Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/_89bfJXBW0NlbtAuBb85T-52-RU.roa
File: _89bfJXBW0NlbtAuBb85T-52-RU.roa (raw, json)
Hash identifier: 3RnTJUzlDDCCNGuSQ8NZHAMhbNalFh+b03awwN0kSNM=
Subject key identifier: FF:CF:5B:7C:95:C1:5B:43:65:6E:D0:2E:05:BF:39:4F:EE:76:F9:15
Certificate issuer: /CN=576ee02ac605f0bb98bbcd637a9adfae483a6e84
Certificate serial: 01856C9CC94A0C1141405876B7A7D77E23D9
Authority key identifier: 57:6E:E0:2A:C6:05:F0:BB:98:BB:CD:63:7A:9A:DF:AE:48:3A:6E:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V27gKsYF8LuYu81jeprfrkg6boQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/_89bfJXBW0NlbtAuBb85T-52-RU.roa
Signing time: Sun 01 Jan 2023 09:14:52 +0000
ROA not before: Sun 01 Jan 2023 09:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61418
IP address blocks: 46.18.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:9c:c9:4a:0c:11:41:40:58:76:b7:a7:d7:7e:23:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576ee02ac605f0bb98bbcd637a9adfae483a6e84
Validity
Not Before: Jan 1 09:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ffcf5b7c95c15b43656ed02e05bf394fee76f915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2b:a3:d7:56:c3:e4:2a:ba:03:7c:7a:f8:21:
9d:eb:0f:8b:4a:f3:0b:ba:4e:2d:af:3a:8d:31:29:
f7:61:f2:57:4e:7d:be:fe:bc:cd:5a:9e:b4:37:af:
4f:b5:2c:e6:3a:c5:c1:84:bb:d3:7d:94:e2:ce:f3:
bc:c0:98:47:92:8f:78:45:f9:4d:34:c0:66:0f:8d:
0b:42:80:49:c2:b8:78:1e:0a:62:8f:3d:fe:03:fb:
f6:9c:59:b5:bd:17:25:94:69:71:20:52:4b:08:9d:
4f:62:0e:56:2e:1c:92:ba:44:47:aa:05:d0:cb:1e:
b8:b9:61:91:38:71:c3:03:23:ee:b0:da:42:e3:fe:
73:3b:f0:7a:35:ae:48:34:3d:8a:34:12:f2:90:12:
53:a8:e0:2e:dc:13:f2:bc:23:32:36:2f:b1:24:08:
9a:ae:d4:3c:88:f1:fe:27:cd:44:7e:c2:1a:5b:bd:
af:8f:af:1b:65:01:39:51:e0:d5:8c:09:4c:2b:5e:
54:23:ba:a5:47:db:6a:dc:84:65:82:46:81:da:db:
b7:b9:e1:50:99:2b:ab:81:fd:18:ea:db:54:32:1a:
50:c0:4e:b6:15:fe:21:7f:67:27:a5:d2:49:0e:df:
83:53:54:ba:c2:3c:9a:d0:6a:2b:1f:36:96:04:65:
77:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:CF:5B:7C:95:C1:5B:43:65:6E:D0:2E:05:BF:39:4F:EE:76:F9:15
X509v3 Authority Key Identifier:
keyid:57:6E:E0:2A:C6:05:F0:BB:98:BB:CD:63:7A:9A:DF:AE:48:3A:6E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V27gKsYF8LuYu81jeprfrkg6boQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/_89bfJXBW0NlbtAuBb85T-52-RU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.18.105.0/24
Signature Algorithm: sha256WithRSAEncryption
48:42:16:dd:9b:83:4f:4d:05:8e:f7:57:17:73:0d:d0:37:19:
9d:6e:dd:41:62:5a:f3:34:08:40:d1:c2:e6:4e:78:39:ad:62:
5d:13:aa:74:83:73:5b:7a:ea:a4:b5:cc:9c:dd:c2:ad:44:d3:
b0:c2:de:7c:42:ba:4e:32:1b:81:62:4d:42:3a:48:b4:81:be:
54:75:26:17:85:13:0d:77:8d:a5:fc:7c:31:95:e5:4a:3d:f1:
28:de:a9:e9:94:cb:5c:84:06:ae:13:38:d8:50:81:66:84:ea:
80:9f:5e:92:0b:fb:e2:29:25:68:5b:c0:32:65:05:4d:58:6d:
37:b0:3a:68:3a:83:c0:01:49:0c:23:cd:be:b5:ff:b2:49:f0:
48:dd:87:38:4e:72:61:4e:15:70:57:79:8b:71:74:4d:a7:f7:
02:d7:e5:ea:00:55:46:e3:c8:32:50:f6:53:21:bd:09:df:28:
3e:4f:7e:66:45:66:cf:9e:df:9a:56:72:28:3a:9e:4d:12:bd:
77:82:57:b3:97:3e:71:0a:23:82:cf:93:a2:0d:70:30:47:95:
0b:b0:e0:64:45:34:b1:6d:56:90:9f:f8:7a:17:98:81:78:62:
c5:94:22:2b:e3:9d:ce:c9:d4:33:ae:ad:cc:ad:5d:ea:d4:42:
fd:a8:5d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:25 2024 by rpki-client on console-fra.rpki-client.org