Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/yTTEnCgKyAcRMnfEXIrUF3otozs.roa
File: yTTEnCgKyAcRMnfEXIrUF3otozs.roa (raw, json)
Hash identifier: 6PolvTtzmVOVKs9FA759h0naWUgdVAcVTtadK1ibFTM=
Subject key identifier: C9:34:C4:9C:28:0A:C8:07:11:32:77:C4:5C:8A:D4:17:7A:2D:A3:3B
Certificate issuer: /CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
Certificate serial: 01856C01080D79880E158FC0B640DC8A438D
Authority key identifier: 75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/yTTEnCgKyAcRMnfEXIrUF3otozs.roa
Signing time: Sun 01 Jan 2023 06:24:44 +0000
ROA not before: Sun 01 Jan 2023 06:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 262182
IP address blocks: 89.32.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:01:08:0d:79:88:0e:15:8f:c0:b6:40:dc:8a:43:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
Validity
Not Before: Jan 1 06:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c934c49c280ac807113277c45c8ad4177a2da33b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:57:b8:51:a3:c4:fe:82:7d:29:35:8e:fb:5d:
0a:c0:55:72:2d:70:d0:b0:73:49:b7:c2:6f:bd:ac:
48:19:81:18:28:dc:e7:2d:d9:22:e7:23:36:12:17:
00:d8:52:d6:2c:44:b6:a9:17:c8:09:e0:5a:7f:1b:
f3:50:84:da:e5:b2:83:00:37:3a:b3:1c:19:0d:77:
ee:9c:85:95:25:28:6e:5a:13:aa:f3:4b:37:9d:aa:
b4:8d:a2:87:4c:17:8e:35:e9:41:b7:1d:4c:ae:18:
a1:77:a7:13:9e:b9:e9:b0:c6:62:35:57:84:22:92:
64:2a:d5:7c:05:06:23:68:c5:1b:ef:30:8d:ca:4d:
c2:9c:cb:93:7c:e2:81:75:c9:c8:d2:cf:35:a5:d2:
f9:84:93:26:8f:3e:0a:41:15:29:a5:14:73:f7:8e:
85:80:12:d8:cd:34:f6:b0:05:ad:d0:55:3b:28:e9:
92:44:d7:3b:b2:78:d8:6a:1e:59:11:2f:9b:a8:95:
ff:93:e4:c0:b4:48:dc:de:29:d2:33:ad:5d:ff:c2:
ff:f9:98:61:3b:71:17:b2:c2:21:90:3f:35:e0:53:
f3:29:eb:ec:b0:3a:91:93:eb:f7:2c:93:3e:1a:60:
e3:a1:01:24:99:6e:7c:5e:cd:e2:d0:a7:5f:ac:61:
34:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:34:C4:9C:28:0A:C8:07:11:32:77:C4:5C:8A:D4:17:7A:2D:A3:3B
X509v3 Authority Key Identifier:
keyid:75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/yTTEnCgKyAcRMnfEXIrUF3otozs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.32.178.0/24
Signature Algorithm: sha256WithRSAEncryption
48:d8:3b:c5:c4:b1:84:8d:4b:85:b9:d6:96:c8:37:16:8f:8f:
fb:81:63:b1:c3:eb:ea:7b:1c:66:85:a9:48:54:af:30:17:ac:
e4:99:63:56:1c:55:dd:71:fd:a5:d5:4e:ea:17:0a:90:ab:e0:
24:3b:60:5d:d5:46:7b:4a:bf:90:b4:ee:85:66:e5:14:8d:0e:
0e:8d:21:a5:b9:ff:91:1d:11:7c:ea:4c:36:f7:17:7a:8b:c2:
4e:25:9a:a9:41:fd:56:55:76:3e:2c:2c:ff:d9:b7:85:93:01:
84:fb:e2:79:33:92:b4:f4:f9:b0:56:a0:c9:e4:5d:68:cc:43:
c6:8f:f3:e4:49:0c:5c:9f:10:29:55:92:5b:b3:a8:d4:8b:a1:
48:1a:e2:6b:fd:f0:cf:35:d1:ad:44:92:6d:13:75:ab:db:2e:
95:94:9a:c8:30:5f:c6:aa:fe:4f:b4:ae:cf:51:65:43:96:ed:
2f:7b:57:2f:58:f1:e8:3c:7e:9a:97:c6:9c:6a:0d:00:96:5e:
59:fc:87:78:24:84:0f:98:18:fc:aa:08:f6:26:e9:48:2a:c8:
15:71:8b:82:d9:8a:b8:19:4e:89:ec:a0:07:bd:82:bc:95:95:
ce:dc:f1:a5:61:43:db:90:ba:a2:b6:ad:ca:d5:56:5e:96:7b:
2b:d2:36:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:05 2024 by rpki-client on console-fra.rpki-client.org