Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/g6kfHtCOgPfeLdXqqaiZWZYSxds.roa
File: g6kfHtCOgPfeLdXqqaiZWZYSxds.roa (raw, json)
Hash identifier: Y6lm6wTEfnLHLK464m52c1LoFWpqbR3T6i4i6YbHW18=
Subject key identifier: 83:A9:1F:1E:D0:8E:80:F7:DE:2D:D5:EA:A9:A8:99:59:96:12:C5:DB
Certificate issuer: /CN=3e8c1897624f57be34e0f760b97f110ad5b5da3a
Certificate serial: 01856CAF0936F9A8DCAF0B3E544AF80CA6B0
Authority key identifier: 3E:8C:18:97:62:4F:57:BE:34:E0:F7:60:B9:7F:11:0A:D5:B5:DA:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PowYl2JPV7404PdguX8RCtW12jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/g6kfHtCOgPfeLdXqqaiZWZYSxds.roa
Signing time: Sun 01 Jan 2023 09:34:48 +0000
ROA not before: Sun 01 Jan 2023 09:34:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206031
IP address blocks: 89.207.124.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:09:36:f9:a8:dc:af:0b:3e:54:4a:f8:0c:a6:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e8c1897624f57be34e0f760b97f110ad5b5da3a
Validity
Not Before: Jan 1 09:34:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83a91f1ed08e80f7de2dd5eaa9a899599612c5db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:b6:d8:cc:f5:ff:07:ec:fd:77:ab:18:a0:f0:
ba:0d:69:00:90:4e:57:27:c4:8e:fe:1b:22:fc:04:
6c:ca:1d:30:e6:d4:0c:a7:a5:d0:1a:f7:b6:5f:b2:
3c:2e:c7:d6:c3:e4:bf:61:b0:32:a8:8e:c6:5d:5c:
ab:1c:77:9a:39:da:d0:6f:a3:49:f2:19:4e:79:f4:
e0:89:1e:04:c9:a5:38:ac:c0:c1:68:23:8a:d3:4d:
ae:4a:bf:f7:75:57:be:85:d0:4d:88:0d:b7:fb:00:
a0:09:75:f5:fa:84:6b:0d:86:50:1f:bc:78:20:5a:
5a:e9:5b:7e:9d:e7:48:4b:7f:28:12:04:e6:2e:09:
c9:0e:b2:d7:6b:f2:03:c3:6e:56:91:9c:ef:9f:8d:
11:31:1b:f5:cd:63:33:55:de:0b:30:9f:10:9d:ac:
aa:1e:ef:26:49:1c:89:bf:45:8b:35:87:8c:e7:9c:
9e:dc:6a:0e:d8:5f:46:7c:ea:04:ab:02:b4:63:2b:
15:ab:32:c3:be:cc:75:e0:6f:53:30:fc:15:7d:82:
81:2e:69:7c:f4:e5:90:a9:df:05:4b:4f:6e:70:26:
10:7e:a8:22:d2:16:ee:7c:17:6d:7a:4a:71:6e:e5:
60:ae:34:2c:ff:b3:94:a6:fd:0c:db:40:50:8a:d1:
f0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A9:1F:1E:D0:8E:80:F7:DE:2D:D5:EA:A9:A8:99:59:96:12:C5:DB
X509v3 Authority Key Identifier:
keyid:3E:8C:18:97:62:4F:57:BE:34:E0:F7:60:B9:7F:11:0A:D5:B5:DA:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PowYl2JPV7404PdguX8RCtW12jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/g6kfHtCOgPfeLdXqqaiZWZYSxds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.207.124.0/24
Signature Algorithm: sha256WithRSAEncryption
62:2b:a0:de:6f:b0:f3:da:ff:29:e8:83:ad:be:5b:23:69:c0:
dd:e7:1a:b6:e8:71:8d:d4:94:30:c5:39:b9:9f:86:74:09:4b:
3c:50:b4:29:1b:cb:be:35:85:47:6f:80:08:b7:5b:ba:22:44:
2c:33:f2:84:b6:72:05:62:6b:86:e8:d8:1d:e3:08:47:b4:5c:
29:a1:09:02:a1:6e:6f:20:e6:33:39:32:7d:06:2d:5c:90:a3:
15:8b:7f:58:0d:41:1a:35:13:ea:1e:cf:d1:fc:13:81:88:35:
31:4d:c7:d7:3a:8a:ef:ee:e5:57:69:e6:0a:02:53:92:ac:4e:
c3:2e:cb:f2:aa:1f:57:60:ac:47:3d:38:e1:01:ce:2a:f4:c0:
e8:56:df:ea:b0:e4:23:6b:14:4a:79:61:cf:e5:05:1f:8c:e1:
c7:1b:c7:19:b0:64:28:13:64:05:ef:16:8d:09:3c:19:83:1e:
da:8f:8e:09:6c:6f:34:8f:58:1a:af:79:bd:5a:fe:72:b1:90:
4b:85:5c:1c:fc:9f:8c:a5:be:0f:cb:7f:d5:92:8d:c9:43:ec:
6c:ce:9f:25:d8:42:92:d9:f3:3d:0d:71:4d:d5:8d:a6:cf:f5:
49:c8:c2:0f:51:ed:e8:45:95:32:74:ba:3c:30:a5:b0:64:bb:
58:3c:74:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:37 2024 by rpki-client on console-fra.rpki-client.org