Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/DhPpG3POCLzpN0jn-6RhZk1WJU4.roa
File: DhPpG3POCLzpN0jn-6RhZk1WJU4.roa (raw, json)
Hash identifier: JtOLF5nBCPz6nK4kY73qbVLEQA6tx3PNJHo6NxO7Lf0=
Subject key identifier: 0E:13:E9:1B:73:CE:08:BC:E9:37:48:E7:FB:A4:61:66:4D:56:25:4E
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 018959E86FB1227CD5147F6D2A5878D3A0F9
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/DhPpG3POCLzpN0jn-6RhZk1WJU4.roa
Signing time: Sat 15 Jul 2023 14:15:52 +0000
ROA not before: Sat 15 Jul 2023 14:15:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41028
IP address blocks: 89.44.225.0/24 maxlen: 24
89.44.226.0/24 maxlen: 24
89.44.227.0/24 maxlen: 24
2a05:b680:7::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:59:e8:6f:b1:22:7c:d5:14:7f:6d:2a:58:78:d3:a0:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jul 15 14:15:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e13e91b73ce08bce93748e7fba461664d56254e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:67:1d:c7:43:d1:29:cf:84:61:14:0b:6c:31:
a4:2c:41:4d:74:28:2b:f6:ce:8b:01:8a:d8:c4:fd:
56:34:f2:8f:bc:0f:2b:21:cc:29:3b:a7:1b:d8:11:
1a:97:67:ef:85:4b:27:28:22:d9:5f:3d:57:ea:e5:
2c:82:b3:94:6e:e7:4f:96:7d:d8:65:21:59:f3:b9:
de:ac:5d:5f:42:65:ed:d5:ac:fd:f5:76:0e:17:ea:
a9:d1:7b:02:6d:53:90:fe:de:6d:76:d7:3d:32:21:
bc:cb:72:88:75:d0:dc:b5:96:d1:40:ad:9b:61:41:
29:fc:71:cd:dc:42:81:ac:4a:cd:ff:42:38:e9:8b:
8e:40:ba:dc:01:aa:5c:af:94:f6:4d:19:45:44:d7:
f1:c7:65:e7:31:19:87:cf:9b:92:cc:54:4f:93:6c:
49:60:d9:3a:08:0c:bc:54:3d:88:63:c8:b3:6b:09:
60:67:4e:22:a7:85:b7:43:9a:f2:6d:da:83:47:48:
1b:0d:54:c8:83:98:df:d2:aa:84:29:8c:4e:99:5c:
27:49:62:e3:38:39:ae:9d:9b:1a:b6:03:71:bc:b6:
f5:ac:00:33:af:d8:11:3a:fb:09:a2:ef:e5:ec:5b:
46:7f:20:fa:82:95:42:45:0e:98:50:61:77:7c:fb:
c6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:13:E9:1B:73:CE:08:BC:E9:37:48:E7:FB:A4:61:66:4D:56:25:4E
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/DhPpG3POCLzpN0jn-6RhZk1WJU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.225.0-89.44.227.255
IPv6:
2a05:b680:7::/48
Signature Algorithm: sha256WithRSAEncryption
bd:ab:61:59:f4:51:85:9e:4b:f7:6f:7c:9e:d8:6a:c7:5f:2c:
a7:d9:68:9f:ca:aa:0b:a9:16:e9:9c:0c:d6:bc:6a:fc:bb:d1:
3a:5c:5e:b8:d3:c3:2d:d4:d3:f4:f4:a9:73:f7:ac:6d:92:f7:
78:0b:b1:42:92:7e:40:cc:34:31:7b:db:b3:b7:94:c0:cd:ce:
65:df:0e:d5:61:4a:37:01:c7:07:b6:41:80:37:62:b3:ba:49:
f5:b9:24:79:e8:17:7a:7e:e0:7c:88:7f:a5:50:06:d1:0e:2b:
61:e5:09:cc:e5:3e:3d:12:39:b4:7b:90:f6:8b:2d:f7:ac:58:
c9:2a:9a:e5:9e:69:34:fb:e3:8c:a1:02:d2:13:b3:50:cf:2a:
61:b4:e3:a6:87:ed:2a:27:04:42:20:8b:85:dc:83:57:34:c3:
44:96:ae:b9:2d:98:c7:db:fd:25:da:61:5e:99:5d:ab:61:6c:
f3:33:44:10:0b:ed:13:c7:d7:e8:e3:5f:19:25:c9:52:86:02:
54:04:48:86:e8:03:d0:3c:e1:91:c5:b9:81:1b:a7:7c:ef:c4:
52:79:18:24:81:2e:16:fe:1b:13:38:00:4b:74:59:e2:d9:cc:
11:ab:9b:cd:f2:be:85:b9:91:43:62:90:c5:f7:ef:1c:8a:aa:
25:ee:6a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:38 2024 by rpki-client on console-ams.rpki-client.org