Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/iMhI4FPK9jQZ1XuTb1Lda-m9S1o.roa
File: iMhI4FPK9jQZ1XuTb1Lda-m9S1o.roa (raw, json)
Hash identifier: eOBuhQU6/sPHVil8sZJHjEOvho8TBIVt5OCFweybTt4=
Subject key identifier: 88:C8:48:E0:53:CA:F6:34:19:D5:7B:93:6F:52:DD:6B:E9:BD:4B:5A
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 01856EA6BDA3B581848C2BFF97F5CEF663C5
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/iMhI4FPK9jQZ1XuTb1Lda-m9S1o.roa
Signing time: Sun 01 Jan 2023 18:44:59 +0000
ROA not before: Sun 01 Jan 2023 18:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 89.43.45.0/24 maxlen: 24
89.43.46.0/24 maxlen: 24
188.215.73.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:bd:a3:b5:81:84:8c:2b:ff:97:f5:ce:f6:63:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jan 1 18:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88c848e053caf63419d57b936f52dd6be9bd4b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:40:aa:b6:5d:c8:9e:d0:90:9f:d6:31:49:83:
2a:8a:1b:57:b8:7c:3e:1d:7f:b7:c1:13:70:1d:f1:
90:e1:62:9b:ed:50:fa:21:43:7a:90:49:19:1e:d6:
ef:26:7a:b3:87:f0:db:10:65:be:25:e4:be:e9:48:
ce:0b:72:60:a2:96:51:f1:23:30:ee:47:18:a4:81:
4f:8f:16:ed:70:8c:5d:4d:19:34:39:4e:27:2a:e8:
b4:d1:58:e6:c3:9c:aa:22:05:fe:75:98:ca:66:6d:
04:00:f2:0e:2a:88:08:de:74:fd:6f:65:7c:0b:45:
ac:86:77:b5:56:5a:dc:e4:92:ec:10:69:17:b5:0f:
9b:f3:43:3f:6e:b2:10:e4:49:a4:4f:42:00:ae:d8:
25:67:35:65:ce:e6:73:cb:5c:7c:f8:a2:9e:c8:f0:
12:2d:f5:28:9a:00:1c:ef:17:dd:ed:b2:32:50:f2:
ec:b0:16:7f:55:9a:cb:c0:0e:da:f9:59:27:0a:2c:
20:69:32:d1:e9:9c:e1:c7:66:52:2b:ec:46:8a:b8:
64:a3:61:05:ff:d2:d7:d4:b6:54:c6:89:c0:4f:ca:
da:c7:07:0b:12:e4:d9:a1:7d:58:d6:dd:49:41:1a:
6b:a3:7d:22:69:8d:2d:fd:01:57:76:ac:09:e7:75:
71:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C8:48:E0:53:CA:F6:34:19:D5:7B:93:6F:52:DD:6B:E9:BD:4B:5A
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/iMhI4FPK9jQZ1XuTb1Lda-m9S1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.43.45.0-89.43.46.255
188.215.73.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:89:f1:ef:4e:42:a2:5f:45:16:c4:1f:6b:37:a7:0c:1f:ca:
1b:94:47:18:aa:60:80:13:9b:0a:83:d0:6a:48:36:e9:c8:38:
6d:17:f6:09:44:5f:63:99:9e:3f:71:2d:5a:6b:ee:95:d7:97:
aa:bd:22:03:a9:e4:8e:da:41:d2:8b:d6:8b:8b:dd:dc:be:13:
0e:2c:d8:ec:d4:e8:de:1d:49:ca:c7:5b:3f:61:de:97:c5:cf:
4b:fa:08:2c:6c:06:07:13:af:8d:62:f3:a7:8d:08:41:b1:68:
05:08:db:33:f3:f6:e6:fe:e7:df:33:97:61:ca:5d:8a:0e:e6:
36:bb:fd:bb:80:ca:39:26:67:8b:be:df:17:04:13:81:54:24:
3d:12:ba:ed:09:a2:72:bc:01:a2:bb:4e:90:6e:d8:73:39:8c:
56:9c:c5:92:19:9a:8c:da:ee:b6:f8:2c:26:ba:50:1d:40:e4:
d6:92:59:6b:21:30:17:36:6c:78:62:13:d9:7e:6d:8e:da:92:
b9:4a:88:b9:ca:73:4a:0b:9e:17:65:70:52:5c:00:11:1c:7e:
d7:fc:97:25:05:1a:d5:4e:eb:2b:ea:b7:06:af:12:b8:27:3c:
b8:e1:fc:44:19:a8:cb:1e:25:99:7f:c2:25:8d:a4:25:09:53:
4c:5c:9a:31
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:08 2023 by rpki-client on console-fra.rpki-client.org