Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/4Gpysjxwl3yxATlHVHSLTS5qNEQ.roa
File: 4Gpysjxwl3yxATlHVHSLTS5qNEQ.roa (raw, json)
Hash identifier: 3eV4gfzdGOy4i3QZ+P1AlXnhDr10H04TUptRuQMmBug=
Subject key identifier: E0:6A:72:B2:3C:70:97:7C:B1:01:39:47:54:74:8B:4D:2E:6A:34:44
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 01856BDCADEDAA459E84ADFF14504E464D98
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/4Gpysjxwl3yxATlHVHSLTS5qNEQ.roa
Signing time: Sun 01 Jan 2023 05:45:02 +0000
ROA not before: Sun 01 Jan 2023 05:45:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203120
IP address blocks: 89.34.74.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:ad:ed:aa:45:9e:84:ad:ff:14:50:4e:46:4d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jan 1 05:45:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e06a72b23c70977cb101394754748b4d2e6a3444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ae:d6:b5:65:c1:77:7c:4c:64:ea:ee:de:08:
7f:f5:ff:0d:45:02:d9:15:dd:68:8a:11:f7:01:c4:
77:74:dc:1a:90:4b:4b:4c:74:d2:77:17:a4:ab:b0:
e0:1a:6f:d3:b4:ad:ab:2f:b3:2f:eb:61:4c:9d:18:
29:64:de:97:6e:43:4b:79:50:90:10:94:e1:76:af:
67:e7:ef:9e:1e:e0:42:30:b5:81:bb:56:0c:5d:f9:
b6:dc:3a:7c:b0:a7:4b:97:91:3b:44:9f:c7:2f:6a:
08:90:d7:34:b2:a5:ee:a2:e8:d8:c5:ec:95:09:b4:
cb:e5:2a:57:23:3c:8a:19:20:fb:60:ac:cf:7a:c1:
c7:29:12:b4:28:70:f8:fb:e6:14:6e:72:8f:83:37:
df:0c:23:22:5a:81:11:17:ce:d9:0d:be:28:33:4f:
ab:27:ef:76:f3:27:ed:27:f1:46:91:ca:39:2c:6b:
aa:c1:4a:ca:e9:ed:94:c2:b9:fe:89:1d:3e:71:66:
eb:2a:92:15:94:a9:5a:05:46:8a:6c:d3:ab:a6:76:
97:23:a1:29:12:33:a3:12:8c:ca:e7:a8:bd:a3:1b:
2f:ab:6b:5a:06:a4:5d:c3:eb:1c:2a:9c:7e:5f:9f:
62:d4:8b:aa:e8:a6:65:bc:27:b8:2a:c6:65:4c:a4:
d4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:6A:72:B2:3C:70:97:7C:B1:01:39:47:54:74:8B:4D:2E:6A:34:44
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/4Gpysjxwl3yxATlHVHSLTS5qNEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.74.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:71:7b:98:b1:cd:9d:45:f1:5a:0e:54:a9:e8:01:7b:db:d9:
85:f7:9d:7e:65:78:08:53:b1:4c:fa:f4:cd:6b:7f:f2:47:7d:
7b:0b:a7:51:14:4e:95:8f:cd:85:61:0a:a5:3d:60:54:3c:d7:
24:fb:24:35:e9:2f:03:75:9c:69:e7:2f:ce:71:ce:9c:a3:09:
48:e5:2e:8c:73:45:10:47:a4:f7:b8:74:24:7a:e5:34:63:b0:
16:c2:27:96:5b:26:bf:37:32:3a:de:af:17:25:ff:bf:fc:00:
3f:73:43:5b:b1:10:da:83:1e:4d:c4:89:83:c1:d2:84:95:c2:
28:ae:e7:d5:bb:13:94:a2:9f:20:42:1d:2b:c4:20:63:b8:a5:
69:8b:8c:05:f3:69:0c:44:0a:6b:e5:30:55:23:9f:94:79:b3:
e2:7f:c0:c2:96:8d:ea:61:02:d7:ae:e6:4a:1e:2f:b9:1e:72:
7e:e4:6e:76:32:28:88:e2:21:64:be:93:ec:fb:77:b0:b3:73:
0b:14:67:0a:04:45:00:82:e1:b5:15:63:26:69:7a:a0:2e:9e:
7e:1f:c4:fb:22:5f:a4:57:71:00:83:ef:80:ca:26:f2:21:76:
b4:12:d6:67:1a:8e:fd:59:3d:10:46:cf:90:97:4b:87:31:1e:
e8:4a:d0:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:50:10 2024 by rpki-client on console-fra.rpki-client.org