Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/bLJfywFLKSH4OIt-1TNCgBCkQ88.roa
File: bLJfywFLKSH4OIt-1TNCgBCkQ88.roa (raw, json)
Hash identifier: k7UqD2oHI/t7F89ExonvQB+sz0GRgjVTUzmgpNj6qJw=
Subject key identifier: 6C:B2:5F:CB:01:4B:29:21:F8:38:8B:7E:D5:33:42:80:10:A4:43:CF
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 0188DDF9D33DFEB13D77C4C8EA9B61E69048
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/bLJfywFLKSH4OIt-1TNCgBCkQ88.roa
Signing time: Wed 21 Jun 2023 12:41:57 +0000
ROA not before: Wed 21 Jun 2023 12:41:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 89.46.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Sep 2023 15:16:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:dd:f9:d3:3d:fe:b1:3d:77:c4:c8:ea:9b:61:e6:90:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Jun 21 12:41:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6cb25fcb014b2921f8388b7ed533428010a443cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4e:f2:75:ab:47:8a:87:16:56:b3:77:dd:25:
1f:01:43:da:64:6a:dd:a0:40:2f:57:4b:e6:02:fc:
6b:47:6f:78:13:d5:6a:bd:52:46:4b:29:b2:65:a5:
55:74:0d:92:81:7b:b1:a8:10:c7:56:c3:93:9d:ea:
b6:9b:dd:24:cc:6c:cd:11:d1:e4:b8:c3:8e:b8:3d:
4c:a3:31:95:f4:17:91:71:e6:fc:52:53:a4:3d:e2:
3b:c4:a9:de:49:cd:78:cc:79:5b:66:6b:d7:14:2d:
12:7b:f9:7e:78:18:97:39:b9:c9:43:53:07:43:a9:
d6:ca:fb:db:cc:c8:f2:c2:62:05:f1:74:83:2e:f5:
86:f1:03:b0:9c:ee:80:c0:11:be:e2:91:93:92:07:
b9:cc:86:42:ca:39:24:33:a2:ed:eb:22:b6:d9:9d:
64:33:9f:8f:de:9b:e6:ef:d4:5e:ba:a1:b0:5e:0f:
6a:c1:94:ae:69:6e:b9:ef:ac:ef:64:b2:34:e3:5c:
b8:f1:55:d0:6a:b3:3d:33:12:38:e1:ef:d1:ab:a9:
38:be:07:a7:c0:66:76:e3:a8:ba:63:dd:0b:a9:35:
1f:8a:ce:d1:f0:89:4a:e2:32:34:a7:d8:94:b8:34:
5e:40:b3:7b:ef:2e:4c:d4:3b:5a:6d:41:d8:3b:cb:
32:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B2:5F:CB:01:4B:29:21:F8:38:8B:7E:D5:33:42:80:10:A4:43:CF
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/bLJfywFLKSH4OIt-1TNCgBCkQ88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.10.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:b1:4b:ed:e0:54:e0:0c:d4:31:c4:4a:33:91:25:6b:13:16:
c8:8a:99:9b:e2:38:75:ea:21:98:65:a5:bb:56:e5:65:d2:8e:
2b:79:9e:07:20:4d:f3:e7:9d:01:9a:fb:12:eb:cf:50:61:d3:
6c:bb:ea:09:0e:dc:69:ba:49:23:0f:5a:0e:96:1b:16:6f:fa:
1e:4b:39:3d:b4:77:8f:bf:e2:d2:e4:7d:65:9b:f8:a8:2a:60:
48:35:e8:1c:05:a8:25:55:23:8b:ef:c5:24:ee:b8:98:90:4b:
46:bf:2a:18:bf:e6:5a:2f:ca:b6:a4:13:9a:34:e9:ea:78:f0:
b9:d1:5b:27:66:47:fc:5d:9e:d2:e3:fc:64:41:27:c8:df:e9:
3d:76:75:67:1c:31:9a:a4:af:5d:5c:a8:a5:3f:aa:b9:c5:90:
76:2b:7e:bf:e0:91:29:34:16:e6:59:35:ea:4b:bf:ab:2e:ef:
8f:b1:cb:90:4f:b6:ad:40:67:b1:1e:1d:ec:bc:47:a1:d2:be:
49:2a:63:87:a8:e2:ff:54:f2:16:0d:c3:95:6c:4c:b5:ea:d5:
9b:e8:fa:bb:b0:7f:46:28:b9:b5:b1:39:05:cc:df:35:34:72:
0c:9e:94:69:1d:15:2d:7c:77:b6:af:62:e8:7f:cc:df:e4:f3:
70:70:84:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:14 2024 by rpki-client on console-ams.rpki-client.org