Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/aeniB_J5XOhkSnxsRfBzaWXowtA.roa
File: aeniB_J5XOhkSnxsRfBzaWXowtA.roa (raw, json)
Hash identifier: +PuWzlYlWBauqtpwl+mI9ycUPdui2dcKh3ceFL5jo+0=
Subject key identifier: 69:E9:E2:07:F2:79:5C:E8:64:4A:7C:6C:45:F0:73:69:65:E8:C2:D0
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 0188887421932A41243AC9418A500BF2D81E
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/aeniB_J5XOhkSnxsRfBzaWXowtA.roa
Signing time: Sun 04 Jun 2023 22:08:12 +0000
ROA not before: Sun 04 Jun 2023 22:08:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.185.0.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sun 04 Jun 2023 22:10:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:88:74:21:93:2a:41:24:3a:c9:41:8a:50:0b:f2:d8:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jun 4 22:08:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69e9e207f2795ce8644a7c6c45f0736965e8c2d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c1:13:cf:6a:08:9b:d5:bd:87:c6:09:c4:09:
47:f0:b1:b2:d1:b8:49:54:97:3d:19:a5:81:a5:5d:
04:ab:cb:17:ef:2d:f0:4e:dd:db:56:74:8c:d7:9a:
19:4e:b7:27:82:94:24:14:df:3e:e5:d3:a2:97:88:
38:45:01:a3:22:07:4f:d6:e4:db:68:5f:87:0e:a0:
4c:62:ae:b9:32:31:db:c9:0b:2b:45:a0:87:54:f9:
90:6a:b8:43:5a:4c:05:15:e8:28:7b:da:88:93:a8:
7a:57:b6:49:d8:63:12:82:23:66:f1:78:12:69:03:
34:86:24:1e:84:8a:76:83:0a:1d:31:39:ed:80:90:
12:f9:03:f3:6a:f1:e0:5a:33:90:f0:f0:35:3f:29:
a9:dc:3c:fb:47:92:36:d8:8f:08:35:24:2a:d6:b2:
92:7b:2f:f5:f7:db:87:15:95:c3:6d:03:5d:46:8d:
cd:8c:fe:16:c2:eb:58:3c:70:e8:9e:a2:68:82:f6:
42:7f:35:6e:6d:f4:78:d8:f8:01:a4:43:58:78:0a:
cd:97:e0:28:54:98:75:29:51:22:06:22:1a:7f:f8:
90:91:f6:1a:55:ee:53:5e:9f:90:90:f1:a5:2a:c0:
6c:22:41:0d:3b:a7:3a:86:1b:a9:be:47:f9:49:76:
16:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E9:E2:07:F2:79:5C:E8:64:4A:7C:6C:45:F0:73:69:65:E8:C2:D0
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/aeniB_J5XOhkSnxsRfBzaWXowtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.0.0/22
Signature Algorithm: sha256WithRSAEncryption
84:75:94:09:c2:83:27:e0:e2:58:2f:33:13:cf:7e:9c:cd:fe:
83:4a:e3:d7:25:ac:bc:d6:5d:68:7b:b3:52:8a:cc:c9:e6:9e:
16:9a:2e:69:3f:53:88:b2:0e:37:fc:69:51:a9:33:b5:e8:67:
f1:00:25:68:57:5d:96:a0:26:95:3e:cc:7f:29:89:6e:6a:4d:
77:53:c1:c8:ff:f4:17:b0:a0:64:3f:e2:7d:cd:45:e4:94:33:
81:d7:05:5f:33:2e:92:f0:a8:18:d8:5e:bf:d5:16:c4:b5:23:
df:7f:df:d7:f0:bf:4b:c8:09:23:c9:8f:97:e6:fe:bf:81:6d:
a4:73:36:3d:0f:cf:d6:07:58:b4:75:9e:f3:85:89:8c:b0:c5:
88:52:7a:68:99:46:96:1a:02:5a:f7:11:77:22:05:b1:75:b9:
2c:fa:bf:4b:ad:7b:e3:51:78:90:20:a0:2f:29:94:9a:99:34:
51:ff:fe:f0:ba:35:39:aa:ae:fd:60:b2:9d:69:29:fd:9d:69:
cc:af:d0:eb:3b:2d:ad:3f:95:fc:d1:4f:b6:5a:2a:d2:f3:68:
74:94:9b:9e:0b:43:f5:be:f9:c6:32:ab:a4:97:df:f3:1b:ba:
86:fd:35:a8:28:55:fd:78:9b:39:dd:d6:a2:f4:37:d3:c4:22:
3a:02:0f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:46 2024 by rpki-client on console-ams.rpki-client.org