Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/wUXJwfgSwBfVK_ifgHHWDfjx_Fw.roa
File: wUXJwfgSwBfVK_ifgHHWDfjx_Fw.roa (raw, json)
Hash identifier: 6e1vareZ4/FkBEXLLurKYIdSrLM4o6srC3ul3HkWsEA=
Subject key identifier: C1:45:C9:C1:F8:12:C0:17:D5:2B:F8:9F:80:71:D6:0D:F8:F1:FC:5C
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 018CC94E044E1D2D20CE9E9263E2994F352C
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/wUXJwfgSwBfVK_ifgHHWDfjx_Fw.roa
Signing time: Tue 02 Jan 2024 08:33:02 +0000
ROA not before: Tue 02 Jan 2024 08:33:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58022
IP address blocks: 89.40.22.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 08 Jan 2024 18:08:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:04:4e:1d:2d:20:ce:9e:92:63:e2:99:4f:35:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jan 2 08:33:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c145c9c1f812c017d52bf89f8071d60df8f1fc5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c6:25:d8:06:e0:62:86:ef:f2:af:69:e1:f1:
5b:54:85:73:34:48:1b:7d:4e:bd:71:f6:11:7e:66:
13:46:3d:76:48:54:c2:7d:10:28:3f:3a:e9:7b:d1:
26:40:ab:71:78:b7:bb:ea:5b:94:2a:b0:49:bd:3b:
45:30:0e:16:6e:47:c1:26:6a:52:2f:20:d3:56:81:
42:d4:45:7a:2d:40:dc:19:c0:02:5d:13:ae:0a:8b:
f1:2a:73:0d:41:6c:7a:d1:23:9f:83:5f:cd:df:70:
0d:26:ee:86:63:cd:c6:c7:87:ee:15:50:e1:14:6c:
67:38:8e:41:bf:32:ea:68:89:87:08:80:86:56:4b:
28:e5:86:aa:67:38:e4:46:fe:a1:d4:cd:2b:00:d2:
50:4c:e9:a6:ad:3c:30:7a:77:77:59:48:95:c9:8a:
e4:d5:84:78:1e:2a:76:3d:73:b3:64:88:33:e9:98:
dd:04:b5:e3:5f:f0:8b:a5:80:44:2f:30:05:16:bf:
d5:b9:72:7b:6f:fd:2f:b1:d4:ae:25:89:a4:f3:90:
e4:f9:3a:89:4a:87:70:1b:7c:ab:90:24:d8:5c:54:
3a:33:29:ff:3b:ce:27:9f:9e:b9:4a:96:31:89:85:
d3:02:eb:91:87:dc:04:45:c0:0d:60:5b:b1:74:ab:
42:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:45:C9:C1:F8:12:C0:17:D5:2B:F8:9F:80:71:D6:0D:F8:F1:FC:5C
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/wUXJwfgSwBfVK_ifgHHWDfjx_Fw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.22.0/23
Signature Algorithm: sha256WithRSAEncryption
23:07:53:e5:b2:31:4b:16:99:91:3d:f2:1d:93:be:cc:d6:82:
ef:09:b2:f1:0d:50:b8:0d:cd:83:08:ff:e3:af:4c:cf:68:10:
8e:20:0b:96:94:a2:4b:80:64:4d:7d:54:58:89:24:58:55:13:
8c:84:15:65:d1:bc:d1:03:af:a7:ab:79:cc:c5:15:2b:0e:0f:
27:c2:5c:1c:f5:e1:b7:0c:77:3d:32:7e:8a:79:29:33:f7:52:
c2:08:7c:35:33:e2:0f:e8:b3:83:07:de:4a:40:73:2e:e1:db:
bb:a2:00:bc:88:da:1c:60:c2:d4:09:da:1d:b4:f8:21:ae:04:
d1:ab:80:98:ba:02:27:a1:29:8e:40:87:08:58:ea:7c:97:5e:
f3:cd:be:db:16:e3:98:72:7c:3b:26:f2:f8:76:22:ab:64:2a:
9a:57:c2:f6:e2:d6:f6:59:cc:7f:48:59:ba:d2:b8:12:03:86:
1d:a4:27:61:14:22:7f:88:7b:ec:91:ec:1f:87:e5:e9:8e:a1:
c7:91:d8:fa:2e:e8:26:84:10:2d:b1:dd:41:34:52:3f:b1:27:
a2:73:48:ba:e0:d4:c0:5b:a4:25:7e:6b:d8:52:d7:4a:dd:d7:
7f:f7:30:fa:f4:22:fe:0b:23:a8:5d:30:25:dd:d6:be:d2:52:
1e:64:18:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:38 2024 by rpki-client on console-ams.rpki-client.org