Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/Vo_zlFx31ELDhU1rWqH_bUOJUcs.roa
File: Vo_zlFx31ELDhU1rWqH_bUOJUcs.roa (raw, json)
Hash identifier: sDDxVwO8dxHssGN4BzryPGykgej1BUAWsgtBjEn1Clg=
Subject key identifier: 56:8F:F3:94:5C:77:D4:42:C3:85:4D:6B:5A:A1:FF:6D:43:89:51:CB
Certificate issuer: /CN=86a8ff4c9c56667d99025d7f01591cbf77ad2f09
Certificate serial: 019156BE07225CA9BE4E1D69E19E71C46280
Authority key identifier: 86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/Vo_zlFx31ELDhU1rWqH_bUOJUcs.roa
Signing time: Thu 15 Aug 2024 15:52:59 +0000
ROA not before: Thu 15 Aug 2024 15:52:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211043
IP address blocks: 89.46.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:56:be:07:22:5c:a9:be:4e:1d:69:e1:9e:71:c4:62:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86a8ff4c9c56667d99025d7f01591cbf77ad2f09
Validity
Not Before: Aug 15 15:52:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=568ff3945c77d442c3854d6b5aa1ff6d438951cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:15:c2:e5:a5:c7:61:9d:f4:f6:76:98:de:fb:
13:a5:2e:41:a9:64:99:e6:e8:c0:91:de:df:b6:36:
0f:d1:cd:6e:c5:24:ee:6c:60:89:df:cb:d0:39:3f:
cf:c4:6a:58:cb:d0:0f:04:39:66:26:79:a2:7c:94:
e5:75:90:94:17:2e:e8:54:64:f9:66:1b:95:e7:34:
48:a3:fb:77:ab:a5:c6:45:61:bd:43:9c:5c:7c:d2:
8b:25:21:2b:e8:5e:c7:24:fe:8e:09:d4:c4:e4:04:
e1:1e:fa:95:24:08:65:eb:de:d1:61:57:28:99:e3:
a3:26:1c:de:76:69:f1:e0:2f:cd:f8:e4:c6:16:a7:
8d:f0:9a:aa:f5:d3:14:98:cb:00:c9:66:4a:04:01:
02:23:28:74:d9:0f:d5:35:94:3a:27:8b:a9:e3:e8:
09:6e:86:09:d6:51:4f:ea:b8:d9:66:b1:3c:a8:8e:
68:ed:1e:d4:ee:c3:37:0e:7b:bb:50:be:0a:02:a6:
a2:d5:a6:a3:5a:fc:22:be:d6:7c:fb:9c:7b:d8:f6:
f3:0f:1b:29:01:4c:93:8e:2c:3e:76:c8:b7:f1:9c:
ad:57:24:9d:0b:87:72:fe:00:0f:fb:29:62:7e:cc:
4b:50:39:c3:40:d8:ad:ac:f2:c8:4a:a4:81:10:9b:
84:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8F:F3:94:5C:77:D4:42:C3:85:4D:6B:5A:A1:FF:6D:43:89:51:CB
X509v3 Authority Key Identifier:
keyid:86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/Vo_zlFx31ELDhU1rWqH_bUOJUcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.123.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:3f:7a:d6:f8:52:bb:7e:6a:13:ec:2f:1f:40:15:37:6b:a6:
f7:b3:a4:18:3e:55:1e:73:1f:07:a7:f1:15:a0:71:27:d8:94:
88:b1:86:57:f2:19:af:9a:94:41:32:bf:bf:51:b4:21:21:e9:
85:25:60:e2:fd:ce:f2:eb:09:4c:f0:a7:30:b1:cc:68:c4:05:
83:cf:50:c9:a8:05:8a:f3:97:4e:1e:d9:84:7d:e8:4e:79:1b:
9c:4c:ef:b7:4d:f1:04:dc:16:79:d5:77:2d:cc:6b:36:5c:35:
10:41:b4:31:be:0c:2c:9d:29:5d:34:52:e1:28:9c:a6:a9:1a:
dd:39:89:34:c7:c0:ed:a7:84:db:b6:d7:08:88:3d:d2:e8:88:
b0:a2:7a:fe:33:a5:5b:be:8f:ef:fe:67:78:58:86:17:66:31:
e8:15:1f:97:8f:38:6b:bf:f4:16:96:46:dd:ee:e6:ab:0c:53:
4b:2e:be:d1:a2:93:94:d7:2c:dc:9e:d5:bc:6a:ff:e3:c7:36:
3d:42:06:be:eb:8b:98:09:f1:35:7d:26:b4:22:72:b1:29:88:
f3:cd:68:57:7e:a0:35:ce:d3:3e:c0:76:36:9b:cb:96:fd:3a:
86:df:3d:ba:be:d2:c6:db:42:4f:82:06:71:1f:0d:a1:5e:69:
d3:5d:25:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:01:34 2025 by rpki-client