Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/62qAlMIAd4XZzl5qhgIVvLwaIw8.roa
File: 62qAlMIAd4XZzl5qhgIVvLwaIw8.roa (raw, json)
Hash identifier: nIabh7fqaTpE5K0YE9FpFjF8shTUjVu89IKE9eGsor8=
Subject key identifier: EB:6A:80:94:C2:00:77:85:D9:CE:5E:6A:86:02:15:BC:BC:1A:23:0F
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 0187FCB7B193E7376B35C597708CD0AB12BA
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/62qAlMIAd4XZzl5qhgIVvLwaIw8.roa
Signing time: Mon 08 May 2023 18:55:09 +0000
ROA not before: Mon 08 May 2023 18:55:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 89.43.45.0/24 maxlen: 24
89.37.136.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fc:b7:b1:93:e7:37:6b:35:c5:97:70:8c:d0:ab:12:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: May 8 18:55:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb6a8094c2007785d9ce5e6a860215bcbc1a230f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fc:6b:4e:96:3c:95:67:47:6d:3c:f6:b6:4b:
c0:89:73:d3:b8:ad:43:9c:dc:78:b3:c0:65:52:66:
db:8c:58:54:e3:94:0d:a3:a0:ac:f1:22:a6:1d:29:
06:90:2c:3a:8e:7e:4e:ec:33:a1:5c:5a:f4:b8:1f:
51:3b:0f:a9:08:e1:e0:50:6e:a3:86:21:c4:ed:58:
80:14:7f:14:8a:d1:07:89:3e:7a:37:a9:27:ae:e1:
8e:cf:8f:0a:7c:7e:29:d3:8a:88:00:a6:f9:43:90:
1a:09:ae:06:0b:c9:50:c7:79:0a:48:6a:b2:c4:b0:
8d:aa:45:f2:2f:44:fc:f3:7e:a3:28:48:53:9a:71:
3c:28:58:a0:06:98:0f:cb:a9:a4:5a:f4:73:08:50:
bf:21:87:54:01:6e:22:02:f0:6f:bb:3e:cc:43:ce:
fe:6d:fa:60:5d:84:7a:2a:2b:44:4f:a7:35:ce:a5:
cb:49:0c:9a:e8:bc:f3:a9:58:21:54:c6:e7:f5:75:
28:14:5f:9a:72:aa:25:bb:96:c2:c8:56:5e:1d:03:
de:88:ed:02:8c:e8:18:47:60:0e:e9:93:f0:98:45:
12:46:ff:d8:dd:fc:4b:a8:ba:e4:ea:54:a6:67:ac:
79:6d:f9:60:39:ad:9c:79:e9:e4:76:36:51:86:0c:
f8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:6A:80:94:C2:00:77:85:D9:CE:5E:6A:86:02:15:BC:BC:1A:23:0F
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/62qAlMIAd4XZzl5qhgIVvLwaIw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.136.0/24
89.43.45.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:70:d0:df:bd:1b:7e:c1:77:15:52:b1:f5:b4:3c:e8:e6:1a:
18:72:83:a2:5c:17:eb:00:99:ef:a7:a7:7d:29:b8:62:99:bc:
95:6e:12:6a:f9:40:6f:6a:a2:4d:9e:54:02:18:f8:e7:e5:0c:
93:94:0a:b3:8f:ac:1f:a6:7b:44:fc:3d:a7:5e:ef:65:8c:ac:
9d:ae:16:9b:20:bc:69:67:72:a3:4f:ce:cf:ae:02:ea:e9:c3:
ff:e6:78:cd:58:04:b4:e8:7d:7d:3a:31:84:0c:cd:7c:24:6a:
b0:98:d4:26:01:cd:22:7b:01:51:51:ed:0e:d1:56:39:b8:3e:
47:39:02:fe:a2:ef:df:ab:a7:48:1f:62:2f:f5:44:6f:9a:a0:
76:a1:03:ad:dd:fb:52:2c:81:80:d7:ef:08:04:9b:52:42:3d:
97:3a:a4:63:84:a0:98:96:06:d6:66:a6:a6:bb:d3:19:66:bf:
c8:7c:76:27:03:1a:3e:99:04:f9:91:fe:a8:95:b4:d7:dc:71:
8d:ae:f6:35:b3:7f:46:bd:7b:ef:58:0b:03:3b:65:a8:2c:f2:
d7:7e:1a:70:bf:e8:dc:95:86:66:04:c8:04:e7:0c:bd:d5:74:
cd:71:d1:5d:d9:34:53:ed:64:bd:53:d0:17:fc:1d:25:a4:0a:
7a:95:0c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:08 2023 by rpki-client on console-fra.rpki-client.org