Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/tMHOf2xLEh3eVcSr0oKgjFB05X0.roa
File: tMHOf2xLEh3eVcSr0oKgjFB05X0.roa (raw, json)
Hash identifier: QhdTmlmcda5dUKm0gGffmvZ3rIjbVMdjjX8BH9tA110=
Subject key identifier: B4:C1:CE:7F:6C:4B:12:1D:DE:55:C4:AB:D2:82:A0:8C:50:74:E5:7D
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 01857002906AE1CCBD26C6CDA88D907881CB
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/tMHOf2xLEh3eVcSr0oKgjFB05X0.roa
Signing time: Mon 02 Jan 2023 01:04:54 +0000
ROA not before: Mon 02 Jan 2023 01:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62853
IP address blocks: 89.46.8.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:90:6a:e1:cc:bd:26:c6:cd:a8:8d:90:78:81:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Jan 2 01:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4c1ce7f6c4b121dde55c4abd282a08c5074e57d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f7:4b:32:02:c4:0b:ed:00:db:7c:e6:12:69:
69:b2:ab:2f:4c:73:94:b3:a2:a7:90:12:4b:83:4a:
ba:10:c5:57:c8:b9:4a:8c:9e:61:4f:79:1a:b2:42:
7d:21:5e:2f:9a:50:81:f6:21:ed:e4:a7:01:e7:16:
37:e6:d5:a4:17:35:3b:8f:b6:12:c5:7b:66:1f:05:
7b:0a:c1:ad:ab:b7:4e:89:61:22:51:67:6a:b0:92:
f8:fa:7e:d6:f6:65:10:16:1b:a4:99:db:75:d8:4c:
b8:25:1c:b8:96:aa:2e:dd:c4:09:af:f3:15:1d:5c:
28:dd:c5:d4:34:37:1b:81:5c:48:b2:22:ff:a8:ea:
29:04:5a:21:64:21:71:dc:3e:c1:64:fc:48:f1:ef:
22:a0:03:ad:57:69:f7:d1:bd:67:ea:53:d1:2a:52:
25:bb:c9:ab:75:2a:8d:bd:fb:ef:68:78:8d:3d:90:
fc:5b:64:45:29:1c:ff:3b:76:1d:a6:62:90:fa:de:
80:7e:80:c2:ca:8f:da:d7:20:cb:ca:bd:8a:1f:a1:
47:3c:2f:8d:47:c1:4a:bd:92:85:c7:5f:5f:6b:e6:
c9:d0:39:12:47:66:86:31:54:ff:a3:36:70:cd:4b:
bd:55:22:68:c1:82:1c:24:4d:55:4d:f5:74:57:96:
65:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C1:CE:7F:6C:4B:12:1D:DE:55:C4:AB:D2:82:A0:8C:50:74:E5:7D
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/tMHOf2xLEh3eVcSr0oKgjFB05X0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.8.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:3b:cd:00:65:5c:ca:f2:9f:88:33:1b:44:b9:f9:f6:5d:ac:
b1:3a:5e:c6:e2:21:b0:47:ea:c2:18:31:7c:70:e2:6c:50:5f:
09:fa:26:f2:fa:a5:6d:f2:77:a8:d8:3b:7c:d7:74:dc:ba:05:
28:70:a2:f7:6e:67:73:c7:f9:00:aa:66:4a:f7:d2:7e:71:2b:
d0:83:01:e1:29:b1:02:84:87:ce:31:43:21:ad:9c:1a:55:67:
72:0e:04:f1:15:72:d3:c8:78:f5:13:1b:20:0b:e7:b7:18:e8:
13:55:64:a0:76:e6:a6:0d:1e:c9:c6:b9:3f:4d:ba:ae:4a:4b:
b7:fa:4b:75:55:b4:60:7a:13:83:c8:8c:fd:74:63:e6:c8:66:
7d:28:b9:83:97:fc:c4:40:35:02:8b:dd:1c:9b:a8:e3:37:44:
13:06:2e:19:01:36:09:fd:a1:fa:88:89:2d:81:7a:f4:1c:53:
da:8e:57:95:63:90:83:c5:c9:85:f5:49:4e:03:2b:75:95:23:
2e:d3:eb:ee:ec:39:82:d1:5b:00:06:86:f4:a3:52:60:3f:ae:
88:15:22:7a:d8:47:81:9f:1a:ab:ae:7e:23:65:6d:c0:52:68:
33:7f:0d:3d:6a:64:b1:75:b0:a2:f0:88:d7:cc:38:6c:27:7e:
a0:1f:f3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:19 2023 by rpki-client on console-fra.rpki-client.org