Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/sXboPVJ_0vsz_dYbTFTzZXTE328.roa
File: sXboPVJ_0vsz_dYbTFTzZXTE328.roa (raw, json)
Hash identifier: L082oqVcndUkwKToOWNLgqVf19SqvO/xsVXwxmU4yfE=
Subject key identifier: B1:76:E8:3D:52:7F:D2:FB:33:FD:D6:1B:4C:54:F3:65:74:C4:DF:6F
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 018CCFB581D827E71F3C7431FD690F7B5F49
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/sXboPVJ_0vsz_dYbTFTzZXTE328.roa
Signing time: Wed 03 Jan 2024 14:23:48 +0000
ROA not before: Wed 03 Jan 2024 14:23:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 89.46.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jan 2024 13:58:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:cf:b5:81:d8:27:e7:1f:3c:74:31:fd:69:0f:7b:5f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Jan 3 14:23:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b176e83d527fd2fb33fdd61b4c54f36574c4df6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:73:6e:ac:6a:ec:0a:30:0c:fd:7b:89:50:b6:
e2:53:ba:a1:7a:30:38:c8:25:7c:01:22:31:06:fb:
95:a6:2a:f8:3d:db:63:a9:82:02:53:28:f1:a0:d3:
e3:cf:71:41:c6:ee:c2:8d:f6:30:89:69:a0:c0:48:
60:2a:11:c5:c6:a8:b8:7c:b5:ec:42:18:88:9b:6e:
b2:92:34:72:6d:c4:99:ef:9f:3d:ff:00:e0:e4:1a:
e8:9e:d0:6b:6a:bd:c0:0d:de:45:71:1d:e7:1a:72:
3f:a1:53:5e:5f:84:bd:b1:ec:a9:cd:87:c3:7c:c3:
89:a8:5c:0b:bb:68:37:7f:99:61:1f:da:cc:4b:f3:
ba:7a:94:19:1b:42:bd:04:31:a7:b5:69:69:d2:3a:
2f:69:d2:0a:5a:96:cb:74:1a:42:f9:75:44:2a:d4:
d5:59:33:56:f0:dc:f2:f5:b4:e5:ef:15:52:99:10:
39:24:ad:4b:9e:f1:b7:90:a2:4e:34:c1:02:bb:8b:
47:e7:3d:4d:3f:06:ee:24:2b:20:9f:d3:7b:f3:52:
3a:f3:4c:c8:c1:c6:41:71:bb:e6:82:2b:f4:76:22:
1b:41:d4:c2:4a:58:05:df:dd:82:56:5b:c8:bb:28:
75:59:ce:52:f2:fd:c9:69:b5:4f:47:f9:f5:8e:f5:
ce:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:76:E8:3D:52:7F:D2:FB:33:FD:D6:1B:4C:54:F3:65:74:C4:DF:6F
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/sXboPVJ_0vsz_dYbTFTzZXTE328.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.10.0/24
Signature Algorithm: sha256WithRSAEncryption
75:56:f2:da:9f:89:01:04:ec:72:c3:55:3a:ef:b7:0e:d4:58:
8c:1a:1c:35:6a:d2:af:a1:9c:af:4d:f8:99:9e:89:57:ad:e5:
9d:6c:7d:47:9c:76:94:22:18:07:2a:2b:99:37:f4:40:5e:e8:
28:f9:fb:bf:13:f3:20:02:83:17:d0:23:74:0a:fc:47:ab:ec:
83:0b:f2:82:d5:88:48:d2:43:7b:2c:42:34:a5:29:31:59:39:
9b:8b:0c:99:08:6d:9d:ac:96:fa:b9:77:eb:ba:6b:a7:cd:ec:
17:32:a1:9e:a7:b9:16:53:d7:7c:79:29:4f:20:71:5c:c4:a4:
48:84:5b:72:ee:cc:2b:10:cc:1d:72:60:b7:3d:79:1b:b8:67:
8e:16:ed:f1:5e:31:9c:f5:66:dd:2e:12:b6:f3:ca:46:60:e4:
f8:d0:47:cc:65:1b:dd:d7:06:4d:de:cf:1a:2b:77:00:66:c6:
ce:ca:4d:be:9b:0c:60:d6:6b:f0:57:73:49:11:b2:c5:57:fd:
a6:20:8d:47:bb:9d:ce:ad:8f:3b:48:70:d9:5c:ec:af:43:64:
f1:b3:a9:86:c6:b2:9b:5e:62:2a:c2:cf:d4:48:03:a8:15:75:
ce:3c:4f:25:ac:6c:d7:39:6e:bc:4b:a1:e6:7d:90:84:d5:69:
2b:52:33:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:55 2024 by rpki-client on console-fra.rpki-client.org