Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/2a82K8QVJEU-ofPRzm_jq4o4ApQ.roa
File: 2a82K8QVJEU-ofPRzm_jq4o4ApQ.roa (raw, json)
Hash identifier: 5HR8YYIzBIrOSYDPy7hcMj/RTomC9Q4p7v3RP7BCr/g=
Subject key identifier: D9:AF:36:2B:C4:15:24:45:3E:A1:F3:D1:CE:6F:E3:AB:8A:38:02:94
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 018959EB2A3585486B46E55F71495587F64E
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/2a82K8QVJEU-ofPRzm_jq4o4ApQ.roa
Signing time: Sat 15 Jul 2023 14:18:51 +0000
ROA not before: Sat 15 Jul 2023 14:18:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39669
IP address blocks: 89.44.224.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:59:eb:2a:35:85:48:6b:46:e5:5f:71:49:55:87:f6:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jul 15 14:18:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9af362bc41524453ea1f3d1ce6fe3ab8a380294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:03:a8:f2:57:bf:8e:e1:d3:cb:81:d6:ac:12:
88:38:87:93:ef:97:30:d6:af:27:ff:41:54:b7:1e:
d1:5a:3f:d4:b7:63:3b:6f:3e:0e:00:7e:3d:88:e1:
50:b6:e2:32:58:df:99:af:64:93:28:5c:23:eb:f4:
66:e4:d2:9c:97:86:20:72:f6:94:15:0d:cf:85:c6:
17:f5:16:b5:47:16:6e:9d:75:17:97:c6:63:99:60:
a5:55:8f:23:63:2f:fc:67:e2:27:99:fe:90:0b:ea:
ec:cc:ba:45:e9:65:87:43:67:08:46:24:de:25:3e:
c2:ca:6a:9c:e6:c6:7e:73:6e:23:b7:c2:51:a8:28:
fe:03:80:68:49:f3:ae:46:6f:f5:22:d9:ea:1f:ba:
89:2e:1f:8e:67:2c:89:10:b0:53:63:db:16:dc:ea:
13:a5:45:85:eb:0d:89:aa:92:f7:35:ca:34:5d:f5:
83:26:57:cd:c2:0b:57:36:30:96:69:1f:33:13:7c:
2b:fe:94:7f:a1:be:69:35:10:0d:4f:6d:5a:11:e0:
f7:c8:42:37:a9:c8:e0:d0:db:46:7a:f8:97:12:fb:
e1:94:fc:fc:c8:f0:85:d3:4c:7d:5b:02:44:f8:c0:
31:ab:27:b5:ff:25:12:85:b6:fb:d6:8c:87:f6:14:
3d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:AF:36:2B:C4:15:24:45:3E:A1:F3:D1:CE:6F:E3:AB:8A:38:02:94
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/2a82K8QVJEU-ofPRzm_jq4o4ApQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.224.0/24
Signature Algorithm: sha256WithRSAEncryption
98:d4:a7:9d:b1:df:4e:f3:17:6b:2e:50:e7:65:62:1e:21:ab:
df:1c:c1:96:6e:e3:a7:a3:fc:0c:18:78:db:f6:6f:c3:cc:26:
b0:ed:be:f3:46:bd:d9:a8:c2:f1:27:1e:e5:ea:47:a1:77:e0:
90:66:1a:36:ab:30:4f:d7:de:ea:9f:ee:f4:1c:0c:7c:e9:4f:
b7:04:40:c4:1d:92:9f:5d:ff:ae:6d:0a:df:ba:3f:ed:c7:e1:
86:8d:24:d6:74:fd:27:8a:40:ac:02:70:78:2d:5b:00:e3:7a:
53:bc:53:0c:f3:4a:24:a6:fc:d1:78:11:11:b7:e2:bf:29:c0:
d8:2c:89:2e:62:89:40:77:26:71:c0:b9:50:a5:ec:b3:7b:b1:
df:3b:2e:4a:3d:7d:f4:c9:ef:a7:a0:39:c6:23:e0:b5:81:3a:
b5:5a:22:d0:f4:bf:dc:04:b1:f2:5f:ee:f0:01:08:27:3c:f0:
28:e9:88:aa:c4:3d:6d:bc:46:23:a3:57:04:f9:dc:ca:af:c0:
91:29:d6:3f:ae:fc:d7:a7:bf:22:ca:f8:13:0c:62:ef:fb:ae:
0f:d2:77:5a:fc:f9:59:d6:b5:fd:24:08:5c:1f:51:9a:c2:1f:
13:fc:8d:24:11:fc:dc:5e:27:28:e1:db:db:6c:d0:28:3b:d2:
0e:fb:a1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:34:39 2024 by rpki-client on console-ams.rpki-client.org