Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/Bayn6kaxR6UOBakheT7ybaxeHQ8.roa
File: Bayn6kaxR6UOBakheT7ybaxeHQ8.roa (raw, json)
Hash identifier: H1vEW+HQnjsgvVLyu42sgqVLG+5sHqTE06yL4DO0H9s=
Subject key identifier: 05:AC:A7:EA:46:B1:47:A5:0E:05:A9:21:79:3E:F2:6D:AC:5E:1D:0F
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 018A2EC50963C71740D5FA986095441AE47A
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/Bayn6kaxR6UOBakheT7ybaxeHQ8.roa
Signing time: Fri 25 Aug 2023 22:16:19 +0000
ROA not before: Fri 25 Aug 2023 22:16:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 178.254.150.0/24 maxlen: 24
89.23.91.0/24 maxlen: 24
89.23.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Aug 2023 06:08:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2e:c5:09:63:c7:17:40:d5:fa:98:60:95:44:1a:e4:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Aug 25 22:16:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=05aca7ea46b147a50e05a921793ef26dac5e1d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a3:8a:f0:fc:66:08:fd:48:5f:52:9d:97:93:
03:41:ac:da:f3:3e:2f:41:8d:c1:ef:d4:9d:ac:89:
ba:79:89:47:50:b0:2b:62:ba:a8:d3:f3:7c:36:0e:
93:3b:d8:e1:30:ac:f9:06:1d:1d:ac:ab:63:46:23:
c0:7a:92:e5:db:1d:88:69:15:74:64:2d:ad:0c:b5:
e9:26:1f:2c:10:98:2d:aa:03:b9:96:63:9a:f4:63:
90:f3:9b:47:c5:24:bb:35:8b:58:dd:d7:ab:26:aa:
9c:d2:2a:e1:ad:2a:6e:f8:d0:a1:62:7f:fa:d9:90:
81:e0:93:76:b6:ee:f6:2b:0c:8e:83:5a:25:c5:ff:
a6:b8:82:09:e4:fb:8f:42:ca:8f:b4:18:74:82:ba:
04:8d:af:5f:f8:f7:53:62:ca:a4:21:f6:86:76:07:
76:4c:23:a9:9c:20:59:b6:d4:53:36:77:da:2c:42:
3c:8f:78:91:4a:98:ac:c5:f9:e3:b6:91:99:5c:f6:
7d:86:7e:4f:c4:3b:b9:7c:2c:64:77:ff:f9:79:16:
aa:81:35:23:19:7c:90:43:ee:e7:b8:04:a0:1c:d1:
d6:6b:e6:29:d6:6b:5a:23:b6:a0:e7:63:17:1c:bf:
06:33:ad:2b:e7:d1:ca:14:9d:d1:ac:e6:47:59:92:
c0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:AC:A7:EA:46:B1:47:A5:0E:05:A9:21:79:3E:F2:6D:AC:5E:1D:0F
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/Bayn6kaxR6UOBakheT7ybaxeHQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.90.0/23
178.254.150.0/24
Signature Algorithm: sha256WithRSAEncryption
01:b2:04:0e:28:db:ae:0d:08:35:ef:d2:19:74:84:ac:58:c0:
9a:0d:15:f2:da:2f:e1:43:86:53:63:dc:14:6f:9b:84:45:60:
d3:5a:2f:5e:48:83:8e:a3:04:18:93:a7:8f:18:00:a5:d9:d4:
ee:37:f0:d9:e3:a2:04:fd:5b:e5:cd:48:46:b2:7d:df:89:7a:
fa:12:c7:58:40:f9:9b:c2:10:56:41:22:ec:1a:73:5e:4a:1d:
4e:c9:b5:83:8a:a3:3f:0c:1c:71:d5:70:dc:0b:8a:d8:a6:e0:
be:3c:34:1c:bc:ef:59:53:31:d2:91:c5:cf:d5:1c:e1:b9:5f:
05:99:22:7b:c2:72:e2:82:48:30:68:20:b9:65:96:d2:8a:f2:
b3:e3:66:a9:56:f8:90:4c:35:be:83:a9:c5:2a:52:db:eb:29:
f8:ba:e3:11:c2:f6:c0:de:70:ff:4f:18:41:59:16:ae:64:da:
a0:29:86:d6:ec:e0:02:17:37:b4:e2:ca:0c:fb:42:84:e7:59:
95:1e:1d:4f:21:69:22:52:8b:84:fe:f1:55:fb:d2:46:d1:23:
e2:a7:90:1e:1e:d8:df:58:e7:be:6d:5a:b2:bb:d5:be:48:11:
20:92:92:41:54:18:d6:be:40:50:73:ad:dd:76:a1:46:8d:ff:
20:ec:99:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:41 2024 by rpki-client on console-ams.rpki-client.org