Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/OIv_JHK9qxVIefCvcLsf44R0rzo.roa
File: OIv_JHK9qxVIefCvcLsf44R0rzo.roa (raw, json)
Hash identifier: FSkW2+lINME3Y0wYYydQIQDSNfQyb/FJwgiohD6ANjg=
Subject key identifier: 38:8B:FF:24:72:BD:AB:15:48:79:F0:AF:70:BB:1F:E3:84:74:AF:3A
Certificate issuer: /CN=62c66267943d413cdf760dc6850104c1c0fc1d65
Certificate serial: 018D5F9E326E7719CDCCE7620E3E53F89977
Authority key identifier: 62:C6:62:67:94:3D:41:3C:DF:76:0D:C6:85:01:04:C1:C0:FC:1D:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/OIv_JHK9qxVIefCvcLsf44R0rzo.roa
Signing time: Wed 31 Jan 2024 13:03:39 +0000
ROA not before: Wed 31 Jan 2024 13:03:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202108
IP address blocks: 89.31.138.0/24 maxlen: 24
89.31.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Mar 2024 09:33:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5f:9e:32:6e:77:19:cd:cc:e7:62:0e:3e:53:f8:99:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c66267943d413cdf760dc6850104c1c0fc1d65
Validity
Not Before: Jan 31 13:03:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=388bff2472bdab154879f0af70bb1fe38474af3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:55:7c:14:73:c0:10:e5:a4:73:c6:55:22:9e:
b9:56:7d:03:93:6c:14:c7:3c:45:2c:4f:73:af:de:
ec:07:62:a1:76:4a:da:ca:99:e5:4b:d0:4c:55:93:
f9:85:37:15:81:2b:29:16:a9:7d:7c:a0:9d:41:83:
5b:4e:ed:ca:39:e1:dc:4d:00:83:68:b6:04:05:f1:
5d:b0:08:7e:de:ed:c0:9a:94:80:3f:42:86:53:8b:
1e:60:88:08:41:68:d1:41:55:f2:f6:24:45:b6:6f:
18:a4:5e:c8:0a:e8:6e:45:0b:01:95:b1:be:f8:03:
3d:52:d0:67:89:4b:13:1a:45:39:98:da:71:48:a7:
9e:a5:53:2c:40:fc:4c:e0:12:1a:50:ae:c5:75:47:
3e:ca:4e:81:25:05:a4:ab:0e:8a:2d:66:49:8f:89:
69:2e:ba:df:1b:0a:eb:0b:30:3d:cd:1d:c2:ef:dc:
5f:6f:b3:53:3a:0f:14:77:1e:e9:97:9f:3a:fa:a8:
e3:22:6c:00:10:ca:90:2a:cb:1e:a6:3f:fe:b1:ec:
be:39:cb:ea:89:b2:a4:76:11:5b:d2:03:00:9f:41:
13:57:0d:c8:28:18:c6:2f:8d:53:a4:4d:6b:d7:f5:
50:a4:c2:e5:0e:88:bc:e8:cf:32:a3:9a:50:ee:f9:
b1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:8B:FF:24:72:BD:AB:15:48:79:F0:AF:70:BB:1F:E3:84:74:AF:3A
X509v3 Authority Key Identifier:
keyid:62:C6:62:67:94:3D:41:3C:DF:76:0D:C6:85:01:04:C1:C0:FC:1D:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/OIv_JHK9qxVIefCvcLsf44R0rzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.31.138.0/24
89.31.142.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:2e:8a:a2:66:14:c2:40:c8:c3:00:02:4f:6f:48:0c:ef:3f:
0d:b6:b3:69:07:73:c1:65:a4:a7:b5:41:1e:f7:4c:4e:af:6b:
42:1e:a2:b9:9a:06:4d:66:5f:0a:22:be:c2:0c:fd:ff:76:8b:
18:14:b9:db:5a:08:81:b0:3d:2c:90:7c:60:77:bb:7a:91:da:
07:d7:47:29:d2:3f:64:ae:8d:1d:4c:b9:c0:f2:55:b7:f3:18:
b9:a8:f3:3a:1a:0a:75:0f:bc:08:ee:68:35:5c:91:3a:30:79:
ec:fd:e0:9e:a3:74:f2:44:f8:80:92:92:91:d5:83:dc:3e:aa:
f7:5e:54:f0:07:ae:9e:ea:7c:ad:f7:4d:25:cd:88:98:5c:ed:
35:80:7f:38:00:3e:41:14:24:bc:1a:19:f5:dd:0a:26:6d:07:
3f:e6:56:16:14:ff:aa:d8:0f:ae:fe:80:74:b8:b5:55:c6:9e:
86:be:6a:f1:7e:3f:e4:4d:d0:be:51:aa:7d:67:4b:06:c1:f2:
0a:4f:44:98:52:8b:7f:f8:a8:15:36:25:e2:94:82:b9:79:19:
e8:19:b4:73:0b:0f:0f:c4:82:3e:cc:63:e3:2f:78:67:46:07:
32:3f:c9:f3:a7:56:bd:ae:e0:4a:f2:14:5f:c0:65:a9:8e:8e:
58:9f:58:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:05 2024 by rpki-client on console-fra.rpki-client.org