Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/49cnJbUseh2_g_4fdVJaJluzg6Y.roa
File: 49cnJbUseh2_g_4fdVJaJluzg6Y.roa (raw, json)
Hash identifier: gFdJzMlGlSOWMgcPFu3lYpFUbrrjOah0DUqSGrza1lk=
Subject key identifier: E3:D7:27:25:B5:2C:7A:1D:BF:83:FE:1F:75:52:5A:26:5B:B3:83:A6
Certificate issuer: /CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Certificate serial: 01856FDDC12EFAEBF4E47816C1F7212A194C
Authority key identifier: EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/49cnJbUseh2_g_4fdVJaJluzg6Y.roa
Signing time: Mon 02 Jan 2023 00:24:41 +0000
ROA not before: Mon 02 Jan 2023 00:24:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 89.251.12.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:dd:c1:2e:fa:eb:f4:e4:78:16:c1:f7:21:2a:19:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Validity
Not Before: Jan 2 00:24:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3d72725b52c7a1dbf83fe1f75525a265bb383a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d1:5d:56:4b:98:10:db:e6:de:82:f8:4c:ee:
61:8d:a2:b2:c3:58:cd:78:88:56:06:74:dd:b2:98:
23:15:96:a7:72:d0:09:8c:74:e2:5e:d6:35:63:2c:
21:ef:d0:21:d7:32:b1:79:84:ed:b5:dc:99:75:c8:
79:5f:ed:eb:3d:cf:4f:76:74:f4:91:86:fc:ff:40:
4e:c0:ea:2c:4c:9b:92:14:ce:fe:d3:46:b0:3b:c3:
8c:f7:a5:5a:6f:cf:61:5f:4e:5d:cc:1e:4f:98:07:
3d:7e:70:5b:11:d9:10:95:26:8f:f8:04:c0:e0:eb:
80:b1:6d:2b:3e:8d:ad:94:25:87:65:4a:35:78:70:
c4:a1:6b:58:0f:2a:f6:d0:f4:84:40:60:9d:83:e0:
b2:39:89:cb:02:13:fe:a7:f3:32:8d:16:41:bc:37:
5f:10:1d:3c:3b:e4:4b:11:35:86:82:55:63:7b:32:
44:f7:b0:da:bf:ba:67:ca:b2:71:09:1b:9c:fe:b5:
b8:75:f5:29:85:2d:6d:f5:7c:7e:9d:2b:80:4b:a3:
00:04:fc:d4:39:da:4c:c7:fe:a6:a8:34:db:12:9b:
7b:b2:c4:aa:92:7d:24:e5:a2:80:41:0e:be:7f:f8:
b2:8d:10:48:26:04:c9:67:88:ee:22:82:7a:b1:83:
08:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D7:27:25:B5:2C:7A:1D:BF:83:FE:1F:75:52:5A:26:5B:B3:83:A6
X509v3 Authority Key Identifier:
keyid:EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/49cnJbUseh2_g_4fdVJaJluzg6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.12.0/22
Signature Algorithm: sha256WithRSAEncryption
47:34:cb:c0:7c:91:81:be:a9:d4:88:19:56:9c:8b:29:9b:88:
07:c5:ca:4c:01:a9:33:41:23:bb:be:54:06:82:fd:b9:e5:3b:
10:51:dc:f3:2c:9a:38:a2:ab:ce:0e:71:fe:3e:48:ad:1d:c7:
84:ba:c1:9c:5b:46:7a:dd:24:e4:a6:a0:e5:14:ae:49:74:40:
a5:6d:0e:8f:90:a8:5c:ae:8d:36:1d:a6:bb:de:54:87:17:95:
ef:1a:6e:43:20:c0:b1:f1:42:b2:fa:f3:0a:7c:af:4d:2c:de:
63:07:a1:6f:e0:94:a7:18:28:75:3f:a9:e8:10:85:b9:35:a6:
5d:d5:cf:25:b2:f0:f7:25:ca:26:08:d7:af:9e:0c:f7:ba:97:
31:9e:0d:aa:0f:07:3f:50:f1:77:bf:19:0c:c4:db:6f:74:16:
1b:bc:72:f2:9a:e6:04:5c:5a:4d:f8:b9:50:8e:3e:06:16:ea:
4a:1f:6c:db:7f:7e:cd:67:64:04:4b:64:c8:a7:c5:32:0a:0c:
5c:42:99:da:27:ba:4c:a1:c3:d7:e4:07:a9:cc:08:21:d2:55:
e7:0c:a1:22:e3:ff:10:ce:b6:74:4f:10:60:03:82:47:d7:e2:
99:24:ca:e1:b6:90:d5:80:84:f7:c6:eb:f1:b4:ea:75:81:c7:
98:8e:f2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:43 2024 by rpki-client on console-ams.rpki-client.org