Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/q0_uxgFIovi-40ZxRe2QRaJfB1E.roa
File: q0_uxgFIovi-40ZxRe2QRaJfB1E.roa (raw, json)
Hash identifier: AchPkHpGVC4qtxUpDQZF11TsbWdJt+ZPa9WH3Ng3u4A=
Subject key identifier: AB:4F:EE:C6:01:48:A2:F8:BE:E3:46:71:45:ED:90:45:A2:5F:07:51
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 018C1F3C67356F641285EDB5E79A8DA3747E
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/q0_uxgFIovi-40ZxRe2QRaJfB1E.roa
Signing time: Thu 30 Nov 2023 07:58:21 +0000
ROA not before: Thu 30 Nov 2023 07:58:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.23.77.0/24 maxlen: 24
89.23.84.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 Nov 2023 10:24:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1f:3c:67:35:6f:64:12:85:ed:b5:e7:9a:8d:a3:74:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Nov 30 07:58:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab4feec60148a2f8bee3467145ed9045a25f0751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d7:ce:e4:2c:7b:6a:32:cd:0e:bd:da:07:d3:
b2:bb:55:92:ee:07:6b:e6:f5:55:31:ae:b0:85:70:
f7:43:ac:19:fd:32:50:63:c9:a2:f3:e4:55:b7:2e:
e0:06:e3:cb:0d:5d:01:d8:5b:a5:87:22:0a:6a:a3:
5b:07:4c:c2:77:7d:ca:03:1c:61:13:f4:27:e8:08:
df:68:9e:69:4f:ef:97:c4:17:78:6a:85:64:b2:e4:
53:1b:f3:ac:bd:84:b8:ae:e4:eb:16:87:21:a7:39:
9d:02:cf:0c:80:dc:e5:a9:5f:9d:90:82:c0:13:af:
bc:c5:48:8f:cb:fb:2f:03:48:f0:fc:b9:9b:54:0d:
a4:25:3d:12:7b:1e:2f:b8:7b:fb:ba:39:4a:49:e5:
c7:a4:32:c2:2c:d9:f0:7d:3a:47:49:36:82:ad:9d:
12:19:a8:58:ec:be:e4:57:23:45:a7:0d:34:71:ac:
66:37:39:e4:3f:20:ec:c2:7e:fd:e4:6d:05:22:81:
0d:f2:21:9c:01:f7:6e:7b:3f:bc:c2:25:47:f5:18:
cd:dc:53:a9:bc:f9:60:d8:f5:ba:9b:41:45:09:1f:
b7:ad:f6:2c:51:b8:55:7a:f0:c7:2d:92:27:90:c3:
5e:9c:c4:7c:d4:54:71:30:cd:8f:5b:72:a7:b5:31:
bf:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:4F:EE:C6:01:48:A2:F8:BE:E3:46:71:45:ED:90:45:A2:5F:07:51
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/q0_uxgFIovi-40ZxRe2QRaJfB1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.77.0/24
89.23.84.0/24
Signature Algorithm: sha256WithRSAEncryption
03:6d:d1:c5:fb:b9:44:4f:59:8a:8e:97:c7:a8:dc:87:2c:49:
61:bc:c0:02:e8:f0:15:5c:d3:af:5a:0f:19:cc:e0:27:3c:fb:
9b:1c:4b:6e:0c:38:fe:51:26:af:bb:4d:84:16:c8:d2:b9:f3:
b2:15:ac:56:fc:70:04:95:6f:71:51:51:cd:db:b7:8c:4e:97:
90:5c:e8:57:04:80:ac:43:96:a4:b8:d1:81:bb:2d:f7:23:c6:
49:76:b1:11:03:cc:9b:b1:3f:0c:d5:87:20:32:f3:98:42:ec:
06:34:07:13:bc:2d:04:07:93:59:48:a4:2e:ab:96:88:48:93:
63:73:c4:4b:59:82:c7:2b:b5:fd:50:8d:b2:7f:0f:14:c7:0e:
a4:96:13:22:42:bf:a9:f1:a5:fd:77:ec:2b:9d:95:6a:15:17:
9f:a6:ae:3c:34:a6:5f:cd:8e:5d:8b:ce:7a:21:ab:83:4f:5c:
6b:68:d2:94:24:14:03:ad:16:12:f7:47:b7:19:04:13:eb:6d:
5b:a1:53:55:44:a7:d0:1c:1b:b7:0f:85:75:fd:8d:02:cb:2f:
20:50:e1:e6:a1:eb:c2:ea:ea:45:d7:44:25:39:9a:c9:6b:43:
e5:3c:4c:5b:79:13:7b:e4:e0:93:fe:46:08:01:0d:54:aa:32:
22:c1:48:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:41 2024 by rpki-client on console-ams.rpki-client.org