Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/OXAXoyvcQPOKOzTlsGrDO8FK54o.roa
File: OXAXoyvcQPOKOzTlsGrDO8FK54o.roa (raw, json)
Hash identifier: j2n8ZvRKad+se3DW2DWdtLmcB8Hmv8MnLX/mG0G/3h0=
Subject key identifier: 39:70:17:A3:2B:DC:40:F3:8A:3B:34:E5:B0:6A:C3:3B:C1:4A:E7:8A
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018A197AFDEB423423E6D327C0668BCE71DE
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/OXAXoyvcQPOKOzTlsGrDO8FK54o.roa
Signing time: Mon 21 Aug 2023 19:03:25 +0000
ROA not before: Mon 21 Aug 2023 19:03:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206005
IP address blocks: 89.40.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Dec 2023 15:25:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:19:7a:fd:eb:42:34:23:e6:d3:27:c0:66:8b:ce:71:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Aug 21 19:03:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=397017a32bdc40f38a3b34e5b06ac33bc14ae78a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:34:df:3a:a4:15:8b:13:4d:fd:35:8c:b4:4b:
40:13:b2:4a:38:6e:37:64:21:2d:68:a7:97:0e:f0:
15:3e:9a:b6:62:da:c1:69:e8:76:2c:a6:e4:78:f7:
70:77:98:bf:89:48:ca:9b:3e:32:4e:04:ae:22:2a:
56:42:f9:70:a7:9d:b1:34:0c:5c:3e:d6:6d:4e:e6:
2a:6a:08:05:13:b3:41:b4:fc:97:9f:2f:d9:b7:a2:
80:35:bb:3f:26:b0:eb:5f:cf:9e:ce:94:6e:97:f4:
c2:ae:75:65:f3:97:66:0e:e0:ec:16:ae:b4:8f:06:
a5:16:ea:b5:25:c5:15:dd:51:50:55:59:37:43:06:
d9:c3:3f:3a:6c:c6:4f:c4:da:15:d5:8d:6f:b9:87:
7e:ed:cd:be:d5:94:61:83:c3:6a:49:8d:b7:63:e0:
89:11:55:ae:2d:6f:50:8e:93:a0:a6:3b:d0:cc:37:
a8:a3:16:e6:c7:63:e6:5b:de:01:5d:dd:9b:a0:97:
e5:42:68:ba:d0:1b:9f:5d:7e:e3:c3:f4:5c:69:3f:
0b:71:cc:a7:27:27:28:3d:e0:4c:e7:5b:37:63:f2:
d8:df:1d:ca:db:33:83:94:21:a9:37:3c:79:e2:93:
4f:9b:fb:a7:37:5d:e3:48:47:ec:3e:45:5a:9e:d4:
02:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:70:17:A3:2B:DC:40:F3:8A:3B:34:E5:B0:6A:C3:3B:C1:4A:E7:8A
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/OXAXoyvcQPOKOzTlsGrDO8FK54o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.35.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:61:53:fc:39:64:ff:d1:db:f2:3d:92:62:56:fb:28:83:7a:
8e:f3:a6:94:6c:9a:0c:f7:fc:47:5f:d3:cf:ff:5c:d5:fb:cb:
1f:f8:6f:d3:62:fe:ea:4c:35:6b:49:be:43:24:19:5d:59:87:
3b:09:36:3b:9e:55:d1:db:03:76:88:6f:c8:35:78:d1:32:64:
66:7e:a1:25:b3:86:b7:dd:70:a2:27:42:cb:10:17:e1:e2:25:
6d:12:c7:07:4b:6d:2b:8f:51:22:f3:27:56:ec:74:71:b6:25:
ae:ec:49:b1:3e:25:ad:8b:8a:e7:62:4e:c0:3e:8a:4a:63:e7:
fa:e0:88:f6:66:cb:68:57:1d:c1:28:82:19:54:27:38:ea:49:
e9:17:e1:5d:8e:6f:a7:f2:82:03:3c:81:e8:b9:9b:14:45:87:
59:7b:07:de:29:06:6c:9b:47:77:b5:80:6f:6f:a3:41:d7:43:
71:c2:8c:41:b5:5f:ff:e9:f6:30:70:49:90:24:ed:ee:63:64:
18:7d:95:ed:7d:60:8a:07:65:e7:01:f8:f0:f2:71:39:29:1d:
36:f1:5c:05:a7:ce:b7:23:47:a2:17:cc:b2:65:e5:46:20:6d:
3e:2e:81:ad:96:1d:29:93:e2:81:d8:31:55:f3:a9:ad:a1:b6:
2e:6c:13:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:41 2024 by rpki-client on console-fra.rpki-client.org