Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/ojjR9iTc9AGsXhgkLmb3qbvkBx0.roa
File: ojjR9iTc9AGsXhgkLmb3qbvkBx0.roa (raw, json)
Hash identifier: SHki/FOrDmpjSY90uXb3VBX1HYtRE/zHyOC2iLvitA0=
Subject key identifier: A2:38:D1:F6:24:DC:F4:01:AC:5E:18:24:2E:66:F7:A9:BB:E4:07:1D
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 018A98458FBFB76837E7E439C67CBFDC0BD8
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/ojjR9iTc9AGsXhgkLmb3qbvkBx0.roa
Signing time: Fri 15 Sep 2023 09:56:50 +0000
ROA not before: Fri 15 Sep 2023 09:56:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216314
IP address blocks: 89.43.40.0/24 maxlen: 24
89.43.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Oct 2023 15:47:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:98:45:8f:bf:b7:68:37:e7:e4:39:c6:7c:bf:dc:0b:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Sep 15 09:56:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a238d1f624dcf401ac5e18242e66f7a9bbe4071d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:56:18:4f:cb:b4:68:8e:a5:47:c8:64:fa:25:
7e:a1:ad:23:82:b1:12:1f:10:85:b0:69:5d:3c:74:
86:e9:02:67:a4:3a:09:72:b0:81:2f:5c:a6:67:46:
26:77:76:a7:f9:db:52:2c:b1:a4:f5:38:9d:c5:78:
ec:b7:e7:0e:83:ce:9f:45:f7:ce:6f:b2:3a:03:fd:
5b:8d:f2:35:85:99:7c:c2:c0:f2:7d:ce:d4:8e:d5:
5d:46:cb:e9:ab:1d:a6:9d:30:e9:7f:9d:30:ca:ed:
08:7f:9b:95:3f:4c:11:5c:9c:23:0c:27:48:c5:a8:
20:69:3c:b6:9d:93:9f:bf:2e:16:0f:b6:22:a3:50:
8a:af:99:b7:81:a0:af:44:6b:5e:4b:29:21:17:a5:
42:5d:da:dc:85:b6:2b:d1:cd:c7:6c:0c:9f:6b:ca:
62:60:ff:89:b7:53:db:b4:bf:25:f8:dc:9b:4f:ff:
46:4d:01:53:dc:7b:5b:a3:2e:c9:31:c3:fd:de:a5:
3f:ab:c8:dd:88:99:a4:9e:f3:ea:a6:4e:ea:26:43:
7f:ca:ab:d1:e9:2f:81:a3:81:10:a4:01:b6:1f:0c:
a1:18:ab:8a:66:ba:84:8c:6e:2b:1f:c0:98:11:6b:
54:0e:9b:65:58:cf:bf:8b:d9:e2:47:af:5d:f8:f1:
97:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:38:D1:F6:24:DC:F4:01:AC:5E:18:24:2E:66:F7:A9:BB:E4:07:1D
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/ojjR9iTc9AGsXhgkLmb3qbvkBx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.43.40.0/24
89.43.44.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:f9:4d:3e:7a:b5:3b:08:98:22:c2:17:4f:bb:0b:21:6b:02:
1b:29:83:f3:76:91:b4:02:00:94:93:ce:dd:4b:8d:76:25:ad:
0c:b8:69:3f:66:f7:4c:1a:1e:ef:9d:33:7b:08:63:5f:dc:f9:
64:36:2f:94:c8:6f:f3:6d:e8:0f:12:6f:02:bb:93:aa:8d:0d:
3c:be:fd:c3:60:8d:56:8b:e6:70:cc:ae:bd:05:3e:6e:38:9e:
37:33:4e:17:3c:f1:f6:47:6e:96:f6:6e:f5:e8:ee:8e:1c:d6:
0e:d1:3a:7d:36:8a:da:b1:4b:1e:aa:10:91:1c:64:35:81:2c:
03:d4:66:53:41:39:ea:6a:0f:4e:38:21:78:90:e4:29:43:82:
34:03:3a:cd:53:93:2b:da:24:a2:35:d0:f6:d8:18:02:79:ad:
43:28:33:e1:c6:22:9e:91:93:3a:92:14:3a:c5:7c:b9:75:b6:
8c:19:54:04:99:3b:f1:b8:b4:87:2f:98:44:38:51:1e:01:eb:
6b:57:c8:b2:14:c8:aa:b3:6c:14:96:7e:3f:ce:87:57:2e:6d:
11:7c:20:91:96:21:8c:30:4b:f5:0f:16:9c:8a:5e:de:44:e9:
97:ae:62:c7:4f:11:97:3b:28:36:4c:95:30:93:ed:58:81:64:
dc:f8:5a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:29 2024 by rpki-client on console-fra.rpki-client.org