Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/HC9M_NGpIt8XlG2Oggkb4-kwzl4.roa
File: HC9M_NGpIt8XlG2Oggkb4-kwzl4.roa (raw, json)
Hash identifier: N3/q5CUfIvdPdRHTPx18H7TcZR3w26bMRKEoHjPRpv8=
Subject key identifier: 1C:2F:4C:FC:D1:A9:22:DF:17:94:6D:8E:82:09:1B:E3:E9:30:CE:5E
Certificate issuer: /CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d
Certificate serial: 018F71FAB108276F5FE6B112618BCAE9E3CF
Authority key identifier: 2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/HC9M_NGpIt8XlG2Oggkb4-kwzl4.roa
Signing time: Mon 13 May 2024 12:43:25 +0000
ROA not before: Mon 13 May 2024 12:43:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 89.19.220.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 16 May 2024 12:27:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:71:fa:b1:08:27:6f:5f:e6:b1:12:61:8b:ca:e9:e3:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d
Validity
Not Before: May 13 12:43:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c2f4cfcd1a922df17946d8e82091be3e930ce5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1c:1d:cd:b8:59:98:55:70:d7:3b:b5:df:fb:
dc:12:c1:5e:32:53:14:df:af:69:3a:8e:a6:80:65:
4c:c1:12:2b:4d:1c:d7:a0:a2:ca:bb:1c:ef:62:b8:
90:b3:ec:63:df:92:57:1a:a7:01:f8:ba:93:14:01:
ea:5b:f3:94:57:2d:67:dd:f3:69:78:4f:3a:15:14:
dd:75:b1:b1:fa:d1:fa:26:3a:d7:db:67:22:f5:72:
13:a7:7a:87:52:61:68:b7:87:65:b8:e1:e0:af:49:
5a:4c:f8:c3:11:34:e0:c2:39:ab:b5:a4:58:6d:5f:
38:d9:e3:90:46:32:7c:e1:88:68:15:b0:3f:39:95:
dd:bf:e4:e6:00:c1:46:fb:c0:ba:b3:4a:35:7c:62:
5a:a9:f7:87:9b:71:2a:8b:7e:d7:36:58:12:12:6b:
2a:08:9f:d5:41:d9:18:51:c3:81:dc:15:1a:5c:3f:
04:6f:8e:dd:26:99:0f:ce:fe:48:e1:dc:f0:e0:0a:
b7:24:31:dd:1c:00:0f:ac:b4:6e:09:82:c3:a5:1b:
4a:fe:6a:af:7e:66:9b:55:a8:55:1d:92:72:b3:df:
2a:11:7a:97:77:fa:13:81:80:b6:85:74:2f:6b:b9:
1d:37:0e:36:21:0c:3e:5b:8e:33:af:88:59:29:75:
3b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:2F:4C:FC:D1:A9:22:DF:17:94:6D:8E:82:09:1B:E3:E9:30:CE:5E
X509v3 Authority Key Identifier:
keyid:2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/HC9M_NGpIt8XlG2Oggkb4-kwzl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.19.220.0/22
Signature Algorithm: sha256WithRSAEncryption
71:d9:1c:e2:13:81:c5:85:8f:3f:c8:f9:2d:00:96:e6:de:97:
42:84:74:41:5e:e7:c1:c7:4e:c6:4b:4e:bb:c5:14:8f:c3:57:
89:b5:12:4b:6a:41:ec:de:bb:43:d5:32:06:03:65:a7:fd:65:
02:2f:ce:62:a5:92:cd:9d:32:f1:37:b4:ae:cb:e1:1c:8e:9a:
37:41:09:3f:fd:71:e8:9b:03:da:11:7e:d3:bf:5b:81:26:bd:
a1:86:7d:e8:37:85:e3:cc:05:3d:82:ad:36:78:85:62:f1:13:
de:2e:60:53:f0:8d:84:64:44:c4:98:87:47:3d:72:7d:3c:6a:
62:8c:29:a6:54:93:60:cb:89:52:de:f9:4f:af:ba:57:e1:0a:
70:3e:a9:c9:56:df:3b:23:0b:da:0b:0e:dc:15:b2:af:51:85:
2b:7e:91:a9:a3:b8:f4:3c:63:e8:94:39:62:02:a9:c7:fd:6c:
32:d2:81:42:3b:7f:c9:86:0a:83:70:8a:3f:00:03:e7:03:80:
2a:ce:c6:9a:c9:2e:e1:1e:e6:28:6b:d1:7a:c0:31:ec:5b:52:
21:cf:22:80:3e:02:e7:18:42:7c:8f:ef:69:c9:89:98:1e:61:
b8:c7:77:9d:3a:b8:4c:ad:a5:58:b7:5f:66:8f:50:e5:83:40:
7f:bd:26:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:47 2024 by rpki-client on console-fra.rpki-client.org