Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/d5JB80jXBVv_I96SVb-DxzCVRn4.roa
File: d5JB80jXBVv_I96SVb-DxzCVRn4.roa (raw, json)
Hash identifier: qxhyQXpWoIdSEf2YUawn06O5sU1UBbEgULpRtD2ykJA=
Subject key identifier: 77:92:41:F3:48:D7:05:5B:FF:23:DE:92:55:BF:83:C7:30:95:46:7E
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 01906E1B425E0355953FD4A1FAF40454F775
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/d5JB80jXBVv_I96SVb-DxzCVRn4.roa
Signing time: Mon 01 Jul 2024 11:43:18 +0000
ROA not before: Mon 01 Jul 2024 11:43:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204958
IP address blocks: 152.89.171.0/24 maxlen: 24
185.57.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Jul 2024 12:09:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6e:1b:42:5e:03:55:95:3f:d4:a1:fa:f4:04:54:f7:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Jul 1 11:43:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=779241f348d7055bff23de9255bf83c73095467e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:93:e3:97:e9:ac:cb:7e:ef:52:10:5c:30:96:
49:4b:57:fd:93:ff:a1:ea:a8:34:ed:86:fe:a5:50:
b3:9d:14:93:5a:97:4a:32:30:47:2f:62:f7:2b:ae:
b7:2a:2d:dd:ce:67:85:1f:57:72:a5:81:2a:df:0e:
1f:3f:32:2c:19:2d:df:07:38:e4:2c:1e:a2:8b:1e:
ec:c4:37:09:fc:63:74:6e:02:2c:14:41:2c:79:ea:
5e:5c:6c:1b:9f:3c:b4:6b:f7:a0:12:24:d8:79:40:
0a:47:9c:b4:55:2c:cb:94:82:5f:e6:8b:e1:55:0f:
90:2d:6a:4a:54:6e:31:72:ae:eb:57:15:42:66:82:
1a:d9:c2:f1:02:2b:93:de:4a:0e:c2:88:9b:a8:72:
75:3a:60:4d:68:77:44:1b:1b:c7:2c:72:d6:55:bb:
2d:3b:0e:db:38:74:8c:8a:87:9c:38:b3:28:6c:4c:
17:c8:26:36:b9:26:af:b7:97:01:56:f4:ba:87:83:
64:d9:0b:fa:2a:1f:3a:2a:da:3b:2f:bd:b9:84:98:
d7:b5:94:70:bc:57:da:d0:62:1b:9b:3e:d0:d4:7c:
38:02:22:91:c1:23:05:a8:8b:50:9d:6b:96:8b:8c:
db:66:c9:0b:fe:c1:4b:dd:e4:a9:1c:89:d0:0a:21:
71:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:92:41:F3:48:D7:05:5B:FF:23:DE:92:55:BF:83:C7:30:95:46:7E
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/d5JB80jXBVv_I96SVb-DxzCVRn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.171.0/24
185.57.231.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:5a:1a:55:aa:65:89:15:ed:55:1b:2c:0f:6c:71:9e:bc:4f:
f5:98:a1:52:bd:d2:85:cb:56:01:87:19:78:ac:fe:54:9e:79:
63:d3:31:10:c8:d7:41:7b:db:a6:3c:2e:60:e0:4c:2c:30:e3:
2e:26:91:e8:b2:af:04:ad:07:59:9c:3b:4a:13:9a:f1:2d:cf:
f9:13:87:e0:61:10:f5:3f:36:d6:ad:a4:fd:a7:4e:1c:e2:71:
6f:4b:c6:60:4c:1a:c3:f6:84:c4:3c:db:07:a8:f5:7a:b0:03:
d9:53:f3:61:7d:6a:64:d5:2c:3d:fd:84:d6:cb:c4:3f:6c:7a:
7e:3e:e8:d3:d8:0d:10:02:e0:73:8e:ca:19:79:52:51:a7:20:
69:4b:f9:6f:c2:08:41:ec:14:79:fe:01:83:61:47:7a:a8:60:
da:1c:0e:43:26:0b:3a:a3:45:15:56:7d:e1:11:48:20:38:9f:
6f:16:cf:a4:49:1e:52:7f:ab:45:36:cd:9f:1e:dc:67:fc:2e:
cc:15:4b:05:eb:6d:5d:34:4b:59:d8:2d:2c:41:f4:8e:b6:e4:
1e:d8:a8:c6:7c:68:33:47:ea:81:22:29:4d:36:ee:51:2d:13:
91:0f:c3:8a:c8:0f:6c:eb:67:b7:89:06:1b:3f:06:16:1e:5a:
d3:f0:8c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 9 15:52:58 2024 by rpki-client on console-ams.rpki-client.org