Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/n-qfwtA-F_Y9AZ9MPS2ymhBUa70.roa
File: n-qfwtA-F_Y9AZ9MPS2ymhBUa70.roa (raw, json)
Hash identifier: +eYgS61Ai84aP/jE35Mg8d2Z3YUfkHlbH3eeDTrkw5o=
Subject key identifier: 9F:EA:9F:C2:D0:3E:17:F6:3D:01:9F:4C:3D:2D:B2:9A:10:54:6B:BD
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 01884521862CB22019FF6B1570B2314166DD
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/n-qfwtA-F_Y9AZ9MPS2ymhBUa70.roa
Signing time: Mon 22 May 2023 20:23:24 +0000
ROA not before: Mon 22 May 2023 20:23:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48359
IP address blocks: 2.189.175.0/24 maxlen: 24
2.189.88.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:45:21:86:2c:b2:20:19:ff:6b:15:70:b2:31:41:66:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: May 22 20:23:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9fea9fc2d03e17f63d019f4c3d2db29a10546bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:dd:f5:f8:74:8a:f3:06:8b:fd:18:f9:32:04:
78:7d:fa:f5:7e:49:97:80:cf:d2:d2:4c:f7:d3:40:
c7:eb:dc:2d:c1:18:62:ad:0c:f7:ad:5f:e0:0b:30:
23:91:6f:c2:4d:c1:e4:6d:f6:6e:fd:c8:82:40:03:
c2:c6:36:de:36:82:28:11:c4:bd:81:b8:d9:f8:f6:
d9:d6:05:05:3f:f6:65:34:b7:e4:44:ff:7f:b3:c2:
e4:47:1d:6a:32:78:61:af:da:a8:e6:84:2d:1a:bb:
fa:08:ff:50:bd:63:f6:1d:bd:13:0f:56:9c:af:75:
27:5b:04:c0:70:96:bb:ab:c1:87:36:96:4a:1f:15:
40:3f:5b:8e:c7:83:fb:c7:da:17:2d:57:48:dc:06:
cb:7a:2e:f0:f2:cd:6b:24:bd:62:fe:4c:b5:7b:ec:
94:1d:04:6e:74:84:7b:00:1d:87:31:73:96:3b:0f:
70:c3:90:2c:db:c5:96:36:5e:e1:70:c3:cc:41:24:
11:c7:be:bb:14:d6:54:ca:2e:8d:13:72:02:f0:65:
0e:a7:b5:7e:86:40:11:a5:f2:1c:5e:31:f7:e4:ae:
64:80:53:e1:06:86:f6:03:c1:d1:7f:a1:b6:5a:2b:
95:bd:c7:08:17:20:de:61:91:de:8d:a2:4f:6a:c8:
ac:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:EA:9F:C2:D0:3E:17:F6:3D:01:9F:4C:3D:2D:B2:9A:10:54:6B:BD
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/n-qfwtA-F_Y9AZ9MPS2ymhBUa70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.189.88.0/22
2.189.175.0/24
Signature Algorithm: sha256WithRSAEncryption
34:0f:6b:58:8e:4e:b7:c8:87:9d:f1:4f:07:e1:bc:77:68:62:
07:dd:9e:a0:bf:3c:29:03:6d:df:87:51:92:11:bd:68:d1:85:
e4:39:5e:a9:bc:89:73:9f:98:76:ec:bd:37:84:3f:71:76:ba:
77:ee:3c:5b:87:aa:6f:bf:35:af:4b:71:e9:6a:fd:74:bf:01:
37:12:dc:0a:55:a0:2b:17:bf:54:6a:0f:fc:99:4e:51:84:07:
15:99:c8:69:48:19:26:e2:54:d7:30:e5:48:17:77:d2:b7:27:
c2:6e:48:de:28:9c:e9:a8:e8:d7:d7:64:7d:04:b6:f8:47:fc:
de:e9:8e:f9:fd:37:84:90:50:dd:88:78:fa:8b:46:df:ec:79:
29:d0:24:e6:c0:ad:06:71:4e:3b:ff:4e:5e:3b:82:28:42:1d:
02:10:3c:77:97:ae:ab:c2:12:d4:5b:64:da:87:7e:ce:55:91:
95:8b:7c:bb:f3:ee:51:3e:58:55:b3:e2:25:1b:24:b5:42:83:
1a:95:57:6d:b2:6d:34:2e:fa:12:ee:50:51:65:78:cb:b4:eb:
fc:57:9c:27:21:9c:5f:bd:02:84:43:f9:82:79:86:67:6c:b2:
40:3a:ae:f0:b4:98:17:22:97:f9:ae:e7:54:fc:de:31:c4:23:
90:5c:54:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:53 2024 by rpki-client on console-ams.rpki-client.org