Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/duvS2qUmJqlJ0Dt5Dwgi-LnRqjM.roa
File: duvS2qUmJqlJ0Dt5Dwgi-LnRqjM.roa (raw, json)
Hash identifier: ZzXDOsjzLoALPGZgcpLCS9ozud5CGSJBpRd/R4uvAvM=
Subject key identifier: 76:EB:D2:DA:A5:26:26:A9:49:D0:3B:79:0F:08:22:F8:B9:D1:AA:33
Certificate issuer: /CN=845c58752f3336422ff0ee1726474591e7a41e5f
Certificate serial: 01857228079DA0C5CE21205558E496A4B569
Authority key identifier: 84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/duvS2qUmJqlJ0Dt5Dwgi-LnRqjM.roa
Signing time: Mon 02 Jan 2023 11:05:03 +0000
ROA not before: Mon 02 Jan 2023 11:05:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5539
IP address blocks: 89.35.174.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:28:07:9d:a0:c5:ce:21:20:55:58:e4:96:a4:b5:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845c58752f3336422ff0ee1726474591e7a41e5f
Validity
Not Before: Jan 2 11:05:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76ebd2daa52626a949d03b790f0822f8b9d1aa33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:0f:d5:e9:ae:9b:f7:30:21:71:eb:01:8d:16:
f4:50:e2:b4:42:13:02:b3:cd:9d:e8:c7:41:d1:d0:
50:e7:cc:b4:01:8b:54:29:08:2f:d1:79:15:49:c0:
05:d8:b0:6e:35:9e:3a:57:7b:fa:08:ea:2b:8e:da:
43:c8:13:e6:c3:e9:53:e9:ac:14:d4:c9:90:43:dd:
9c:c8:e5:a0:fb:d0:96:b3:49:48:c8:5b:ff:3d:1f:
cc:65:4a:e9:ea:7f:d6:a2:65:4e:f5:69:75:0f:67:
64:2a:06:53:51:e8:1d:72:08:96:59:da:bd:4c:f1:
ff:30:47:99:80:e1:05:db:c2:6c:4b:af:a1:37:67:
46:41:fb:0e:39:83:61:14:37:33:9f:43:f8:d7:c5:
5a:8c:e8:8c:45:66:5d:fb:4f:77:53:c3:45:7d:ac:
e7:9c:28:f4:96:e1:b0:50:34:c2:fa:de:12:91:63:
f4:3d:76:ad:0a:4c:43:9b:12:d8:7f:3f:00:9c:8e:
4c:1d:e3:43:52:b1:d6:4c:8a:c9:0d:8c:10:84:f2:
a2:34:13:5b:7d:5e:54:f5:a3:b4:b3:c2:6a:a0:e3:
be:ac:3b:1d:59:30:f2:be:47:54:40:0a:35:73:a5:
d9:e0:46:a0:97:4d:19:1a:5a:3d:07:4b:8d:eb:75:
52:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:EB:D2:DA:A5:26:26:A9:49:D0:3B:79:0F:08:22:F8:B9:D1:AA:33
X509v3 Authority Key Identifier:
keyid:84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/duvS2qUmJqlJ0Dt5Dwgi-LnRqjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.174.0/23
Signature Algorithm: sha256WithRSAEncryption
59:fe:0a:7c:07:8c:26:7f:9f:c7:a4:46:ce:32:4d:36:56:9f:
35:7b:8d:e0:33:4c:63:a6:b1:18:00:08:00:7e:7b:a5:5e:eb:
18:22:69:5c:d4:41:8b:ca:cd:f4:13:61:68:93:f9:31:4c:5e:
da:d1:e5:3a:1b:66:53:fc:a9:96:50:1d:f8:bd:34:20:75:26:
ea:b9:75:29:c2:de:c1:36:7e:4d:e4:25:e2:3a:7f:43:1f:09:
b3:43:84:88:78:87:f8:c7:96:ce:27:64:f8:54:13:a2:ef:43:
14:04:4a:cd:8a:f5:12:4f:e6:1a:dc:b8:ce:38:2f:24:b5:4d:
52:4c:1b:72:bb:81:94:e1:f5:19:d4:35:3b:31:86:1b:ce:d1:
d6:cc:4b:07:a2:3b:81:c6:1c:ec:b6:8f:a8:64:ab:32:3e:1a:
c3:3d:e9:81:a8:64:7d:b9:4c:e8:f9:11:d9:09:8a:8e:94:74:
2c:99:a4:b7:66:ea:ad:44:79:6c:3a:58:7a:af:cb:e2:cf:3d:
8d:e2:ce:90:34:e2:78:85:ac:7d:7e:65:fe:ee:e9:6f:1f:53:
ca:8e:86:a6:7d:fa:ee:c2:73:c1:93:9e:3d:d4:22:13:c4:6c:
48:bd:4e:43:ac:39:21:76:90:9b:02:2a:88:a2:e9:a3:58:ec:
06:a5:38:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:26 2024 by rpki-client on console-ams.rpki-client.org