Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/c9n9tbWurXvfNjrBr-Rirer9EiI.roa
File: c9n9tbWurXvfNjrBr-Rirer9EiI.roa (raw, json)
Hash identifier: 1Ly9Tx4wsVuPfL1OEm6a/lnr2W826YuAfdRt0ZbxvdU=
Subject key identifier: 73:D9:FD:B5:B5:AE:AD:7B:DF:36:3A:C1:AF:E4:62:AD:EA:FD:12:22
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 018571F0F8B588CA08EBB4339112BA25A68A
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/c9n9tbWurXvfNjrBr-Rirer9EiI.roa
Signing time: Mon 02 Jan 2023 10:04:55 +0000
ROA not before: Mon 02 Jan 2023 10:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59505
IP address blocks: 89.40.80.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:f0:f8:b5:88:ca:08:eb:b4:33:91:12:ba:25:a6:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 10:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73d9fdb5b5aead7bdf363ac1afe462adeafd1222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:10:63:7e:12:d0:32:e3:99:4e:fd:55:50:0c:
26:d3:4a:5e:d7:ba:ca:dd:4d:ed:b4:3a:29:f8:3d:
38:f2:f9:76:11:4f:83:3b:18:9e:3f:17:59:eb:71:
b5:7a:2d:5c:3e:52:69:28:2c:82:85:00:45:3e:0e:
46:b2:7b:50:7e:7a:9c:2a:41:74:14:8c:d8:16:c9:
a4:a2:7b:37:f1:5a:83:da:51:ac:c7:39:37:18:78:
a4:7a:86:ca:8d:55:0b:be:e0:8f:00:52:87:9f:ab:
de:23:17:1d:c3:ff:7d:2e:6e:31:5b:34:45:13:3a:
d5:9b:3e:be:1f:f4:c8:e9:d0:5a:70:c1:79:53:3d:
89:51:3e:71:2e:83:d6:11:90:38:3e:91:be:b2:a3:
4b:dd:7b:2d:fd:38:df:b6:5f:42:ae:32:4e:88:ae:
e6:da:87:9d:ac:43:db:ea:7e:0c:f7:3c:39:d5:6f:
e6:0c:08:18:4c:40:4e:c1:24:04:cf:39:99:5a:be:
0b:89:b3:35:de:3f:93:37:85:e7:c0:88:f4:d8:16:
e0:67:1d:dd:c6:4b:de:a1:56:8d:a2:e4:b2:18:16:
64:a9:e3:f3:5e:73:bd:9e:e8:af:9b:41:99:a0:44:
71:b4:71:29:6d:72:28:a1:5d:fb:40:24:77:c7:3c:
e8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D9:FD:B5:B5:AE:AD:7B:DF:36:3A:C1:AF:E4:62:AD:EA:FD:12:22
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/c9n9tbWurXvfNjrBr-Rirer9EiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.80.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:6d:cb:37:e6:2a:7a:7e:10:73:e7:0a:61:83:c0:c7:24:e4:
16:91:eb:a4:41:77:41:01:1e:46:0c:ca:7a:15:28:2a:f8:94:
b2:9d:7e:27:45:02:bc:22:90:66:67:6b:98:4e:af:10:fb:04:
c3:78:b6:1c:2a:0b:0c:fc:e6:ed:81:c9:69:b7:56:fe:92:e4:
36:80:59:6d:a1:f5:35:c4:03:42:fa:1e:9c:b7:e2:da:20:36:
58:fa:8c:3b:e6:e3:e9:e9:c3:2a:67:c3:79:76:4b:a7:b1:72:
fb:88:e2:45:8e:97:99:2f:ba:66:88:14:fd:a0:52:e2:e3:b2:
37:14:1e:89:2a:e1:9e:de:b5:67:47:9e:40:f7:a7:70:68:16:
a0:6b:dc:52:a5:ee:a2:c7:ae:33:91:32:af:92:31:df:c7:84:
4a:cc:fc:cb:32:90:75:1f:fc:65:c5:ee:bb:bb:f7:63:2c:55:
33:be:e3:e7:c9:83:5d:77:15:f1:c1:0b:49:9c:b8:fd:64:a0:
82:10:00:f5:d0:54:c8:c7:ed:28:a1:c9:1a:88:56:40:1e:d7:
79:64:25:c7:21:44:a6:f1:67:3d:df:16:90:18:f8:58:4c:51:
f5:5a:95:e0:e5:3e:a9:01:67:78:92:73:9c:54:3b:99:e9:f3:
79:18:47:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 31 11:25:36 2023 by rpki-client on console-ams.rpki-client.org