Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/aXtQpuSSMw2q9XQ_iYe13XbIkmA.roa
File: aXtQpuSSMw2q9XQ_iYe13XbIkmA.roa (raw, json)
Hash identifier: SXX9YAabp3vMT2id32t6kjDtuppcuwerPbUJEUOcyK0=
Subject key identifier: 69:7B:50:A6:E4:92:33:0D:AA:F5:74:3F:89:87:B5:DD:76:C8:92:60
Certificate issuer: /CN=f82554a856a422b061ae64c577630f91d408cd4a
Certificate serial: 018571F9EF84A3A3327B8CF90471A9595ECE
Authority key identifier: F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/aXtQpuSSMw2q9XQ_iYe13XbIkmA.roa
Signing time: Mon 02 Jan 2023 10:14:43 +0000
ROA not before: Mon 02 Jan 2023 10:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197922
IP address blocks: 89.234.142.0/23 maxlen: 23
89.234.149.0/24 maxlen: 24
89.234.148.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:f9:ef:84:a3:a3:32:7b:8c:f9:04:71:a9:59:5e:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f82554a856a422b061ae64c577630f91d408cd4a
Validity
Not Before: Jan 2 10:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=697b50a6e492330daaf5743f8987b5dd76c89260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:de:87:a8:16:09:02:05:16:7f:8a:ed:cb:ab:
c5:80:eb:55:23:c0:31:c9:61:c0:f2:a9:ae:2b:80:
da:7d:6f:05:6e:21:0b:19:38:28:fd:f9:1b:95:7a:
98:3c:5c:4f:a9:5d:ef:77:a8:25:82:63:4f:ce:a3:
5f:f7:52:58:97:03:bc:d3:03:04:65:ae:0f:40:c0:
81:e7:58:51:1a:68:69:23:5a:49:8d:a9:9b:4d:82:
45:98:b7:af:1d:0c:e1:73:d2:cc:92:e3:3b:a9:3e:
e8:0d:45:f3:51:7b:dc:42:b3:88:77:2d:94:a8:87:
bf:57:63:a2:f8:21:44:97:57:69:72:81:9f:b9:b8:
ec:70:2a:da:9d:e2:32:e9:13:82:41:8a:37:45:48:
55:b2:c9:62:ff:54:6b:d5:13:74:38:0b:dc:e1:e4:
43:a8:d4:66:a7:e5:f0:e2:b9:2e:75:e6:77:32:fc:
fb:42:1b:36:ec:c7:12:4a:03:a7:6d:e5:1d:a9:97:
1a:e3:85:ac:27:62:e3:b0:f1:f8:93:c2:07:05:67:
4f:e8:20:89:1a:f3:26:fd:99:f2:4d:3c:da:2c:03:
f3:8f:0b:ed:af:ae:84:91:46:be:9a:99:e0:68:1f:
99:03:39:3e:66:c1:8a:31:fd:0e:aa:60:6d:66:74:
9a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:7B:50:A6:E4:92:33:0D:AA:F5:74:3F:89:87:B5:DD:76:C8:92:60
X509v3 Authority Key Identifier:
keyid:F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/aXtQpuSSMw2q9XQ_iYe13XbIkmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.234.142.0/23
89.234.148.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:47:09:a2:86:f4:6f:54:13:3f:7e:a9:cd:8b:0e:5b:49:ce:
3a:64:50:b9:f1:00:8c:d7:54:15:b7:ba:44:0e:1a:28:2e:99:
ff:9b:85:68:09:41:31:06:f8:eb:db:0c:41:7f:ea:65:26:3f:
34:41:f4:e1:1b:61:49:ff:bc:d3:66:dd:e7:bf:d6:5a:f0:5e:
92:70:0a:44:e0:2c:ae:78:da:79:39:72:d6:fd:a7:e0:c6:a7:
98:b1:68:d2:c9:0d:b0:9c:e0:0c:44:68:fe:4c:a6:7e:d8:b2:
14:85:9c:af:e2:07:59:46:98:3f:9f:2c:85:79:71:2d:55:c4:
0d:56:ae:81:1d:2c:19:a1:11:df:97:28:3b:1a:3d:80:42:aa:
7d:6b:ae:6f:46:f4:14:92:d6:71:31:04:75:70:c8:3a:d5:81:
93:6e:e1:67:5d:35:82:f2:5c:8d:34:90:83:bd:a7:83:0a:ee:
c7:5e:b1:4a:ee:30:07:ca:75:8e:c1:bf:98:26:bd:51:2a:2e:
ed:58:21:80:fb:81:8f:16:0c:b3:dd:00:f4:b1:74:fa:2d:55:
d4:e0:ae:a7:16:42:00:ba:f5:4b:95:7d:12:09:ed:6b:4b:de:
0d:08:e0:cf:93:7f:a0:d7:45:93:8e:80:cd:99:1f:1c:c1:20:
e3:cd:21:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:34:52 2024 by rpki-client on console-ams.rpki-client.org