Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/j-DpKYXQfvk8DeZBWK5SzEUENnw.roa
File: j-DpKYXQfvk8DeZBWK5SzEUENnw.roa (raw, json)
Hash identifier: mlQVg08VSWiPJlAwCuVs8hyIXC8cr6aM6ldlMLhcDbU=
Subject key identifier: 8F:E0:E9:29:85:D0:7E:F9:3C:0D:E6:41:58:AE:52:CC:45:04:36:7C
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 0187E0A996ED6AC451CAFDD3832B11957756
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/j-DpKYXQfvk8DeZBWK5SzEUENnw.roa
Signing time: Wed 03 May 2023 08:10:23 +0000
ROA not before: Wed 03 May 2023 08:10:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.185.0.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 09 May 2023 04:42:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e0:a9:96:ed:6a:c4:51:ca:fd:d3:83:2b:11:95:77:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: May 3 08:10:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8fe0e92985d07ef93c0de64158ae52cc4504367c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c8:3e:36:21:a4:97:ec:20:ce:d6:39:04:09:
ef:79:fb:4a:c8:e9:ab:ff:ce:1f:bf:25:5b:81:b6:
a7:00:03:09:60:73:5d:38:17:88:09:cc:3c:bd:8d:
39:39:68:35:27:c6:85:19:c1:d0:fa:0a:44:8d:a5:
9e:c4:05:de:75:c2:a1:5a:bd:e3:8a:f2:95:32:a4:
67:43:bc:61:ea:f6:13:d3:6b:82:1c:8e:bd:90:ac:
af:2d:a6:ea:e6:68:79:29:ce:cb:c1:0a:d3:aa:ee:
b5:e7:2d:3a:c7:0e:d8:3f:51:94:98:f8:fb:cb:2a:
b1:ce:b0:5f:06:29:ba:0d:d4:32:bb:b8:83:08:2c:
21:af:67:c9:5a:c8:d4:5c:8c:97:a1:53:8b:9e:1f:
d5:c0:18:b2:a2:fe:ef:8b:12:99:b5:14:f3:55:84:
d8:58:c3:5a:39:e5:24:2d:2f:6f:00:d1:20:05:71:
96:0d:fe:22:32:0c:08:4d:92:c4:df:e1:3f:83:75:
22:7f:6d:b2:e7:4c:7a:fb:d6:4c:e7:31:70:3f:bf:
15:86:e5:29:00:9c:5d:cd:4c:2d:22:dd:34:d9:08:
f9:03:4d:64:87:e5:ea:bf:1e:d0:24:5d:06:7a:57:
27:44:9e:f6:fd:58:36:53:80:8b:fc:83:1f:8a:91:
6b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E0:E9:29:85:D0:7E:F9:3C:0D:E6:41:58:AE:52:CC:45:04:36:7C
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/j-DpKYXQfvk8DeZBWK5SzEUENnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.0.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:9e:6e:75:fe:9c:e5:c1:99:c0:c7:a7:dd:e2:49:ce:29:a7:
7f:e9:c7:97:0d:47:2f:81:3d:d3:fb:8a:e6:a9:e4:c3:47:9c:
32:5b:f9:bf:46:1c:4f:7d:72:95:0b:4c:18:89:cd:11:6e:40:
cd:46:17:8f:c2:3f:11:24:44:bf:b0:de:d0:f1:90:69:11:22:
a4:a5:c2:8f:44:5c:7a:b3:cb:f9:47:ac:96:7b:19:8f:d1:a1:
f6:26:b1:4b:35:e6:f1:3a:58:f1:e1:54:76:f0:4a:6b:65:11:
e3:b8:8d:93:f9:69:4d:cf:0b:f8:61:91:1b:0c:aa:33:4a:03:
5c:71:89:12:24:ab:ff:3e:40:b0:38:d1:8c:6f:d9:93:c5:98:
30:ca:16:ed:33:f3:cb:71:87:05:c6:d3:39:f2:ab:e9:76:5a:
c4:7b:ea:58:3c:d1:c3:ef:d1:91:58:82:3c:a3:2b:13:c1:e1:
b5:5d:72:c2:e6:91:ca:9f:6c:0b:1f:ea:e9:d3:eb:57:80:60:
d5:ae:ac:2d:b1:3d:52:dd:2b:93:9f:d3:51:eb:74:af:e0:e3:
0b:7d:20:29:02:55:bb:b3:5d:82:62:6e:41:69:71:a1:71:12:
5e:a2:35:ba:e3:48:25:f2:91:c1:e3:56:6b:21:62:e5:ff:11:
7a:d0:b1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org