Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/Isvm1xKUAme-ybHUAN7V02ZG-5s.roa
File: Isvm1xKUAme-ybHUAN7V02ZG-5s.roa (raw, json)
Hash identifier: JvL5Ps0ip4dkYU5q7wzXKgzB2y79jFB4daKN4YTarSQ=
Subject key identifier: 22:CB:E6:D7:12:94:02:67:BE:C9:B1:D4:00:DE:D5:D3:66:46:FB:9B
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 01856EA6C22E16CFE91906DED5E7028C7BD6
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/Isvm1xKUAme-ybHUAN7V02ZG-5s.roa
Signing time: Sun 01 Jan 2023 18:45:00 +0000
ROA not before: Sun 01 Jan 2023 18:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 89.44.209.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:c2:2e:16:cf:e9:19:06:de:d5:e7:02:8c:7b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jan 1 18:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22cbe6d712940267bec9b1d400ded5d36646fb9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9f:7b:26:05:73:c5:b1:75:fb:1c:4b:ff:eb:
4a:ab:4b:6e:cd:45:80:b6:22:83:1e:20:d7:de:66:
16:ff:86:ee:46:7a:2e:8c:4b:a3:b0:e4:99:54:ca:
14:06:31:8d:6a:5f:10:51:d1:cf:fb:0c:89:11:fe:
83:d5:a6:76:2d:9b:40:20:9c:b8:c6:f3:5e:bd:a0:
e4:e3:b4:85:d4:08:c3:61:cd:ce:11:31:ef:1a:52:
92:b1:4e:bb:0e:e3:bc:e9:85:18:40:da:87:51:05:
0c:ac:30:2f:26:bd:8a:39:50:f0:f9:02:eb:9b:37:
2d:64:d3:d5:47:31:a5:d5:d9:56:31:3f:99:43:d7:
ab:a1:a6:2f:9d:d2:38:2d:28:07:89:4b:bf:e1:58:
13:94:d2:aa:46:a2:f7:4e:4b:af:81:7a:57:8e:3a:
98:cd:3e:1c:2b:3b:6f:6f:63:e9:e5:18:5e:3f:49:
48:18:8f:66:d3:e3:db:bb:76:16:bb:d9:a7:e2:00:
e3:db:ce:7c:a6:cf:47:b2:fc:db:e8:3a:87:e1:ad:
13:dc:8c:f9:c3:dc:5e:c7:8d:83:c5:dc:ea:36:07:
9b:ca:cd:6c:f0:13:a4:72:35:b7:7e:40:4d:cf:b8:
2f:60:9a:34:3f:b8:48:47:f8:6f:ec:8f:5d:a0:68:
12:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:CB:E6:D7:12:94:02:67:BE:C9:B1:D4:00:DE:D5:D3:66:46:FB:9B
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/Isvm1xKUAme-ybHUAN7V02ZG-5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.209.0/24
Signature Algorithm: sha256WithRSAEncryption
72:88:3e:3e:2c:c3:2d:0a:b7:1e:a4:9c:52:32:96:ac:79:2c:
38:d9:ca:d6:8d:89:fb:78:bb:96:3f:d5:6d:33:29:01:47:b7:
23:1a:02:ad:39:c9:45:e4:86:e2:57:18:b0:a7:27:f2:50:23:
0b:59:6d:37:f0:2c:9b:43:3f:6e:60:fe:e1:08:87:e2:ba:82:
f1:24:75:a7:ac:9a:fb:df:fc:14:17:3c:5a:f7:c8:ef:56:f8:
47:63:37:a3:da:ac:27:6c:41:7c:9e:01:ce:c3:f9:61:bb:bf:
e9:96:bf:37:b5:b4:20:68:d8:5c:87:43:f0:47:46:2b:43:98:
d0:52:b0:a2:81:2c:31:25:48:77:2f:e8:03:41:23:65:81:56:
28:ac:83:86:7a:06:73:d5:42:51:f4:14:d8:e4:3a:cd:13:da:
54:1e:f6:e1:29:8f:a9:37:03:4d:f4:ac:99:0f:ba:60:41:25:
44:eb:71:20:2d:05:49:ea:e3:8f:07:cd:8f:5a:6d:5c:b9:f5:
13:d5:7e:2b:fc:6b:04:89:d2:8f:ca:02:02:8b:c4:cc:c1:e6:
60:95:af:e3:50:8f:00:5a:e4:d3:2d:73:44:ae:46:6b:c6:7a:
af:7a:20:83:35:b0:c4:21:ec:b5:fc:87:ed:fd:22:92:05:46:
a4:28:ef:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 27 21:08:50 2023 by rpki-client on console-ams.rpki-client.org