Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/TWnVvIHg5Ac4ySKzwukMxG3PSRM.roa
File: TWnVvIHg5Ac4ySKzwukMxG3PSRM.roa (raw, json)
Hash identifier: eLjbk+2xzSmbHrNm72GSP7dpqqHiOuDwDmsC4XYplTE=
Subject key identifier: 4D:69:D5:BC:81:E0:E4:07:38:C9:22:B3:C2:E9:0C:C4:6D:CF:49:13
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 0189BC89DC470C342AB850559D0440347B3B
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/TWnVvIHg5Ac4ySKzwukMxG3PSRM.roa
Signing time: Thu 03 Aug 2023 17:54:58 +0000
ROA not before: Thu 03 Aug 2023 17:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211826
IP address blocks: 89.185.2.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bc:89:dc:47:0c:34:2a:b8:50:55:9d:04:40:34:7b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Aug 3 17:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d69d5bc81e0e40738c922b3c2e90cc46dcf4913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:9c:60:b3:32:18:6c:3e:f8:75:d3:16:ae:f2:
12:77:bf:74:e6:f6:d4:de:c0:3b:ab:f5:14:1f:4c:
48:93:5d:8e:2c:a3:67:53:69:5b:ec:d1:31:4d:06:
75:e9:a3:54:cc:57:2a:fb:3b:5f:96:9c:a2:5f:7b:
73:05:75:61:26:79:b3:5d:e1:5a:66:84:ba:ca:50:
be:b9:70:49:01:7a:27:b2:67:b0:5c:ca:ea:81:f3:
3f:83:c6:d8:4d:a6:65:01:a7:ff:82:d2:09:30:f8:
f8:08:c2:8e:8e:a3:40:06:7a:03:38:37:fc:e2:ff:
7f:83:64:e6:5d:27:12:a7:ce:b8:85:db:5a:31:19:
06:65:c9:3a:2c:d0:5b:4e:e0:85:61:b1:e0:a8:a6:
81:5a:20:11:9b:3a:85:b8:36:a8:79:b7:26:c9:32:
25:11:28:d3:b8:6d:7d:4e:0a:c2:7b:9d:c8:10:b8:
41:76:1c:bf:ef:8d:e7:8e:8b:a9:68:0e:cb:56:89:
73:f2:0e:81:e1:d2:cb:2a:12:cb:0c:b2:25:54:6b:
81:8a:f7:e7:c7:da:86:df:28:5f:78:cb:6d:21:fe:
d9:78:a7:a3:07:e4:a1:37:4d:1e:f7:32:31:0a:dc:
e2:f1:68:dd:65:d7:f6:55:8b:66:85:c3:00:e1:52:
37:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:69:D5:BC:81:E0:E4:07:38:C9:22:B3:C2:E9:0C:C4:6D:CF:49:13
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/TWnVvIHg5Ac4ySKzwukMxG3PSRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.2.0/24
Signature Algorithm: sha256WithRSAEncryption
55:e8:26:f4:98:31:8e:cd:20:62:e0:77:7d:b3:41:b4:5c:87:
b9:57:33:ec:92:96:6a:94:24:85:cd:11:ff:30:f7:e2:9d:52:
94:1d:da:2d:21:e1:4e:70:e2:bd:3a:8d:39:81:aa:36:ae:78:
a7:15:28:fd:d7:0b:c9:92:3b:b3:0d:b9:c7:9d:97:5e:15:89:
94:31:e0:22:55:b3:d2:e3:af:00:24:6b:24:17:42:e8:ac:19:
9d:c8:08:05:3b:0e:85:23:4d:c4:f2:8a:97:a2:45:12:c2:36:
60:49:82:44:8a:25:5e:42:da:84:81:36:fd:60:e2:e9:6b:b0:
58:18:1d:f8:f2:e0:d6:3d:9c:9e:79:c7:d1:ca:0f:c0:8c:88:
28:39:fd:52:81:c2:fe:08:53:ba:29:ae:4b:d5:b6:9b:9b:66:
c5:76:08:85:4d:5a:dc:40:36:6c:44:85:98:19:2c:63:05:50:
95:25:87:e8:21:64:9b:de:31:2e:37:60:c3:84:91:9a:9d:83:
41:33:81:9a:06:99:6b:a6:18:d3:98:4d:ad:55:5f:e2:f9:36:
d4:42:66:39:8f:d5:6a:c8:0e:e8:c6:13:34:a3:8f:e7:3e:9b:
89:cb:8f:65:e1:a5:9e:10:9c:1b:b1:f3:36:7e:c2:cb:54:5b:
90:0e:b3:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:46 2024 by rpki-client on console-ams.rpki-client.org