Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/xX3D0FOUi47gKtXw877UqFPTFWw.roa
File: xX3D0FOUi47gKtXw877UqFPTFWw.roa (raw, json)
Hash identifier: vWGB7yjKUsxloNLJHZRbUoDe7T100OfIjCqpRT6DE78=
Subject key identifier: C5:7D:C3:D0:53:94:8B:8E:E0:2A:D5:F0:F3:BE:D4:A8:53:D3:15:6C
Certificate issuer: /CN=f82554a856a422b061ae64c577630f91d408cd4a
Certificate serial: 01857C77288A516C83E79D6141984E91FB2F
Authority key identifier: F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/xX3D0FOUi47gKtXw877UqFPTFWw.roa
Signing time: Wed 04 Jan 2023 11:07:42 +0000
ROA not before: Wed 04 Jan 2023 11:07:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198978
IP address blocks: 89.234.131.0/24 maxlen: 24
89.234.130.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:7c:77:28:8a:51:6c:83:e7:9d:61:41:98:4e:91:fb:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f82554a856a422b061ae64c577630f91d408cd4a
Validity
Not Before: Jan 4 11:07:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c57dc3d053948b8ee02ad5f0f3bed4a853d3156c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:50:fd:9f:1a:16:6e:cf:f1:51:42:3e:aa:ce:
f5:9e:f1:48:05:1c:e1:e4:96:25:b0:ed:b3:cb:f5:
6c:c5:69:15:d1:f2:75:a9:fc:ac:f0:52:12:f0:1b:
8f:6e:07:56:7e:20:e1:49:43:8e:6d:fb:87:26:5a:
ff:68:32:51:fa:66:7d:a6:28:36:23:b4:64:e6:df:
c2:86:5f:5f:7b:bf:c9:4a:c8:98:5b:d3:9c:78:a8:
5e:d2:04:a0:70:d3:10:ab:b2:77:22:9f:f2:21:3b:
91:10:d1:6c:84:f7:af:ca:9b:e5:5d:c8:2d:62:1e:
0f:10:f3:a5:79:e2:6f:c0:26:c1:58:97:04:49:b3:
25:fc:c5:4b:d8:03:b0:fc:1b:b4:d9:84:34:71:18:
85:5a:77:d6:a8:5e:87:54:5a:e6:de:51:fd:0e:a2:
61:b5:c5:19:64:11:4f:9f:a3:4c:a6:ad:0b:e5:e7:
51:92:b4:6c:2c:b3:aa:68:a2:fe:c3:25:c6:2b:94:
6c:9b:a0:21:53:e5:90:7c:83:7d:93:9b:56:ea:31:
c5:e6:e8:d0:3f:ab:e3:05:b9:3b:d3:79:32:29:d3:
eb:bd:b4:fd:b3:55:d0:71:02:5e:35:41:76:e9:c9:
c7:27:c8:dc:7a:1e:d2:f7:86:15:4a:77:ca:e9:08:
cc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:7D:C3:D0:53:94:8B:8E:E0:2A:D5:F0:F3:BE:D4:A8:53:D3:15:6C
X509v3 Authority Key Identifier:
keyid:F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/xX3D0FOUi47gKtXw877UqFPTFWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.234.130.0/23
Signature Algorithm: sha256WithRSAEncryption
76:de:7c:73:df:3e:fe:9d:d6:a3:fb:76:73:c0:c0:86:26:71:
e9:a4:e9:67:7a:79:3e:e2:24:72:da:59:8e:53:6e:cb:d4:32:
fe:df:dd:db:4d:40:f5:03:fc:b5:2f:1c:fe:e6:ba:c0:fb:77:
02:3c:66:36:81:9c:f2:97:35:3f:01:b9:f5:bb:82:fd:f3:3c:
3e:34:0a:ed:9f:33:28:1e:8f:4c:ad:ee:6d:d8:ce:77:b8:d4:
24:26:6e:ef:3a:24:85:8a:08:b1:4d:b2:9c:40:d8:8e:0d:f4:
84:02:51:c3:8f:68:e3:76:ad:da:ed:9d:81:03:38:65:31:87:
10:b0:de:c6:4d:d6:f3:d9:f4:e1:34:14:e3:22:61:46:63:75:
b3:d7:56:94:a0:c8:e6:d2:b1:9e:75:16:c2:cf:72:0c:b5:55:
da:59:8a:49:f6:7f:ea:73:62:c5:6d:ce:83:b3:78:87:56:de:
f0:f2:28:01:32:9f:62:2c:de:1b:36:8c:49:ef:8c:6e:e6:74:
69:fd:74:40:11:68:b2:7f:ac:3a:04:77:d0:2f:3d:3c:81:e5:
60:8b:4e:fa:07:d2:f0:4e:19:49:93:27:61:ac:15:36:44:b2:
cf:b5:f8:35:6b:07:ef:5a:1b:25:7a:b5:0c:3d:74:9d:b7:87:
dc:64:12:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:51:43 2024 by rpki-client on console-fra.rpki-client.org