Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/BL4WMACV2jIjrkLpPWyEKtaW5hc.roa
File: BL4WMACV2jIjrkLpPWyEKtaW5hc.roa (raw, json)
Hash identifier: Xe5iC9Dop4betiw79fXYxE6q93e3CT7a3W7hCZtSfmQ=
Subject key identifier: 04:BE:16:30:00:95:DA:32:23:AE:42:E9:3D:6C:84:2A:D6:96:E6:17
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 018B5D38F6C329EF696E1B33B66D48144302
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/BL4WMACV2jIjrkLpPWyEKtaW5hc.roa
Signing time: Mon 23 Oct 2023 15:48:16 +0000
ROA not before: Mon 23 Oct 2023 15:48:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216314
IP address blocks: 89.43.42.0/24 maxlen: 24
89.43.40.0/24 maxlen: 24
89.43.44.0/24 maxlen: 24
89.43.43.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5d:38:f6:c3:29:ef:69:6e:1b:33:b6:6d:48:14:43:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Oct 23 15:48:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04be16300095da3223ae42e93d6c842ad696e617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0e:d4:f5:f1:96:39:23:58:b3:2c:bd:4a:18:
7e:f3:01:b0:0e:6f:df:ec:cb:f7:db:cf:5f:6d:e4:
8b:60:ef:7f:e4:43:79:83:9e:aa:e5:cc:8d:de:6d:
bf:a6:d8:d0:19:83:a0:54:ee:2b:39:9a:7d:54:56:
cd:e7:08:06:30:d2:e2:3f:da:ce:a9:10:85:76:1e:
68:d6:d9:7f:e7:80:36:31:33:2a:c8:3d:bd:6d:5e:
47:0e:ba:7a:2a:40:07:5b:83:71:04:32:d2:76:2d:
59:31:51:09:40:47:93:e6:74:16:37:ed:d3:2a:0c:
0e:db:d6:e5:c4:98:27:77:8a:4d:c2:cb:9b:0a:9e:
6f:ad:e7:02:9d:d5:5a:b1:50:32:21:da:89:bf:a1:
db:57:e3:4b:90:c4:08:53:29:54:cd:71:dc:4e:fb:
19:b4:aa:34:fd:cb:2d:5c:59:7c:56:48:22:e1:a7:
e5:67:c8:79:4d:19:51:f7:73:1e:0c:2b:d4:da:d0:
49:9f:fb:4b:f0:4e:f9:40:15:03:de:e2:0f:c8:87:
b2:11:2e:b0:22:2a:da:68:78:a9:3b:a2:6a:96:0f:
7b:ef:51:0e:9b:91:60:71:2c:3b:cc:d2:c6:53:1e:
85:9c:07:d6:a3:04:c4:a1:d6:53:ab:f7:a0:48:a5:
9d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:BE:16:30:00:95:DA:32:23:AE:42:E9:3D:6C:84:2A:D6:96:E6:17
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/BL4WMACV2jIjrkLpPWyEKtaW5hc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.43.40.0/24
89.43.42.0-89.43.44.255
Signature Algorithm: sha256WithRSAEncryption
2c:be:35:63:97:a2:75:e2:2f:3f:c3:cc:d7:50:50:fb:47:11:
30:68:4a:23:7a:3c:5f:a1:41:89:43:8e:ae:70:e3:9b:20:3d:
ed:22:ee:3b:d7:20:60:cc:a2:24:03:aa:b5:5c:7e:bf:1a:ee:
67:08:3e:0d:a4:00:db:62:f4:08:9c:19:b6:c1:99:34:79:ac:
32:12:3a:0e:59:4a:7e:f8:3c:c4:33:b2:34:fa:eb:b2:79:5f:
7a:77:33:4f:db:63:81:7a:8b:87:41:9d:aa:cc:83:71:e9:ca:
bb:8e:4d:05:12:f9:61:47:18:61:1f:e1:2a:bc:fc:b9:c4:dc:
97:a8:f0:fb:6e:e3:bb:73:78:e9:2e:16:b8:73:ea:81:19:48:
0a:55:e5:f5:d5:a3:91:e5:4a:d1:51:16:24:4b:de:1a:4e:8d:
ee:1c:58:75:67:51:2c:08:f5:28:09:b8:d6:9d:95:59:40:02:
12:96:b1:26:18:1e:96:6d:8b:76:83:34:5a:9f:fd:02:ad:41:
79:dc:ce:02:65:ab:91:4b:8f:8c:0a:5c:d1:9c:6d:63:07:ae:
4f:20:05:55:9e:52:76:b3:6a:b0:92:bd:80:a0:83:48:5f:e3:
dd:f1:36:ad:34:ea:69:32:3d:e9:9f:ca:eb:45:e9:97:1c:3d:
52:eb:65:ce
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jan 2 11:51:29 2024 by rpki-client on console-fra.rpki-client.org