
Certificate issuer: /CN=c7c24de99101fafdf74bca293fd6d95060d50a63
Certificate serial: 018BA425B39498EC3768DBC2EB7A3A2BDFC0
Authority key identifier: C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/0sOSTZXdDGuNEQEXqckrICxyVIM.roa
Signing time: Mon 06 Nov 2023 10:20:16 +0000
ROA not before: Mon 06 Nov 2023 10:20:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34659
IP address blocks: 87.89.96.0/20 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a4:25:b3:94:98:ec:37:68:db:c2:eb:7a:3a:2b:df:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7c24de99101fafdf74bca293fd6d95060d50a63
Validity
Not Before: Nov 6 10:20:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d2c3924d95dd0c6b8d110117a9c92b202c725483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3e:9e:d2:bd:f5:e1:ef:4e:b5:d7:7a:86:ea:
10:f3:47:75:8d:e8:bb:ef:de:73:97:95:7c:0e:29:
c8:06:70:06:60:78:d4:ae:a4:04:cf:40:b2:52:6a:
4f:5f:21:14:5e:5c:57:32:8a:99:5f:3b:38:38:3f:
05:76:e5:a5:29:c7:5f:2d:41:da:4d:dc:d4:6f:3b:
5b:a2:03:d7:8d:68:33:66:2c:06:83:a3:49:8e:a1:
5e:34:b7:fd:74:5d:42:94:72:0d:4f:6e:3b:fb:05:
eb:42:3b:8d:40:a5:60:c8:eb:b8:97:d5:fc:50:34:
68:23:0b:12:91:c6:95:bc:d8:89:30:ae:ff:d6:ba:
c6:30:e9:91:d2:61:77:2a:5e:52:8e:2d:5c:a9:e1:
21:17:e4:1c:75:38:ae:27:db:c0:7d:98:4c:94:34:
a4:2c:e4:17:c7:da:ae:b9:f7:3f:1f:80:75:b1:c9:
51:12:8d:32:35:92:cf:31:fb:fb:7a:1e:1e:5d:b6:
71:ed:73:ad:ca:fa:08:ad:f5:a6:f8:3a:21:e4:1f:
f0:63:57:c8:14:72:49:0e:c9:2a:81:01:d1:99:52:
2e:f2:69:22:01:7d:a9:88:36:03:b7:38:3f:ef:a5:
ea:4b:1e:09:e2:7c:31:9b:2f:44:55:bb:ce:9f:1f:
cc:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C3:92:4D:95:DD:0C:6B:8D:11:01:17:A9:C9:2B:20:2C:72:54:83
X509v3 Authority Key Identifier:
keyid:C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/0sOSTZXdDGuNEQEXqckrICxyVIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.89.96.0/20
Signature Algorithm: sha256WithRSAEncryption
a2:5b:80:cc:db:31:db:cb:18:b6:0a:df:dd:04:99:4c:ef:19:
06:99:07:47:af:59:c6:08:e5:9c:fc:01:8f:d6:4a:4d:0d:5e:
39:9f:85:30:7d:e2:d3:58:57:90:eb:d7:f1:59:a3:a2:8c:64:
43:89:ce:4e:cd:dd:76:24:e8:a7:14:a0:35:73:75:76:0c:6d:
19:18:79:1e:a1:02:99:9d:ff:8b:ae:9e:3f:cc:71:ab:72:b5:
72:72:98:ad:cc:47:ce:5b:75:3e:d5:cc:0e:c1:29:3c:33:9d:
9a:e8:01:62:c2:22:fe:88:34:65:29:88:fa:ee:d4:7f:95:5b:
22:c7:77:00:de:e4:20:69:76:6a:6c:ee:97:97:da:43:bd:bc:
bf:92:4f:a7:8b:e1:1d:11:b3:f3:69:24:7f:d5:ba:9b:d4:3d:
88:48:fe:41:c1:b0:d1:f1:26:93:77:80:62:c2:65:c9:4a:d6:
40:d5:eb:22:76:4c:8e:d5:af:c8:f7:91:00:b1:de:41:e3:2f:
8b:38:0f:ab:d8:42:ae:f5:6d:c3:c2:66:cc:d4:6b:cc:63:3d:
60:7c:b2:2b:b0:0a:2a:3b:2d:f9:f9:b9:fc:a8:e2:23:3d:ba:
ea:b8:f6:ac:e0:7f:19:25:06:87:e0:ce:61:96:3f:be:b1:f0:
d8:4b:2f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:38 2024 by rpki-client on console-fra.rpki-client.org