Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/6ey4y3fMocMZKci5IP43LnrVvtE.roa
File: 6ey4y3fMocMZKci5IP43LnrVvtE.roa (raw, json)
Hash identifier: qN4Erl3zkI1O2d9WoS/FTOLscJLY2dijy3rVl59DCrg=
Subject key identifier: E9:EC:B8:CB:77:CC:A1:C3:19:29:C8:B9:20:FE:37:2E:7A:D5:BE:D1
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 0187C1DF2CF47CD50D3BFA05E2ABA12553D1
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/6ey4y3fMocMZKci5IP43LnrVvtE.roa
Signing time: Thu 27 Apr 2023 08:40:41 +0000
ROA not before: Thu 27 Apr 2023 08:40:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203442
IP address blocks: 89.185.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Sep 2023 13:54:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c1:df:2c:f4:7c:d5:0d:3b:fa:05:e2:ab:a1:25:53:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Apr 27 08:40:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9ecb8cb77cca1c31929c8b920fe372e7ad5bed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a1:1d:d7:01:20:28:29:8b:c9:50:9f:d1:87:
3e:8a:6c:6b:90:92:23:04:77:5c:12:37:71:74:9e:
fa:2f:11:d2:60:72:9a:d4:e1:9b:cb:eb:30:5d:77:
c8:c3:27:84:08:81:3e:ef:00:42:aa:df:10:70:e0:
6d:9c:a9:e3:af:db:c8:a5:89:40:d0:e8:4c:b0:48:
52:97:cf:08:e1:ec:82:88:b6:5a:81:19:4c:cd:c8:
9d:03:24:83:2f:ed:39:b5:c9:08:99:1c:c6:75:f6:
ad:46:ae:2c:ad:3f:b2:56:9e:5e:45:9b:6e:df:40:
91:ee:5a:d9:e6:5c:f2:23:dd:73:2e:49:06:a8:97:
bc:a8:a5:7a:78:11:be:a5:f9:af:a1:c5:85:14:ad:
ea:4d:6d:c7:92:fc:51:88:66:1b:f0:e4:77:57:44:
97:36:d0:a2:ef:ae:64:0d:a0:4e:f6:3f:4e:0c:37:
d1:77:f2:9f:f6:d7:fa:a4:61:51:53:5a:d2:cd:e7:
4a:2a:41:a2:01:00:aa:5d:d3:c1:22:1f:e0:d5:ab:
4e:2a:ea:17:24:6e:b4:36:99:78:6b:c9:ea:5a:33:
f4:24:a0:16:76:d4:ba:46:dc:44:05:fd:27:40:14:
2f:36:26:e7:e6:0b:c0:87:d1:d8:92:e2:ee:2f:c1:
30:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:EC:B8:CB:77:CC:A1:C3:19:29:C8:B9:20:FE:37:2E:7A:D5:BE:D1
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/6ey4y3fMocMZKci5IP43LnrVvtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.0.0/24
Signature Algorithm: sha256WithRSAEncryption
12:0c:45:54:bb:e7:d4:4b:da:71:fd:b6:21:02:1a:e2:4c:96:
04:63:8b:2f:07:ac:67:ac:f7:89:4e:88:53:e2:12:21:d8:de:
5c:dd:dc:b0:60:b3:4c:02:a9:05:c7:c0:24:8d:08:ca:89:05:
a3:27:35:67:7f:14:8a:e4:5e:fa:9e:d0:ac:44:44:14:59:c1:
99:04:82:13:4e:8f:14:13:c7:5f:1f:e3:10:d8:bb:81:fe:3d:
6f:f5:a1:61:3f:a9:ac:a3:77:72:ad:06:b4:29:fe:66:bb:32:
1d:85:e2:a6:83:e2:f1:9e:e4:b7:a3:fe:77:35:de:26:45:1c:
97:81:06:e3:6e:e4:1d:17:86:b8:d3:db:71:b2:2e:90:87:ef:
d1:33:59:72:a1:05:7e:81:63:0e:d9:67:18:ca:33:55:e2:21:
38:e2:8d:86:79:97:bd:83:a8:cf:e1:a5:2f:fe:6b:ac:e4:d2:
30:e9:98:cc:ca:d8:7f:d4:fb:59:35:27:cd:28:47:73:3d:15:
99:b3:ab:82:2f:1c:99:25:99:03:ca:34:6a:e9:0a:85:37:b4:
b2:99:60:12:29:49:09:7b:5b:00:dd:e1:1b:9c:7c:07:28:f4:
6a:64:12:5f:7f:be:90:85:83:76:d2:9f:2b:d0:4a:9a:35:ec:
8e:5b:3c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org