Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/S_mpyOjCT76bu2R4fNYk5wVi6YE.roa
File: S_mpyOjCT76bu2R4fNYk5wVi6YE.roa (raw, json)
Hash identifier: NRHrYRvqNYrcdERdE6Ag5QqJcdvGCSvc0KTLdk2wkh8=
Subject key identifier: 4B:F9:A9:C8:E8:C2:4F:BE:9B:BB:64:78:7C:D6:24:E7:05:62:E9:81
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 0189D9499622E8B6C6A09013EC92983E76FB
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/S_mpyOjCT76bu2R4fNYk5wVi6YE.roa
Signing time: Wed 09 Aug 2023 07:53:45 +0000
ROA not before: Wed 09 Aug 2023 07:53:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 89.43.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Oct 2023 18:48:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d9:49:96:22:e8:b6:c6:a0:90:13:ec:92:98:3e:76:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Aug 9 07:53:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4bf9a9c8e8c24fbe9bbb64787cd624e70562e981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9f:f1:5d:c8:c1:c0:52:c9:e2:d1:8f:d8:23:
f1:22:80:94:2e:78:77:e1:ec:6e:56:18:53:40:a2:
d4:8c:f3:31:bf:4b:28:40:1f:8f:41:a5:cd:14:0c:
ce:a7:81:07:48:37:41:83:1a:76:4e:35:be:03:b4:
8e:a8:35:7a:0b:90:54:80:66:1c:a4:c2:14:f7:e2:
fe:bb:6e:76:44:a1:d9:e8:5c:fe:b6:57:a7:5e:32:
8f:bc:da:99:ff:7a:56:bb:8d:5c:7f:bd:87:8e:79:
08:ae:9a:8d:5f:9a:5a:99:d9:ef:cf:0a:8c:55:6d:
d7:0b:5e:03:79:98:3e:85:86:b4:7a:78:3c:60:4c:
39:d7:f6:9c:82:1c:2e:b1:ce:2a:29:04:ec:7b:4e:
ac:58:5f:a7:c4:ae:64:f6:9d:ff:4e:37:ab:ec:88:
04:71:f7:19:8a:c8:5c:ca:1f:e3:91:e4:c1:df:ff:
9f:9f:26:90:02:ad:67:eb:22:22:c7:9e:62:4e:ef:
a2:51:8b:ba:3f:ae:fd:93:5f:be:37:e4:42:4c:e6:
0e:9a:30:39:bc:8e:99:3d:31:34:09:e2:6c:b7:78:
bc:af:6e:f8:77:6f:2b:41:1c:f3:44:6b:88:3c:dc:
79:ab:96:80:40:f4:a2:43:2c:01:52:31:2c:47:3f:
58:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F9:A9:C8:E8:C2:4F:BE:9B:BB:64:78:7C:D6:24:E7:05:62:E9:81
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/S_mpyOjCT76bu2R4fNYk5wVi6YE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.43.45.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:c8:0c:d9:1a:27:97:61:13:c1:b1:51:9e:d4:c1:31:1b:d1:
58:39:ef:cf:38:1f:12:b7:5b:a1:36:28:0f:5c:ea:29:a5:13:
32:2a:d1:56:9b:32:37:2c:32:6c:ae:46:c6:4a:3c:34:e8:2e:
b4:14:6c:61:51:2e:1f:08:2c:c9:a4:ad:bb:42:13:ce:d2:a0:
c5:6a:ff:e4:9a:d4:78:6c:a4:f9:2c:19:54:60:19:56:99:d9:
fb:2a:4d:48:dc:4b:21:87:56:66:b2:da:00:3a:cc:67:59:6e:
47:29:e0:f4:4f:28:4e:dd:7d:f4:2c:59:3c:4c:ba:28:30:c9:
1d:e4:d6:dd:79:fa:0b:82:e3:3a:4c:26:be:f3:7d:ae:fd:c1:
1e:96:6f:ab:32:25:52:fe:8a:0f:54:a4:6b:10:35:8f:07:7f:
7f:8f:d0:f8:43:7b:2b:33:e8:93:23:37:81:1d:c8:7c:7e:91:
94:11:ec:2d:50:d8:cf:1b:e0:ab:d1:88:79:00:2f:2f:32:40:
e9:e0:8f:94:5d:96:fa:49:d8:63:d9:93:64:1b:01:ee:20:58:
68:10:83:04:0b:ba:d3:65:11:88:8d:02:0a:75:e5:29:25:40:
c3:f6:f5:5d:22:17:40:14:58:7a:0c:cd:00:7b:1a:0e:cf:79:
cc:3d:b0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:38 2024 by rpki-client on console-ams.rpki-client.org