Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/K-2SCVMkAu2o3ilPy1I5VEWKUO0.roa
File: K-2SCVMkAu2o3ilPy1I5VEWKUO0.roa (raw, json)
Hash identifier: 1qGMbYbEYhshAOTGdbEc+t7hvbWRHXtJ7SANvWJJJiQ=
Subject key identifier: 2B:ED:92:09:53:24:02:ED:A8:DE:29:4F:CB:52:39:54:45:8A:50:ED
Certificate issuer: /CN=87be093097097c4457ff5aa3e5893c8c15432612
Certificate serial: 01856E2FB1C2FCE5F0C7DE9FE901648DA536
Authority key identifier: 87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/K-2SCVMkAu2o3ilPy1I5VEWKUO0.roa
Signing time: Sun 01 Jan 2023 16:34:57 +0000
ROA not before: Sun 01 Jan 2023 16:34:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213122
IP address blocks: 89.35.48.0/24 maxlen: 24
89.37.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:b1:c2:fc:e5:f0:c7:de:9f:e9:01:64:8d:a5:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87be093097097c4457ff5aa3e5893c8c15432612
Validity
Not Before: Jan 1 16:34:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2bed9209532402eda8de294fcb523954458a50ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:26:0e:63:0d:f3:ed:ed:c6:8b:3a:00:93:3c:
53:52:5b:9b:70:6d:00:a5:f6:33:ba:c1:6a:1b:03:
42:83:30:d3:25:59:b2:63:14:f6:18:ab:70:68:e1:
ec:d8:c5:6a:fe:19:a4:78:44:69:d6:12:8b:c7:7c:
11:c0:00:4b:c1:05:ca:ac:8a:fe:42:b6:74:99:af:
ab:78:f8:40:09:47:bb:76:9a:a7:20:c9:7b:b6:3a:
1f:c8:ed:81:24:44:9a:91:ee:c2:64:42:10:c1:21:
da:f1:b0:9d:20:b7:65:73:78:de:39:16:32:17:ac:
af:30:ae:37:8a:8a:d7:a8:38:6c:e6:04:66:15:a1:
f7:96:1d:9f:d4:f0:ea:59:04:3c:ff:00:65:dc:f8:
6e:97:68:a2:7e:da:6a:87:58:89:17:a8:89:6f:bc:
c2:8d:6e:5c:59:0f:53:c7:b5:fd:d1:b0:75:64:80:
79:f0:cf:89:22:af:28:07:06:51:69:ec:ac:66:b9:
e3:57:87:98:35:42:66:54:85:86:ba:36:5e:8c:9a:
cc:ee:7b:55:f6:93:b0:75:18:5b:98:8f:e6:7e:87:
50:51:3e:bc:4b:ec:d0:d9:8a:d7:f8:c7:90:b3:cd:
41:e0:8d:da:c3:fa:49:7b:4e:89:a4:f1:86:66:3d:
aa:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:ED:92:09:53:24:02:ED:A8:DE:29:4F:CB:52:39:54:45:8A:50:ED
X509v3 Authority Key Identifier:
keyid:87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/K-2SCVMkAu2o3ilPy1I5VEWKUO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.48.0/24
89.37.99.0/24
Signature Algorithm: sha256WithRSAEncryption
99:d8:1b:0c:a6:7f:d3:f9:6e:a7:8d:90:11:f4:fb:6f:35:ff:
34:4a:50:c6:f8:21:1e:0d:cb:52:cf:3d:14:db:da:74:a2:8d:
f3:41:82:a4:53:39:a9:d6:24:f1:96:cb:c0:a9:4f:05:b6:e4:
07:cf:1d:01:16:54:65:db:d6:e1:f5:7b:31:26:26:d9:95:81:
2d:8a:29:5a:9c:bf:1c:bf:11:bd:be:b2:67:1a:b0:74:6c:2f:
79:73:26:11:b5:ae:24:0c:2e:2c:5d:06:8b:2c:94:ec:c1:97:
eb:2b:23:31:ef:73:64:e4:7b:4a:56:f5:cd:7e:27:9a:d7:49:
fd:da:2d:03:0e:e0:29:be:8a:64:8c:10:ce:4c:ce:96:5a:35:
17:4d:c6:b2:af:09:a3:8e:24:0a:28:5c:fd:fb:3d:ff:e9:a1:
0d:26:e8:38:8f:96:62:e9:b5:4f:77:7e:2e:09:86:77:15:1c:
a8:58:bc:95:78:95:45:76:88:cd:70:b0:97:68:ca:75:39:3f:
71:6a:b9:bb:8b:3b:18:56:14:59:97:99:a1:a5:56:66:f0:c6:
61:e2:42:e6:2d:90:46:a7:09:a6:92:4b:f4:22:4f:9b:f3:08:
7a:1b:1e:f0:2e:27:32:98:46:70:82:cb:ee:02:8d:bf:cc:aa:
5f:4d:13:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:20 2024 by rpki-client on console-fra.rpki-client.org