Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/qEzrlxq9JF7p_J_GbOctTE1T3S4.roa
File: qEzrlxq9JF7p_J_GbOctTE1T3S4.roa (raw, json)
Hash identifier: SVXJgdnQMf9KDeHytFSac+mlZiM9+83aGcdOx8APG4s=
Subject key identifier: A8:4C:EB:97:1A:BD:24:5E:E9:FC:9F:C6:6C:E7:2D:4C:4D:53:DD:2E
Certificate issuer: /CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Certificate serial: 018FB93BEB783A6C4558CEBA6965EFFE794E
Authority key identifier: 8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/qEzrlxq9JF7p_J_GbOctTE1T3S4.roa
Signing time: Mon 27 May 2024 08:47:42 +0000
ROA not before: Mon 27 May 2024 08:47:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199439
IP address blocks: 89.28.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 27 Jul 2024 13:57:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b9:3b:eb:78:3a:6c:45:58:ce:ba:69:65:ef:fe:79:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Validity
Not Before: May 27 08:47:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a84ceb971abd245ee9fc9fc66ce72d4c4d53dd2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e3:5f:f2:63:c7:f6:b8:40:da:66:33:c0:eb:
2d:30:ee:89:db:6d:8d:98:18:1e:ee:15:18:10:a9:
ce:fa:c3:60:01:92:64:31:2b:ff:8f:fa:b5:a0:b6:
be:38:03:e4:ed:69:cd:de:4b:ed:8b:90:7a:a0:28:
34:5d:66:11:97:61:28:b0:95:0c:c2:1c:fb:0c:0a:
c4:72:9f:c4:4b:ad:4a:98:70:c1:47:cd:0f:9c:8c:
77:e4:31:a6:d0:e9:8f:c4:5f:86:80:80:6f:69:a3:
24:b5:bc:c8:74:b7:1a:75:23:82:18:cd:8f:bc:eb:
e9:17:90:94:bb:a7:2b:48:95:22:61:b1:a9:07:b2:
e6:76:91:df:e7:79:86:13:91:e1:6b:e5:0e:d4:c7:
b8:bf:26:71:7c:cd:b7:ad:55:01:f6:15:aa:51:59:
65:45:82:01:01:4f:55:63:d8:e4:1a:da:5a:a0:72:
af:34:90:00:53:4d:eb:fc:d6:10:61:d2:dc:d8:27:
fe:5f:0d:1d:4b:e1:ad:5e:71:c6:f1:9c:12:52:a0:
98:9a:9b:57:d1:99:4c:da:48:06:3f:06:c0:f9:50:
67:56:7b:89:ec:db:49:32:3c:8e:a3:96:d1:1d:7d:
51:38:ab:2d:04:da:d2:4a:ea:61:c5:9f:fb:46:43:
d8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4C:EB:97:1A:BD:24:5E:E9:FC:9F:C6:6C:E7:2D:4C:4D:53:DD:2E
X509v3 Authority Key Identifier:
keyid:8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/qEzrlxq9JF7p_J_GbOctTE1T3S4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.28.237.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:2c:54:d8:6a:ee:3b:64:52:b0:6d:1c:58:ac:78:f7:23:8d:
c3:18:23:fd:a0:9d:48:ce:9f:60:5a:b9:57:78:51:3f:f6:6f:
63:8e:8b:a9:1f:3c:14:ab:6e:31:33:c9:0b:97:6f:a9:96:09:
1d:8c:9e:33:3b:09:88:77:38:de:93:84:82:28:1b:ff:cb:37:
70:42:60:1f:64:08:13:89:13:cb:98:ed:90:06:95:7e:ec:2b:
c3:b4:5b:9a:8e:3d:9f:b7:02:9b:a5:9f:99:80:82:78:d2:7f:
01:17:71:c7:f9:75:35:11:f4:5f:6d:8e:ba:71:d6:9a:e0:56:
5e:8c:aa:a1:a8:13:07:47:b9:2e:8b:4b:70:b6:7b:94:c0:5e:
26:f2:2c:83:30:62:60:f6:6a:6a:4b:86:6c:0e:2f:81:53:85:
f4:ae:58:c7:56:08:9b:9f:89:15:a6:3c:5c:b9:53:f5:26:5d:
70:ea:3f:2a:c4:f3:49:c8:2d:9b:b2:d1:f5:1e:a0:45:e2:e8:
ba:58:8d:7b:55:f1:90:80:e6:eb:8c:9a:8e:c3:3c:8a:4a:a0:
c6:09:2c:49:c8:1e:b2:af:c3:ba:e6:3a:11:84:f0:81:6b:96:
8c:d6:4b:07:ee:c3:dd:47:09:96:ae:e5:a8:24:11:6b:3a:73:
5e:1f:10:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 27 16:30:20 2024 by rpki-client on console-ams.rpki-client.org