Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/rJFyDbK6CjrEhc4i8mP7VqXo7Mk.roa
File: rJFyDbK6CjrEhc4i8mP7VqXo7Mk.roa (raw, json)
Hash identifier: dusqNMn3Unf7x8rSiJZVV/ckoILMCcwfsScd4lgf6RQ=
Subject key identifier: AC:91:72:0D:B2:BA:0A:3A:C4:85:CE:22:F2:63:FB:56:A5:E8:EC:C9
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 018F5964EA79F9431C1C7A8B55E4BF22C223
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/rJFyDbK6CjrEhc4i8mP7VqXo7Mk.roa
Signing time: Wed 08 May 2024 18:08:56 +0000
ROA not before: Wed 08 May 2024 18:08:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 89.249.201.0/24 maxlen: 24
89.249.204.0/24 maxlen: 24
89.249.206.0/23 maxlen: 24
212.42.208.0/20 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 May 2024 11:24:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:59:64:ea:79:f9:43:1c:1c:7a:8b:55:e4:bf:22:c2:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: May 8 18:08:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac91720db2ba0a3ac485ce22f263fb56a5e8ecc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:10:9e:a1:bc:99:68:9d:08:4e:c3:b3:9f:e0:
40:92:cd:d8:77:ea:2f:0a:e8:a3:6b:f3:69:ea:a0:
a9:77:25:6b:6a:0c:44:72:f0:8c:96:a4:c4:ff:63:
87:b6:1b:2d:56:30:07:ac:e6:71:e3:7b:4e:64:03:
34:38:44:99:c1:e8:1a:e1:e5:eb:48:c4:3a:37:34:
1a:cc:ab:f5:ba:c9:06:46:47:5c:7c:6c:87:70:33:
52:e8:25:67:9d:9c:eb:4f:6f:bc:88:dd:1d:0f:9d:
e1:ed:50:62:f8:22:40:56:28:bd:da:fb:c4:81:59:
a7:da:4b:e8:51:54:5d:05:ed:da:c9:4b:7c:dc:4f:
73:38:1d:85:a3:bb:76:04:0c:7f:7f:61:95:57:ae:
1a:25:76:5c:6c:af:d5:12:84:48:42:20:99:13:c6:
cc:bf:fc:f6:f2:41:12:2a:65:f2:f1:08:56:81:72:
1e:ff:cb:34:d9:9f:1a:d0:b7:0f:7e:c1:b3:77:bd:
93:19:b7:32:e4:de:53:c9:81:6e:d8:e1:ee:b5:66:
9d:60:ef:37:57:04:e0:eb:88:04:1f:02:16:f2:38:
a2:f2:22:33:6a:64:a7:03:3d:3c:4a:4f:dc:c7:2a:
fe:c3:a8:f6:0f:ed:cc:2c:54:f6:f5:8e:ee:8e:d9:
1d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:91:72:0D:B2:BA:0A:3A:C4:85:CE:22:F2:63:FB:56:A5:E8:EC:C9
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/rJFyDbK6CjrEhc4i8mP7VqXo7Mk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.201.0/24
89.249.204.0/24
89.249.206.0/23
212.42.208.0/20
Signature Algorithm: sha256WithRSAEncryption
bf:d3:ad:4b:0d:92:08:6f:98:67:8e:e4:bd:e6:ff:52:59:f4:
c3:0e:fa:00:9e:a9:bf:d7:52:e6:fb:fd:82:25:d2:05:83:b6:
4b:54:61:fb:52:ec:af:d6:3e:04:7b:4b:f2:b8:a7:e1:ef:eb:
f2:84:0b:52:cf:5c:0b:0e:c4:fa:7e:46:42:b7:d4:a2:cf:4d:
65:44:8c:c9:62:c3:50:4d:bb:bc:e8:74:c2:2a:28:54:e9:16:
58:69:99:6b:ab:c6:ab:0b:28:29:1e:76:d5:32:64:40:06:38:
3f:ed:31:c5:2a:8e:7f:13:5f:ed:6a:f9:4d:40:4c:1d:a6:61:
8b:bc:e9:80:17:f3:cd:d1:7a:40:a8:81:a2:83:04:6d:4a:a0:
85:a2:17:d4:8f:bd:71:ff:b4:55:3e:f1:7e:bf:7c:ac:75:11:
e5:89:e0:dd:81:64:51:04:78:0b:1b:1a:4b:06:53:46:59:8c:
fd:2d:fc:1b:db:99:b5:f0:94:c0:54:1f:58:f3:c7:b5:bf:10:
13:a9:61:78:78:cb:95:dc:8b:e7:db:4b:4e:e1:e9:ce:c5:ad:
c9:9c:a8:58:b8:8e:cf:b0:60:f7:5f:ac:e3:15:54:58:ff:2f:
d9:e2:42:31:d3:8b:d7:d4:1d:a6:58:28:cb:44:e2:79:15:bd:
52:53:f5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:15 2024 by rpki-client on console-ams.rpki-client.org