Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/890rx_SQDic14OYyQQ2poWxm94U.roa
File: 890rx_SQDic14OYyQQ2poWxm94U.roa (raw, json)
Hash identifier: 1a5qvTwQuzl2IYpI493jCYkCn6i8okkWWDzlESKF854=
Subject key identifier: F3:DD:2B:C7:F4:90:0E:27:35:E0:E6:32:41:0D:A9:A1:6C:66:F7:85
Certificate issuer: /CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
Certificate serial: 01856E2F9F7CC06654D3DD65B0DD0C4F9D65
Authority key identifier: DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/890rx_SQDic14OYyQQ2poWxm94U.roa
Signing time: Sun 01 Jan 2023 16:34:52 +0000
ROA not before: Sun 01 Jan 2023 16:34:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21159
IP address blocks: 80.89.236.0/23 maxlen: 23
89.105.216.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:9f:7c:c0:66:54:d3:dd:65:b0:dd:0c:4f:9d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
Validity
Not Before: Jan 1 16:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3dd2bc7f4900e2735e0e632410da9a16c66f785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:03:52:fd:94:30:d2:c1:63:0d:40:14:bd:0b:
3e:f3:88:a6:11:96:01:ff:30:97:22:d7:a6:8a:07:
15:8a:51:29:2a:c3:90:3b:ea:6f:e5:8c:39:cf:78:
fd:f9:d3:d1:8d:b4:8b:4d:1e:e2:ff:fb:4c:36:b9:
f3:34:79:77:7b:37:ab:1f:2e:45:0a:89:29:96:37:
cb:8d:15:d6:d8:57:b1:72:b2:97:46:a2:a5:28:22:
54:3c:a3:c1:85:83:08:4a:f6:ed:50:78:8f:ba:25:
c3:21:ff:c6:c8:1d:f6:fc:c9:37:e5:c1:49:76:f8:
80:5f:b9:fa:a2:c2:1e:6a:00:aa:48:91:a8:22:36:
38:ba:11:b9:35:ef:81:50:df:99:1b:55:a4:ea:93:
5c:f8:36:9c:54:09:94:4a:27:95:23:bf:01:8b:8a:
f4:92:62:90:f0:b1:4e:e3:d3:81:cc:7c:35:bb:38:
e6:e6:7e:d6:c3:5c:f9:fa:8d:9e:b7:38:28:c2:73:
65:1a:a3:f2:4c:13:d9:45:73:c3:54:89:d7:8a:71:
f3:48:3e:5a:68:d9:b8:ef:bd:6e:29:f5:82:bf:49:
8d:ef:85:e9:ea:75:13:74:37:37:16:84:20:82:3b:
21:ce:75:89:1d:82:4b:cc:40:33:9d:82:39:62:63:
6d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:DD:2B:C7:F4:90:0E:27:35:E0:E6:32:41:0D:A9:A1:6C:66:F7:85
X509v3 Authority Key Identifier:
keyid:DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/890rx_SQDic14OYyQQ2poWxm94U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.89.236.0/23
89.105.216.0/23
Signature Algorithm: sha256WithRSAEncryption
83:75:32:1a:2d:1b:ef:7b:22:9d:7d:e2:9a:46:7d:2d:47:d7:
d5:5c:0f:92:bd:b2:45:05:73:c9:bd:f5:3c:7f:ad:bd:7b:30:
b9:55:f2:67:96:89:89:1b:ca:d6:19:95:6f:14:a3:0d:e8:e7:
57:20:31:a1:93:a1:3a:0b:2d:6b:04:f5:08:ae:89:4b:3b:06:
1a:94:13:97:da:d6:02:38:d9:a1:ed:06:2e:f4:b8:c0:45:cd:
e0:0c:db:57:94:66:e1:cb:ec:5d:be:f4:80:90:4c:bc:31:3b:
60:7d:e8:1f:64:66:74:44:04:5d:87:5c:15:fe:59:2f:da:ab:
ed:95:0c:8a:bc:22:9d:16:07:d1:23:8b:46:76:b7:93:db:0f:
20:5c:e5:a1:69:fd:93:6f:8d:04:9b:03:c9:90:76:ff:b3:59:
f0:67:9f:00:a8:83:ab:4a:9b:3a:51:76:82:ea:32:4d:03:73:
ee:fd:00:d5:60:5f:55:45:59:8f:8d:c1:c0:fd:ae:26:06:93:
54:86:74:98:02:cd:7b:88:3c:ba:1f:d8:0b:66:83:f3:e4:a1:
e9:3b:32:09:ab:f7:7a:ae:00:54:1b:fd:0a:a3:05:30:45:ef:
63:47:9c:18:4c:3f:cb:8f:05:c7:87:5c:80:cf:13:d8:8e:a9:
8e:3c:72:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:34 2024 by rpki-client on console-fra.rpki-client.org