Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/FPlzXquG5DtJGhyxDfCsDinLZkc.roa
File: FPlzXquG5DtJGhyxDfCsDinLZkc.roa (raw, json)
Hash identifier: omr5M/+UThLAO5klqDyOXMcOeOUEHVYhF7LEav8t77M=
Subject key identifier: 14:F9:73:5E:AB:86:E4:3B:49:1A:1C:B1:0D:F0:AC:0E:29:CB:66:47
Certificate issuer: /CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Certificate serial: 018BDD073F8EB9AEEDB18333AECBACEEB078
Authority key identifier: B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/FPlzXquG5DtJGhyxDfCsDinLZkc.roa
Signing time: Fri 17 Nov 2023 11:25:21 +0000
ROA not before: Fri 17 Nov 2023 11:25:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216050
IP address blocks: 89.38.41.0/24 maxlen: 24
89.38.43.0/24 maxlen: 24
89.38.44.0/24 maxlen: 24
89.38.46.0/24 maxlen: 24
89.38.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:dd:07:3f:8e:b9:ae:ed:b1:83:33:ae:cb:ac:ee:b0:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Validity
Not Before: Nov 17 11:25:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14f9735eab86e43b491a1cb10df0ac0e29cb6647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ee:28:1c:3a:90:52:6f:17:c4:d3:a6:92:77:
92:2c:ea:62:59:22:1a:b7:3a:50:3b:cf:d2:46:51:
1a:a8:d8:6b:56:9c:57:0e:1b:4d:20:8e:e0:12:cb:
fb:03:2b:25:cb:e0:87:1c:d6:e7:74:32:2c:b9:0f:
7d:86:88:1f:09:b5:cb:55:d4:45:c5:c3:0b:4b:b8:
54:4a:72:1a:f4:e6:d3:1c:31:e4:6d:1b:1c:95:a1:
17:e1:45:67:88:7b:0f:df:7e:46:8e:31:ee:e2:83:
47:fd:45:5a:42:af:07:cf:0a:9e:be:4c:ee:ab:14:
e0:4f:c8:b7:1e:56:cb:89:e3:35:ff:61:b2:b8:49:
9c:b9:9b:a2:d7:95:57:c1:bb:7c:0c:56:5b:91:24:
d9:13:b2:27:93:98:63:b6:06:96:89:60:99:cb:d3:
0a:2f:45:ce:18:e0:e9:1b:34:f6:f8:4e:8b:07:c8:
50:9e:13:88:40:42:a8:6f:a6:f2:52:5c:65:e6:d0:
b2:84:67:7f:2b:ba:9a:57:30:97:3a:19:52:24:b4:
49:16:57:50:0c:ae:97:45:4b:56:f8:50:6b:5f:f7:
6f:ed:65:c9:83:fc:a3:bf:13:41:4f:a0:f5:21:9f:
8c:0d:31:78:c5:85:e0:5a:a9:c4:59:a5:da:23:83:
81:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F9:73:5E:AB:86:E4:3B:49:1A:1C:B1:0D:F0:AC:0E:29:CB:66:47
X509v3 Authority Key Identifier:
keyid:B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/FPlzXquG5DtJGhyxDfCsDinLZkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.38.41.0/24
89.38.43.0-89.38.44.255
89.38.46.0/23
Signature Algorithm: sha256WithRSAEncryption
29:73:b0:ee:8f:e7:cc:87:a9:e4:0f:1e:c4:a9:3a:af:97:c9:
e2:3a:eb:c4:f3:5e:a3:a8:1b:dd:af:32:b0:9b:99:ec:54:b8:
58:fd:56:52:b2:53:32:bc:c5:30:53:b5:2f:cf:05:ff:67:ac:
51:bf:f3:12:3b:07:7f:14:fa:92:85:98:eb:3c:14:64:a7:a7:
68:9b:c6:1c:f7:5f:6d:48:a7:6a:28:e4:d9:d9:fc:cb:4c:ea:
8a:d9:9a:c8:e6:55:6a:8a:50:9f:9c:96:08:3c:f8:86:9f:f1:
f7:07:c4:5a:7c:19:c1:ee:7a:8b:bc:74:de:6b:2c:9d:5b:b5:
77:f8:2b:64:86:c1:0e:e3:64:da:25:a7:a3:05:9a:ed:8f:b4:
1f:84:81:d0:51:2b:30:97:2a:c1:6d:35:66:d5:df:23:74:25:
1f:6c:7b:22:0d:fe:aa:ef:10:e5:7e:07:1f:0f:0f:89:d6:a8:
fd:1d:a3:82:e3:dc:32:a8:39:f9:f7:3f:ce:15:65:7c:66:55:
9a:ff:0c:44:60:36:d8:35:92:dd:c2:df:fa:f1:bb:d8:96:65:
46:14:ae:e0:f5:9d:bf:a9:22:ee:85:27:3f:f9:e5:d3:82:fd:
ae:66:25:c4:d7:75:a6:99:fc:65:86:79:ae:4f:f0:ed:86:45:
1b:0b:57:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:04 2024 by rpki-client on console-fra.rpki-client.org