Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/6Wi9nWSFQWlEq_R_aMR3Xw_8TE8.roa
File: 6Wi9nWSFQWlEq_R_aMR3Xw_8TE8.roa (raw, json)
Hash identifier: 7gi0JrPUDjT07mzbybEATY8YSfmRnhoeR3+SkKqpIQA=
Subject key identifier: E9:68:BD:9D:64:85:41:69:44:AB:F4:7F:68:C4:77:5F:0F:FC:4C:4F
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 0188B6403D9D9797BBEE9838FB404D9A37E0
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/6Wi9nWSFQWlEq_R_aMR3Xw_8TE8.roa
Signing time: Tue 13 Jun 2023 19:34:03 +0000
ROA not before: Tue 13 Jun 2023 19:34:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 89.43.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b6:40:3d:9d:97:97:bb:ee:98:38:fb:40:4d:9a:37:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jun 13 19:34:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e968bd9d6485416944abf47f68c4775f0ffc4c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:44:13:37:42:79:4b:6c:a4:f9:79:0e:80:a0:
d2:80:23:9c:48:88:38:a4:00:cb:17:2a:3d:8a:63:
6d:d9:27:2c:24:19:30:44:25:8d:4a:f3:cb:2d:5f:
c3:e1:d8:35:59:8d:7f:8d:75:d9:f5:02:cc:5f:84:
55:e9:46:a7:60:22:44:ac:e2:a7:f1:f1:43:b4:4e:
e5:46:bc:36:4f:c9:9d:e0:40:fa:ac:cf:04:2c:8a:
8d:ee:ef:38:c0:41:6b:93:3a:66:45:1d:4c:29:18:
9f:6c:45:cb:c7:d4:84:a8:f7:75:dd:7c:e1:ec:47:
1f:31:5f:a1:e4:ab:73:72:c9:92:b3:36:12:92:6e:
06:ff:72:9f:bd:d7:7f:d3:78:11:77:0d:86:37:4b:
5f:d9:85:9d:0b:e3:00:6b:dd:73:a6:b9:fa:24:92:
0b:3d:4d:85:f8:9e:fa:37:45:b0:ef:6b:e5:cc:ba:
4f:90:8a:17:57:a8:4c:83:52:3e:65:9c:c0:f3:ef:
6b:73:f2:9b:dc:8e:64:d1:c8:95:32:da:b2:ba:d4:
d0:96:04:d0:98:c0:1d:dd:8a:67:f3:8d:6a:37:a9:
fe:24:cf:6f:da:94:3d:8a:37:4e:58:f5:f1:50:c6:
06:b2:73:4d:d3:20:10:d2:58:d4:61:90:26:61:ac:
20:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:68:BD:9D:64:85:41:69:44:AB:F4:7F:68:C4:77:5F:0F:FC:4C:4F
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/6Wi9nWSFQWlEq_R_aMR3Xw_8TE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.43.45.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:67:41:ff:6d:9a:e4:d1:3c:af:f7:20:39:6a:9a:cb:99:05:
56:14:e7:97:0d:76:6f:0a:e2:65:e5:f7:12:79:b5:d5:35:d2:
36:c3:9f:b7:67:7c:5a:51:bd:67:46:70:c5:d8:7b:c1:95:ce:
00:54:69:96:88:63:6f:83:a2:f0:4f:21:e7:63:4d:f2:cc:cc:
51:3b:e0:0a:cd:ac:b8:6c:d6:2b:fd:42:94:7c:7b:ae:eb:29:
22:7d:3b:f4:a1:77:68:a6:76:af:81:17:db:e8:ed:98:6c:35:
ce:83:1b:c6:6e:05:fa:51:7d:37:48:14:f7:8a:67:ae:4f:21:
64:76:82:68:3b:c0:b9:d4:87:b1:d3:5b:3d:cf:9a:28:7d:5e:
40:29:3c:a8:07:0c:de:ff:38:bc:32:f5:27:ea:2a:e8:ec:e3:
6b:60:90:07:28:24:da:e2:42:23:00:81:a6:5d:4d:9f:0c:e8:
37:d4:1b:44:b5:79:78:3d:b9:be:92:9b:2d:ad:6a:f5:9d:1b:
da:2f:14:ee:82:30:49:af:ec:ca:c3:1a:f9:4b:67:51:1e:ca:
22:c3:17:b6:9e:3f:95:34:5e:be:83:7d:f3:a0:d6:44:d9:d7:
78:c1:24:fc:61:a5:82:68:82:ac:fa:c1:66:57:07:e5:6b:dc:
5b:1d:1c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 4 12:47:20 2023 by rpki-client on console-fra.rpki-client.org