Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/G9dGq-fuHUQN19Jh5SALuyX5qb4.roa
File: G9dGq-fuHUQN19Jh5SALuyX5qb4.roa (raw, json)
Hash identifier: 3RNEM+Jnd7KCObYTKKBf3+NPm27MMEnrE1gK+SKvV38=
Subject key identifier: 1B:D7:46:AB:E7:EE:1D:44:0D:D7:D2:61:E5:20:0B:BB:25:F9:A9:BE
Certificate issuer: /CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Certificate serial: 018570306FC830EA361B888E01E30389A9D0
Authority key identifier: 5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/G9dGq-fuHUQN19Jh5SALuyX5qb4.roa
Signing time: Mon 02 Jan 2023 01:55:00 +0000
ROA not before: Mon 02 Jan 2023 01:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208300
IP address blocks: 89.248.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:6f:c8:30:ea:36:1b:88:8e:01:e3:03:89:a9:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Validity
Not Before: Jan 2 01:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1bd746abe7ee1d440dd7d261e5200bbb25f9a9be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:54:14:63:fb:ee:d7:fb:d3:ea:61:f2:2c:25:
04:b0:b8:eb:7b:98:2f:bf:cf:e0:d0:15:22:b4:65:
51:d4:95:2f:e6:04:ab:27:d1:87:63:55:1b:63:65:
6d:8b:df:b2:66:a1:fb:2a:79:fa:1d:1d:c0:78:4f:
93:5f:07:5f:e0:d8:39:3c:55:36:3c:28:d5:ff:33:
25:2c:c6:f8:3c:e5:47:ca:ee:26:e7:3d:f3:a5:09:
97:dc:aa:bf:ff:94:0d:10:9c:89:3d:9d:7e:d0:bb:
de:62:87:00:3e:b0:ff:b2:47:f1:a0:b3:55:90:03:
8c:5f:d6:4e:47:60:1f:c8:e6:17:b7:84:f4:da:a6:
36:ed:08:92:80:e0:28:dd:77:18:38:d4:ec:37:99:
8a:91:83:78:f0:48:4e:6b:19:3b:ce:3f:6e:2d:30:
79:75:e0:a8:ac:05:ca:03:df:45:42:3a:ac:7a:1b:
fe:30:58:c5:ff:9e:5a:72:f6:8b:d9:05:b7:8f:6b:
3f:54:78:0d:01:8a:65:13:93:c1:69:e7:55:17:4c:
91:08:6d:a3:34:f8:70:61:39:1b:71:93:0d:4a:45:
38:80:8e:15:f0:ae:41:1a:8d:55:0d:e7:65:61:29:
1f:8d:73:54:7c:92:97:85:f8:3c:70:01:95:cc:d2:
50:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D7:46:AB:E7:EE:1D:44:0D:D7:D2:61:E5:20:0B:BB:25:F9:A9:BE
X509v3 Authority Key Identifier:
keyid:5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/G9dGq-fuHUQN19Jh5SALuyX5qb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.248.231.0/24
Signature Algorithm: sha256WithRSAEncryption
76:63:e2:58:9d:83:2c:b0:41:cb:11:5c:4e:04:b2:09:d2:6c:
ff:90:b3:54:30:ed:9a:7a:f7:f3:df:96:3f:8e:1e:4a:56:86:
12:52:81:81:36:99:b5:d1:d5:1b:00:f6:80:8b:55:0a:50:2b:
af:62:b3:81:13:ab:41:8f:20:e5:5b:07:ea:cc:49:92:0a:cd:
13:ea:52:87:03:40:34:fb:36:88:ba:21:5a:17:51:17:7c:13:
84:96:8f:5b:5e:de:5e:c6:fe:0f:30:51:2a:a2:dd:5c:05:b6:
a2:22:47:88:a2:72:be:4b:27:4f:64:07:81:13:2c:8c:29:46:
8c:bd:27:cf:1b:3a:9c:08:56:5b:18:7c:17:46:40:b7:a7:49:
b5:5f:9e:04:c3:f5:d3:a3:d3:aa:96:d0:f9:6a:ff:cc:07:bd:
7e:b3:0c:91:69:1f:e0:ef:39:00:c3:04:a6:44:9b:42:4d:2a:
40:85:16:bf:45:f8:b9:39:ff:c0:3b:60:df:75:26:35:61:32:
10:89:2e:3b:09:45:eb:02:28:04:03:11:51:53:02:17:f7:9a:
62:2c:f7:d4:20:35:f7:ef:dc:e3:73:91:8c:df:98:70:b4:ed:
1f:34:e4:d0:85:97:b7:c3:12:ec:6d:f2:7f:6c:35:2d:3d:03:
db:1a:87:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:22 2024 by rpki-client on console-fra.rpki-client.org