Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/S-8Qlop-W6O9imxx6WRrJ8TGuCQ.roa
File: S-8Qlop-W6O9imxx6WRrJ8TGuCQ.roa (raw, json)
Hash identifier: wRBeLJpuSHGbxXqYMlr3ixHi/jZFeRmaVl4522Wy1b8=
Subject key identifier: 4B:EF:10:96:8A:7E:5B:A3:BD:8A:6C:71:E9:64:6B:27:C4:C6:B8:24
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 01892B20E722A2F1C42CFB7042ECE007F524
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/S-8Qlop-W6O9imxx6WRrJ8TGuCQ.roa
Signing time: Thu 06 Jul 2023 12:15:23 +0000
ROA not before: Thu 06 Jul 2023 12:15:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.185.24.0/22 maxlen: 24
109.72.116.0/22 maxlen: 24
89.185.0.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 11 Jul 2023 08:33:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2b:20:e7:22:a2:f1:c4:2c:fb:70:42:ec:e0:07:f5:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jul 6 12:15:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4bef10968a7e5ba3bd8a6c71e9646b27c4c6b824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2b:f8:90:60:af:fb:fe:9b:cc:75:e0:58:b8:
db:de:3c:45:09:5f:2f:4e:8b:05:fd:cd:3e:25:03:
ca:4b:1f:92:cc:51:bd:79:1f:1e:2e:12:49:cc:51:
6c:95:a8:4b:c8:21:a5:eb:f6:c2:d1:1a:78:64:7c:
4e:ff:76:a4:ce:1f:88:38:7f:26:d2:13:72:8e:89:
fb:62:a1:cb:82:87:f9:11:7f:48:e6:3c:bd:7c:16:
ab:d1:3f:6d:3e:d5:d3:80:ad:c2:19:b6:8b:ed:f6:
05:65:39:6f:6a:be:74:1f:1d:b5:60:38:98:54:cd:
e9:8e:07:32:44:a2:69:de:e2:c6:1c:2b:7a:7a:64:
67:e5:d2:63:5f:49:ee:3a:79:75:c6:cd:5e:b8:e1:
fd:63:08:5f:81:72:21:b0:50:ee:ab:f4:ab:ed:b3:
22:28:6f:91:40:cc:13:85:5c:86:f1:55:b1:c9:88:
46:f4:52:63:1b:65:d0:84:95:db:83:f3:a7:51:e4:
04:a1:dc:a1:3e:31:55:a0:bf:0c:14:fa:23:cb:06:
ee:2e:bb:1a:37:ec:e1:b9:70:f3:17:2b:4c:ce:2a:
10:22:5b:8e:99:78:c1:b7:78:78:b0:31:c3:80:88:
73:19:de:81:62:8b:a8:b7:16:f9:78:96:c7:bf:62:
df:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:EF:10:96:8A:7E:5B:A3:BD:8A:6C:71:E9:64:6B:27:C4:C6:B8:24
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/S-8Qlop-W6O9imxx6WRrJ8TGuCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.0.0/22
89.185.24.0/22
109.72.116.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:0a:3b:f4:79:d6:70:62:bf:8d:cd:eb:3c:42:41:70:ed:02:
85:9b:35:97:1d:1b:90:0f:4a:6b:75:ab:69:ea:09:47:12:93:
df:0c:2d:87:06:2a:0a:19:0b:2f:7c:14:78:87:ad:8a:6a:06:
92:92:5b:fd:39:eb:dd:77:d2:67:fd:ba:ce:80:c3:f5:6b:9a:
80:4b:31:2b:1f:66:f0:0c:30:15:37:13:13:ff:25:7d:f8:3e:
83:e4:da:90:89:95:2f:51:9e:78:ce:4e:b5:d4:3b:bb:0d:b0:
3c:95:80:f4:34:d6:d5:e2:8d:45:b7:53:2e:fd:e0:3c:f9:f2:
b3:f0:45:ad:5a:d8:1f:a8:d6:41:c2:8a:91:85:e8:60:97:81:
7b:ed:57:83:d7:96:a7:22:7c:bf:f2:a1:14:e6:38:0a:c0:13:
38:65:b8:19:2e:3e:d7:72:e9:bf:36:f6:61:95:9a:c0:8e:f3:
80:b8:ad:f2:0b:d1:ba:ef:32:7b:9d:2d:df:e2:d1:07:bd:5d:
b6:15:08:41:78:75:32:1f:e3:ba:77:3e:58:5f:f5:0e:8b:07:
c1:e4:31:ed:c4:f2:9d:f9:3c:2d:d4:23:13:6e:d4:b0:9d:ea:
b1:50:d5:51:73:f0:c0:ee:27:01:38:35:4f:59:86:6c:18:47:
c8:43:18:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org