Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/87tfYOf6nYdeEI8ZlEArpxhEbO8.roa
File: 87tfYOf6nYdeEI8ZlEArpxhEbO8.roa (raw, json)
Hash identifier: 3HawqmIYB6tO0R5Tejl07u1Xy8VsDnQNbMo3HCFu17Q=
Subject key identifier: F3:BB:5F:60:E7:FA:9D:87:5E:10:8F:19:94:40:2B:A7:18:44:6C:EF
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018C6C6C001F3EADDFA2F126DEEA9DDC77AB
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/87tfYOf6nYdeEI8ZlEArpxhEbO8.roa
Signing time: Fri 15 Dec 2023 07:41:06 +0000
ROA not before: Fri 15 Dec 2023 07:41:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202662
IP address blocks: 89.185.24.0/22 maxlen: 24
89.185.28.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6c:6c:00:1f:3e:ad:df:a2:f1:26:de:ea:9d:dc:77:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Dec 15 07:41:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3bb5f60e7fa9d875e108f1994402ba718446cef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:63:3c:5a:59:5e:ae:b1:de:5d:11:f1:77:46:
02:29:67:da:13:b4:91:d9:28:f6:5e:d1:26:de:99:
5d:69:e3:60:a8:7d:79:e6:62:e7:10:3c:aa:a0:6b:
a2:51:d6:e4:b8:86:04:6a:b2:74:b8:91:c6:f8:d4:
25:6e:76:3e:9d:75:8c:2d:8a:bc:e0:51:c3:c3:77:
ef:99:db:80:d0:aa:2c:0d:43:43:65:b9:ff:74:88:
b5:4c:43:9d:d6:ff:4a:96:4e:02:ab:29:c6:d3:47:
44:f5:1b:fb:31:36:b5:f2:53:76:65:bb:af:d7:05:
04:fe:7b:eb:53:4f:5e:b5:32:8a:8d:29:15:b5:a4:
d6:69:6f:21:f3:72:34:fc:9d:b9:18:b6:c7:02:8b:
8f:16:70:d0:d8:37:2c:8a:74:d8:9f:b9:79:a4:6f:
ee:cc:b3:50:94:be:f2:84:ab:17:94:01:ef:cc:4d:
33:c9:07:4d:80:79:56:7b:24:2b:16:a8:11:77:35:
ab:e5:10:4c:17:e0:3f:ec:51:bd:c8:60:b3:d3:58:
15:cc:92:44:59:36:79:e7:5b:90:4b:e1:af:ef:80:
fd:e6:58:40:2f:25:5a:01:a4:cf:74:07:62:a7:9e:
d6:c8:7c:e1:ae:46:e3:de:d7:f9:ea:35:79:95:18:
c1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:BB:5F:60:E7:FA:9D:87:5E:10:8F:19:94:40:2B:A7:18:44:6C:EF
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/87tfYOf6nYdeEI8ZlEArpxhEbO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.24.0/21
Signature Algorithm: sha256WithRSAEncryption
4c:63:5d:13:dc:cd:47:f6:41:35:ef:58:ea:99:2b:61:db:f0:
04:3a:cd:b0:f7:ab:4a:9c:7c:bf:75:96:88:68:1d:1d:a2:e3:
02:e9:73:fc:f1:68:c7:0d:ef:92:28:90:52:69:72:b5:33:e6:
b2:30:53:b9:01:9f:53:a2:f0:b0:3b:5b:91:39:69:58:a3:11:
7e:cf:4f:c6:22:6b:5e:03:f5:b4:ee:81:e7:a6:c5:46:af:53:
f9:df:2e:05:44:4c:6a:16:be:05:fa:a4:ac:06:db:bb:8b:d7:
cb:cb:7d:1c:d8:f0:e6:4f:9c:29:0d:84:11:3c:fd:c6:e9:50:
7b:5b:bf:4c:74:9b:2b:4b:b9:d3:3c:d4:90:e8:9d:d3:fb:ed:
7a:d7:0f:32:94:c2:1f:71:1a:8a:29:61:54:4f:83:47:95:8a:
0b:4f:61:d9:fd:cf:c8:24:dd:cc:a8:2c:4b:fc:f4:d1:cd:66:
76:8d:a0:94:65:50:cb:b0:b8:34:85:05:23:b3:80:99:46:3f:
a2:18:18:f7:d1:c5:e0:9a:47:06:1e:a5:32:51:5c:d5:b7:1a:
7c:ed:6d:d2:e5:4e:94:9b:5d:7d:16:b5:9d:1f:5d:6e:7e:06:
96:14:79:ab:97:14:86:5c:86:7a:af:88:3b:c0:75:c6:29:7b:
24:6b:34:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org