Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/DqtJMdynUKw-s-pJ9KBeMjHpO14.roa
File: DqtJMdynUKw-s-pJ9KBeMjHpO14.roa (raw, json)
Hash identifier: 2CkTbBS2arjQSVxrkiWBaMfDi8Wv9YTxL+1zqmM69Bk=
Subject key identifier: 0E:AB:49:31:DC:A7:50:AC:3E:B3:EA:49:F4:A0:5E:32:31:E9:3B:5E
Certificate issuer: /CN=f82554a856a422b061ae64c577630f91d408cd4a
Certificate serial: 018571F9EDDA3A2C8A3F53A77F39783B0421
Authority key identifier: F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/DqtJMdynUKw-s-pJ9KBeMjHpO14.roa
Signing time: Mon 02 Jan 2023 10:14:42 +0000
ROA not before: Mon 02 Jan 2023 10:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39421
IP address blocks: 89.234.190.0/24 maxlen: 24
2a00:5880:1800::/44 maxlen: 44
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:f9:ed:da:3a:2c:8a:3f:53:a7:7f:39:78:3b:04:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f82554a856a422b061ae64c577630f91d408cd4a
Validity
Not Before: Jan 2 10:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0eab4931dca750ac3eb3ea49f4a05e3231e93b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:75:79:f7:76:6d:ad:c7:91:e3:29:e3:23:7f:
15:dc:62:94:71:8b:e2:f5:db:59:57:94:bd:33:99:
9f:97:f6:66:d8:39:43:c5:75:b4:7c:d8:ae:28:04:
af:e7:4b:a2:76:e8:41:26:6d:a5:8e:84:df:65:bf:
4a:b6:6e:9e:49:ea:9f:5f:26:5c:49:4c:9c:4c:48:
0f:6b:9c:15:1f:48:5a:9c:17:cf:5e:1c:44:f8:51:
09:19:cb:5f:b3:1c:55:73:ae:db:9f:3e:de:e5:94:
69:38:78:86:f5:d9:97:16:c6:eb:aa:00:56:13:93:
12:36:21:4d:58:9a:f5:03:fd:34:4b:21:58:20:7f:
d6:9d:e6:8f:e0:63:ff:cb:8f:66:c1:69:88:72:0e:
07:0e:d7:87:b4:84:19:79:e6:d0:4c:0b:5e:96:4e:
36:6f:fa:f1:ae:f2:e6:0a:7d:ff:50:ae:81:dd:21:
69:f1:47:17:1c:e3:28:e0:7b:b3:7f:64:1c:bb:0e:
68:d0:87:27:e4:df:12:50:66:3c:f0:00:8b:e4:ef:
63:0d:8e:e8:58:dc:2e:50:ab:c1:e3:3f:14:b0:bd:
43:d1:00:a1:ba:64:dc:1a:08:f6:cb:32:9e:03:1d:
3f:7f:da:42:4b:c5:44:f4:45:09:d7:3d:85:fc:f2:
18:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:AB:49:31:DC:A7:50:AC:3E:B3:EA:49:F4:A0:5E:32:31:E9:3B:5E
X509v3 Authority Key Identifier:
keyid:F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/DqtJMdynUKw-s-pJ9KBeMjHpO14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.234.190.0/24
IPv6:
2a00:5880:1800::/44
Signature Algorithm: sha256WithRSAEncryption
95:75:a1:9c:08:de:5b:98:f3:24:87:55:f0:da:ff:45:98:c7:
bd:6b:5e:bf:85:14:80:a7:36:92:13:ce:00:63:45:05:f6:39:
80:d6:51:d0:c3:4c:3a:dd:53:d3:07:a4:76:d6:d8:61:92:40:
82:1b:40:d7:84:f8:0d:d0:66:4e:c7:4f:67:1b:52:90:40:f5:
a6:9e:b0:e1:5e:85:bb:4a:b9:85:1f:78:8d:be:e1:70:67:d4:
45:e9:ac:7d:26:b6:8c:d6:24:fc:3d:e1:e0:9c:dd:4c:32:3a:
82:fb:27:a4:b5:bb:14:29:47:c6:49:6b:3f:af:cf:f7:3c:4c:
8c:c6:7d:82:f5:89:ce:42:23:01:e3:07:e4:86:2b:09:47:16:
7e:c5:24:66:26:6a:aa:9b:41:e7:7e:7c:1a:09:a0:83:8c:31:
e9:15:07:ae:9a:1a:97:51:ed:b0:60:d7:3b:a5:fd:11:d0:b5:
ad:ce:04:e8:5c:01:ba:a5:b5:5f:88:92:fa:e7:1c:91:c3:f4:
4d:fd:7c:5c:6f:3e:79:96:56:2d:b1:36:73:7d:7e:05:f8:dc:
7b:66:6a:67:1e:ee:b0:c2:72:2f:5d:c2:52:e6:1b:af:24:fd:
f9:b1:13:24:05:71:14:9d:54:f2:3f:63:cb:75:d4:8d:cc:f6:
6e:66:d8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:51:43 2024 by rpki-client on console-fra.rpki-client.org