Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/_oYDnv-1mRIFp9uke_4pyq-ZIDc.roa
File: _oYDnv-1mRIFp9uke_4pyq-ZIDc.roa (raw, json)
Hash identifier: Mv6gF8/FLo5FLaV+vR7pX3A2po4oz5/8xEcyBeN7U2A=
Subject key identifier: FE:86:03:9E:FF:B5:99:12:05:A7:DB:A4:7B:FE:29:CA:AF:99:20:37
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018A2CC9D59D8FD7D74EA02F2DF3D6D6DEDA
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/_oYDnv-1mRIFp9uke_4pyq-ZIDc.roa
Signing time: Fri 25 Aug 2023 13:02:19 +0000
ROA not before: Fri 25 Aug 2023 13:02:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 109.72.116.0/22 maxlen: 24
109.72.116.0/24 maxlen: 24
89.185.0.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sun 27 Aug 2023 15:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2c:c9:d5:9d:8f:d7:d7:4e:a0:2f:2d:f3:d6:d6:de:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Aug 25 13:02:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe86039effb5991205a7dba47bfe29caaf992037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9f:a5:e6:d5:d4:e7:4e:80:59:e7:59:7d:b7:
1b:3a:f9:3c:4b:47:2b:13:19:62:f1:83:0c:a2:97:
2f:ac:b9:5d:01:a5:20:9f:17:79:b9:48:72:b1:f1:
09:09:0c:5d:3d:1a:c7:c5:cc:b8:1d:eb:d2:ac:7b:
88:38:ec:0e:5a:a0:34:de:40:fa:ce:2f:ae:68:d7:
8c:e7:2d:94:28:19:95:4d:18:f1:31:c4:89:65:c0:
3c:63:33:fa:3b:08:eb:67:e5:b6:43:3a:05:f8:8f:
6f:f8:63:c3:4d:2c:b4:bd:89:29:15:de:fa:28:4d:
90:81:2c:8e:5a:12:00:8b:ed:d5:c2:bb:7e:6a:07:
ab:24:cd:1b:27:88:10:1a:48:4f:39:a7:35:bf:0c:
a1:c3:41:6b:1c:1d:7e:04:b4:b7:6e:94:75:68:ae:
d1:91:fa:00:99:73:ef:f6:16:a2:15:44:c9:15:16:
b7:33:4f:cb:e2:64:28:e5:8b:85:28:bf:15:4b:c7:
46:32:aa:23:09:d1:58:ba:c7:00:87:87:6e:eb:23:
2d:00:4f:c0:0a:c8:aa:cb:1d:79:52:6e:c6:47:da:
82:6c:82:2e:c4:9a:f7:19:2e:88:54:95:cb:83:37:
f1:46:03:0f:4b:d9:8e:20:6d:08:c3:4e:7d:e3:e0:
ab:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:86:03:9E:FF:B5:99:12:05:A7:DB:A4:7B:FE:29:CA:AF:99:20:37
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/_oYDnv-1mRIFp9uke_4pyq-ZIDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.0.0/22
109.72.116.0/22
Signature Algorithm: sha256WithRSAEncryption
06:cb:b9:37:96:92:9f:b4:16:26:e5:5d:3c:6e:01:47:62:22:
97:e8:45:1f:67:6e:52:20:e3:9c:cf:f5:ff:5a:56:f9:09:b6:
2b:30:ce:6b:ed:f9:64:b1:44:d6:2f:cc:44:af:11:e8:27:ac:
a8:0f:f7:3c:de:ec:9e:e3:5d:59:80:1d:80:96:65:0e:30:86:
c1:b4:dc:d5:a4:b7:62:b3:c3:00:03:26:af:5b:b0:90:96:b9:
83:1e:b3:ac:fd:04:a9:30:69:6b:c7:ec:a7:0a:9d:69:21:4f:
dc:f5:e2:c0:a3:fc:aa:df:d2:e4:56:56:00:d4:1a:fe:41:a9:
ff:84:74:ca:f1:16:37:a9:0d:57:22:7b:39:49:ab:80:d6:77:
1b:0f:a0:67:c7:66:87:32:1f:6a:91:38:f5:da:e5:fd:22:ac:
3a:ec:af:f7:2d:10:31:26:f0:ef:60:b7:0e:f6:b8:38:38:6a:
48:d6:5c:3f:96:a8:f8:fe:93:e5:75:d6:a3:c4:2f:99:c2:bb:
0f:9e:2a:1b:d3:4d:c6:fd:69:ed:01:b0:c1:60:a9:6d:0e:a3:
f5:c4:e4:08:6d:52:28:c9:d4:a4:e5:6a:16:62:39:32:0d:59:
60:a2:3f:d9:86:66:ac:0d:1d:83:07:20:e2:51:35:4d:14:1a:
fc:f7:fa:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:46 2024 by rpki-client on console-ams.rpki-client.org