Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/0fTmFh29NdMMO8k4aDRtU4Lc4OA.roa
File: 0fTmFh29NdMMO8k4aDRtU4Lc4OA.roa (raw, json)
Hash identifier: BEigKcU37q9HSR/sKzUQPbqNDF+4JFf7ZdtodJkmv04=
Subject key identifier: D1:F4:E6:16:1D:BD:35:D3:0C:3B:C9:38:68:34:6D:53:82:DC:E0:E0
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018A7589FE2EE13BD260588D83EE69AD2B3B
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/0fTmFh29NdMMO8k4aDRtU4Lc4OA.roa
Signing time: Fri 08 Sep 2023 16:04:52 +0000
ROA not before: Fri 08 Sep 2023 16:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63018
IP address blocks: 89.185.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Oct 2023 08:16:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:75:89:fe:2e:e1:3b:d2:60:58:8d:83:ee:69:ad:2b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Sep 8 16:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1f4e6161dbd35d30c3bc93868346d5382dce0e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c5:43:83:8a:75:3a:83:0a:58:aa:d3:44:f1:
83:a1:3b:69:93:37:2f:a3:e1:dc:5c:f2:3a:4e:ce:
e6:33:14:46:ea:15:a9:6b:36:6b:6d:1a:43:b6:42:
d9:69:4f:7b:78:7e:a0:19:6a:c3:4a:cc:af:9f:93:
95:f6:7a:b7:b5:b8:01:9a:78:51:fc:e3:26:5b:c1:
cf:39:ff:8a:24:c6:3f:f4:23:65:eb:5f:c2:d0:e5:
26:4c:5a:d4:79:a7:6d:8b:b7:38:dd:4e:64:7a:2a:
7c:de:65:98:2d:f3:9d:96:25:c0:0a:a2:03:9d:5e:
fb:6f:76:ad:11:be:fa:80:e5:0e:b7:e2:ce:de:7e:
69:8e:08:75:0a:05:d2:11:b4:d1:44:3c:35:29:49:
f3:43:5b:42:d1:b1:7d:83:68:2d:ca:61:1c:84:51:
29:fc:39:b7:ff:12:f0:52:56:f4:39:c7:e9:cc:a7:
97:fb:52:bb:3b:64:14:76:c7:a7:79:33:c4:c1:42:
ec:02:23:94:56:22:0f:a1:1b:80:9b:ac:c1:58:8c:
52:3a:a1:6a:7d:27:58:5c:c7:5f:90:ed:cf:13:ae:
08:39:4c:9f:0b:bc:6f:cc:a1:0b:46:46:85:a3:c4:
cc:eb:e5:1b:4d:f3:b2:28:0e:ca:8e:a0:89:d8:50:
29:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F4:E6:16:1D:BD:35:D3:0C:3B:C9:38:68:34:6D:53:82:DC:E0:E0
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/0fTmFh29NdMMO8k4aDRtU4Lc4OA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.3.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:7f:c3:1a:0a:4b:fc:01:51:73:a2:8b:c1:ce:ab:8c:06:37:
10:35:45:1d:03:d6:80:51:06:bd:26:8d:fb:e8:da:1a:71:7e:
e1:7e:c9:34:5a:b8:cc:cd:4d:ca:12:7d:b0:af:2f:b4:1a:8d:
5f:cd:6f:a0:c0:f2:46:60:13:5c:d5:74:d5:bb:52:8c:23:f3:
c0:d3:05:b0:15:dc:e2:69:5f:25:d8:fc:1f:b2:5d:e1:4b:ad:
cd:2c:06:05:3c:fd:33:8a:f6:50:a3:58:d2:4f:96:77:aa:1f:
58:f0:be:b0:0b:68:33:d3:ba:42:54:12:b1:ff:d9:1d:ac:45:
7b:6e:32:4f:67:d5:9b:71:66:13:08:26:6f:64:84:0f:56:37:
62:40:ea:fc:d0:2b:9a:48:65:4d:92:0d:89:01:45:8b:7d:eb:
59:5c:a9:81:13:73:2f:75:13:f9:cb:c8:f3:b6:71:a9:14:5a:
e6:63:ee:4a:5f:a4:47:79:63:28:50:e9:0b:ab:78:e0:5b:f6:
76:3f:c8:bf:78:1a:4e:2f:db:cc:25:2e:4a:81:25:fb:6c:60:
e7:62:a9:c4:25:fe:4d:e7:0b:53:e4:e6:80:7a:d0:06:9b:f2:
c9:99:ea:28:91:e7:dc:5a:b3:30:71:a1:ff:a4:d8:1d:ea:3a:
22:b7:b5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:45 2024 by rpki-client on console-ams.rpki-client.org