Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/gKamRHMUgOurVyEIe8Ckb5--qEw.roa
File: gKamRHMUgOurVyEIe8Ckb5--qEw.roa (raw, json)
Hash identifier: j6XsNc1g9ItyGIvJ9PbEqQARVI1pj2SmG0Vdp+UHwr8=
Subject key identifier: 80:A6:A6:44:73:14:80:EB:AB:57:21:08:7B:C0:A4:6F:9F:BE:A8:4C
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 0189F855F05DB284C2E8A0DD37D6C6C3B281
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/gKamRHMUgOurVyEIe8Ckb5--qEw.roa
Signing time: Tue 15 Aug 2023 08:35:28 +0000
ROA not before: Tue 15 Aug 2023 08:35:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 89.185.24.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 28 Sep 2023 08:42:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f8:55:f0:5d:b2:84:c2:e8:a0:dd:37:d6:c6:c3:b2:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Aug 15 08:35:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80a6a644731480ebab5721087bc0a46f9fbea84c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d5:28:76:2b:3b:17:0a:04:f7:9d:95:da:4f:
e1:c2:59:82:a3:ab:30:be:3c:d4:b4:48:64:03:86:
7b:ef:ff:b4:da:00:29:a4:e0:cc:08:ee:aa:a0:0a:
78:7a:73:1c:46:ff:c9:60:95:f5:94:a8:e6:b3:07:
bc:75:64:de:3f:c2:69:86:e4:0f:26:7e:d5:e5:1e:
94:9d:f5:0f:9d:d4:03:d2:e9:ea:77:ca:c7:01:6f:
60:51:72:4a:fa:6f:fa:76:57:fb:6a:ae:0e:99:a3:
29:6b:9d:31:1c:d2:58:c7:70:43:77:cd:d9:67:d1:
a5:98:9b:78:86:87:d1:41:19:1a:d3:65:ab:f0:a8:
5c:7e:a2:0a:55:32:a8:00:03:63:2c:90:8e:e8:b0:
40:8b:34:28:60:01:ff:5c:ec:fc:12:1d:24:03:76:
35:45:63:60:d0:96:4e:61:c3:62:66:9f:9d:71:53:
00:42:f6:57:15:d0:1a:8c:ed:60:64:37:8f:3f:20:
a4:2f:41:7f:f6:f6:22:38:23:1f:21:e1:a9:0c:43:
22:c9:6e:36:75:4b:dd:ab:9c:67:1e:72:33:10:04:
1a:3f:9a:a8:3a:9a:47:86:4c:b8:76:16:35:a6:fe:
a9:43:72:e8:7e:b4:77:0a:fa:6e:69:32:b1:48:7f:
e0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A6:A6:44:73:14:80:EB:AB:57:21:08:7B:C0:A4:6F:9F:BE:A8:4C
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/gKamRHMUgOurVyEIe8Ckb5--qEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.24.0/22
Signature Algorithm: sha256WithRSAEncryption
30:40:d2:1d:2a:f3:41:3f:60:53:d4:4d:75:68:5c:9a:c8:e1:
b8:e0:ac:08:ed:80:cd:a4:fc:9a:bb:7c:ec:5c:2c:bb:86:cc:
ed:fa:be:a9:f0:33:72:16:15:69:53:60:89:19:3e:31:86:bc:
c1:06:cc:ca:78:a2:82:be:ee:c7:17:99:73:f5:f8:5c:a1:cf:
84:89:98:ec:50:d0:a1:34:e7:32:49:5f:07:b3:a6:29:63:1e:
d0:d2:aa:2d:d9:11:c9:ef:84:6f:59:4d:bc:d0:93:dd:28:1d:
2e:f7:f2:95:6e:d9:f5:b4:92:4c:df:7b:e8:b0:e9:09:79:57:
87:bf:a7:5e:5d:c7:6a:c9:5e:91:66:0a:52:a6:8d:f2:26:46:
0e:4b:67:0e:4e:28:83:ca:68:7e:90:9a:80:a4:d2:e8:b7:69:
a1:ab:bc:2b:8e:13:d1:2f:71:89:26:e0:44:f7:a0:94:0e:f3:
5f:3f:bb:5f:58:2e:d4:72:e1:0d:4f:6e:10:28:5d:a0:aa:c8:
4f:93:48:bc:52:07:9d:6b:6f:90:7c:de:9d:ce:ed:b4:0a:4f:
da:e8:c7:67:89:57:8d:1e:4f:d1:93:4a:03:58:51:1f:c5:a0:
06:dd:51:86:2e:64:b4:60:a5:98:c2:fd:7b:bc:61:61:92:0d:
ce:89:10:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org