Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/T38F5Ajgs_4C4B1QB5ukiZyrfiU.roa
File: T38F5Ajgs_4C4B1QB5ukiZyrfiU.roa (raw, json)
Hash identifier: jP5JzJIcNKN4opDOlWkF2tDlBOmZjWid8j+jAuCR5GU=
Subject key identifier: 4F:7F:05:E4:08:E0:B3:FE:02:E0:1D:50:07:9B:A4:89:9C:AB:7E:25
Certificate issuer: /CN=5e400ac2396ae228d2b2e56f4b06739969379e44
Certificate serial: 018572FA63640D646929FD7ED60B8C7E7A0D
Authority key identifier: 5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/T38F5Ajgs_4C4B1QB5ukiZyrfiU.roa
Signing time: Mon 02 Jan 2023 14:54:50 +0000
ROA not before: Mon 02 Jan 2023 14:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60331
IP address blocks: 89.30.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:fa:63:64:0d:64:69:29:fd:7e:d6:0b:8c:7e:7a:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e400ac2396ae228d2b2e56f4b06739969379e44
Validity
Not Before: Jan 2 14:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f7f05e408e0b3fe02e01d50079ba4899cab7e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:00:33:d0:c7:60:5c:24:36:59:76:bc:10:f4:
e4:63:1a:c9:c2:38:c5:3b:e8:93:72:fd:8a:b9:66:
a3:db:60:4e:df:bf:5d:5e:0a:d8:92:df:ea:cf:2d:
75:2c:29:cf:60:fd:4f:1a:63:91:10:e7:b7:91:3d:
52:73:8a:cc:4e:fe:22:1f:f3:c5:56:3e:4c:a1:6d:
84:2e:9c:47:ad:f8:99:6a:1a:ca:d7:32:80:64:0a:
f5:a4:be:9a:ec:0d:24:61:a2:9d:56:89:64:4c:1a:
8a:ac:f8:6e:95:cd:85:7c:f8:31:7c:e9:3a:52:3b:
21:a9:3a:b0:08:f8:7d:1d:2a:98:6b:73:cd:eb:cb:
92:ef:78:90:3a:9d:84:b5:58:aa:95:58:ba:b1:b4:
c1:04:52:a9:2d:ef:82:c6:79:fe:e6:4b:9d:1b:60:
b0:9b:73:36:83:a9:c5:5b:77:21:b0:86:f0:3d:34:
02:99:eb:8b:65:e3:4c:03:80:17:00:31:3a:73:c0:
d3:27:dc:12:82:6c:7a:0a:4f:02:3f:5e:40:47:6d:
d9:39:88:8a:d9:43:ac:b5:95:ea:f5:a1:82:b7:df:
3a:fe:b4:55:3c:e1:84:7b:d2:65:ad:55:0e:48:19:
43:82:91:1d:c0:62:11:fd:fc:a7:35:4b:f3:79:9a:
39:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:7F:05:E4:08:E0:B3:FE:02:E0:1D:50:07:9B:A4:89:9C:AB:7E:25
X509v3 Authority Key Identifier:
keyid:5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/T38F5Ajgs_4C4B1QB5ukiZyrfiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.30.106.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:4c:53:70:f5:44:34:da:65:91:5c:fa:17:40:a8:a0:a3:30:
73:e9:42:40:d2:e1:38:20:cb:79:a9:4e:d6:85:03:b2:94:93:
99:a5:db:59:47:5d:73:64:7b:c8:c9:d1:8c:06:af:52:8b:20:
04:68:28:e2:3f:1f:6c:cd:7c:d0:63:b0:90:8f:23:89:28:5c:
82:35:54:ea:85:ff:b4:fd:77:7c:d6:4b:c4:59:02:38:d8:b9:
64:96:30:77:b7:7b:79:36:f2:20:9a:8e:53:8c:d7:25:3b:37:
29:06:17:5f:2f:81:c0:4e:09:ca:fb:83:40:44:74:fe:c8:8e:
17:ea:0d:3f:1b:34:fa:f4:5e:3a:17:b6:98:6e:d5:55:67:e1:
6d:94:7a:8f:5a:8e:5a:62:3e:75:27:1e:88:7a:af:42:9c:b5:
a8:89:3a:db:d8:53:e8:21:4f:de:57:4b:c3:58:eb:f2:ab:f5:
40:f7:f0:bb:95:f0:d6:fb:29:82:a4:4a:da:0f:0d:2f:63:f8:
d9:0d:a1:fa:95:a9:a4:87:f1:1d:78:eb:eb:62:32:95:ac:51:
a1:9d:4b:ab:5b:d0:61:54:1d:66:56:d1:60:b4:a8:4e:eb:d8:
64:1b:fc:4a:66:a9:55:ef:5a:ff:53:d1:65:8a:35:f5:6f:2f:
04:f3:1f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:45 2024 by rpki-client on console-ams.rpki-client.org