Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/pEeF35H1UfVFCJWWpqbW_mwV4lE.roa
File: pEeF35H1UfVFCJWWpqbW_mwV4lE.roa (raw, json)
Hash identifier: J8JEPJGAn/zXXQtpiYvrud94Hvs8GwCy+ndNZaTXNf0=
Subject key identifier: A4:47:85:DF:91:F5:51:F5:45:08:95:96:A6:A6:D6:FE:6C:15:E2:51
Certificate issuer: /CN=133deed883c2a690ce54829b48f9d78cd7b25fd7
Certificate serial: 018570FBB77FBCCC9C14D02BBCF0A4A1F8BD
Authority key identifier: 13:3D:EE:D8:83:C2:A6:90:CE:54:82:9B:48:F9:D7:8C:D7:B2:5F:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/pEeF35H1UfVFCJWWpqbW_mwV4lE.roa
Signing time: Mon 02 Jan 2023 05:37:02 +0000
ROA not before: Mon 02 Jan 2023 05:37:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42487
IP address blocks: 89.28.144.0/21 maxlen: 21
2a01:58c0::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:31:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:b7:7f:bc:cc:9c:14:d0:2b:bc:f0:a4:a1:f8:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133deed883c2a690ce54829b48f9d78cd7b25fd7
Validity
Not Before: Jan 2 05:37:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a44785df91f551f545089596a6a6d6fe6c15e251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d8:2c:61:a3:7a:f8:b0:da:92:d0:50:83:8a:
fc:73:77:5f:9d:cd:19:c9:92:5c:4c:34:8a:d4:50:
5e:37:c6:ac:d3:06:71:e2:21:26:67:ac:af:15:93:
72:2c:bb:c0:67:2a:f1:1a:a3:a7:3e:22:52:8f:2b:
79:ee:8b:9c:7c:cf:78:b4:ae:3b:64:89:7e:e7:9c:
02:c6:87:78:ce:4c:ef:e0:7f:41:e0:91:b2:9f:9d:
c5:2f:bc:e9:43:28:62:14:5b:17:9a:70:ca:28:9f:
3a:76:b5:91:b6:c7:2c:65:65:05:6d:20:8e:f9:e8:
82:79:ef:c2:4c:7a:17:2e:39:a9:28:fa:a8:17:a8:
47:37:dd:64:a3:e2:eb:75:1f:97:bb:33:f0:53:2e:
71:4f:e3:18:6a:56:f3:79:11:76:8a:7f:6a:4a:bd:
da:0a:e2:bf:83:f2:39:ec:c4:f8:c7:8e:32:24:6d:
7e:ce:b5:a1:e9:64:76:45:46:5a:a6:31:e0:74:ea:
4c:fb:f9:38:23:19:b1:f8:c1:87:c8:b6:57:27:fb:
6f:8d:f2:e6:be:7d:9c:9a:6a:1b:c9:e8:f6:6c:62:
ef:60:f2:5e:c4:99:83:2c:30:cc:c5:ef:75:6e:16:
76:b6:97:3a:d5:31:47:42:d6:9b:5b:45:9a:ea:fa:
6f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:47:85:DF:91:F5:51:F5:45:08:95:96:A6:A6:D6:FE:6C:15:E2:51
X509v3 Authority Key Identifier:
keyid:13:3D:EE:D8:83:C2:A6:90:CE:54:82:9B:48:F9:D7:8C:D7:B2:5F:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/pEeF35H1UfVFCJWWpqbW_mwV4lE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.28.144.0/21
IPv6:
2a01:58c0::/32
Signature Algorithm: sha256WithRSAEncryption
0b:7c:4e:68:22:b6:4a:11:fd:ab:f8:ed:dd:f1:3e:69:bd:b7:
91:ae:b4:54:c6:70:48:56:94:bf:c1:d4:6c:69:59:c8:89:c8:
c3:ca:6a:c4:75:38:cd:fa:49:63:51:f6:10:2c:56:dd:b1:0e:
05:a5:99:71:94:55:17:91:da:7e:ce:59:64:62:09:ba:7e:25:
13:bf:33:14:d8:02:3c:38:cf:d6:b1:fb:bf:be:ea:78:2c:00:
f6:75:5e:59:7a:25:ff:9a:80:2d:17:51:00:03:e7:bd:e8:fb:
2c:7b:e1:ac:ca:64:af:6d:86:20:18:f5:28:31:ce:99:13:e1:
9b:d9:ab:a2:94:c4:48:9a:ea:82:c8:ec:a5:a3:6a:c3:f3:cb:
e1:3e:d9:b1:56:89:8c:c0:2a:79:1e:fb:8b:8b:cb:08:85:a9:
9d:25:fa:4b:2d:1c:5d:90:93:93:25:25:02:9f:3a:83:00:29:
35:1e:d5:5d:29:25:5c:28:79:ab:25:6f:38:93:64:17:85:55:
ad:2d:3f:7f:c0:c4:d6:14:86:c6:6c:1d:ff:80:95:5d:45:96:
02:c3:28:0f:08:c0:45:e2:00:fb:6a:3c:74:31:d7:af:06:47:
64:f9:06:05:16:bb:7b:2b:38:07:6c:25:9c:18:e2:f1:50:04:
f5:d6:05:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:01 2024 by rpki-client on console-fra.rpki-client.org