Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/asyn0fQEwUJK6eCDqkCFRiq9qqo.roa
File: asyn0fQEwUJK6eCDqkCFRiq9qqo.roa (raw, json)
Hash identifier: qLKZJuq/RAw3DnKHYwFZDjYFKr13BzRF+jAMFYctkxA=
Subject key identifier: 6A:CC:A7:D1:F4:04:C1:42:4A:E9:E0:83:AA:40:85:46:2A:BD:AA:AA
Certificate issuer: /CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Certificate serial: 018CC2DAB2D7ABC8623162587994181DA139
Authority key identifier: B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/asyn0fQEwUJK6eCDqkCFRiq9qqo.roa
Signing time: Mon 01 Jan 2024 02:29:21 +0000
ROA not before: Mon 01 Jan 2024 02:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62055
IP address blocks: 89.38.42.0/24 maxlen: 24
89.38.45.0/24 maxlen: 24
185.48.192.0/22 maxlen: 22
2a01:98e0::/32 maxlen: 32
Validation: Failed, certificate revoked on Sun 14 Jan 2024 10:36:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:b2:d7:ab:c8:62:31:62:58:79:94:18:1d:a1:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Validity
Not Before: Jan 1 02:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6acca7d1f404c1424ae9e083aa4085462abdaaaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a2:de:65:51:5d:c7:ed:25:2f:8c:90:0a:3a:
47:1c:e9:e1:c8:c6:57:bd:62:ba:b8:e3:84:17:6f:
93:36:80:9b:3d:05:67:77:32:13:fa:e3:00:0f:de:
34:30:4c:3b:f4:ca:6e:49:88:83:01:65:7d:da:97:
8d:1c:81:a4:33:b1:fb:a5:be:7b:ba:6d:67:36:ca:
d8:68:e0:dd:d7:bf:cf:42:7d:b0:26:c9:fd:5a:6b:
10:fb:f9:b7:9d:aa:8d:52:bf:b6:24:7c:9c:ad:72:
a2:03:f0:bd:8b:cb:ff:cb:06:f7:fe:45:fa:1a:db:
98:6c:54:65:7d:c7:86:ea:3b:89:2b:12:17:b7:d3:
bb:3c:8d:7d:2b:8d:60:a8:6b:76:e0:d9:a9:6c:e1:
da:de:3d:07:62:d3:27:70:61:00:d9:21:15:05:c7:
46:f5:a5:cb:16:fc:15:d0:c8:15:10:99:98:ae:ba:
cb:b7:61:1b:38:56:71:45:dc:07:14:ed:bb:ba:30:
7a:51:db:65:35:18:d8:27:4d:9e:36:9c:e9:6c:13:
82:1a:ae:c5:bc:cf:13:80:db:f0:ac:ac:f0:1a:ce:
95:2e:f9:e2:ce:4d:53:89:06:f4:a9:37:1f:e1:fd:
bc:62:99:e3:60:d4:f9:d3:18:33:28:da:66:b0:54:
90:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:CC:A7:D1:F4:04:C1:42:4A:E9:E0:83:AA:40:85:46:2A:BD:AA:AA
X509v3 Authority Key Identifier:
keyid:B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/asyn0fQEwUJK6eCDqkCFRiq9qqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.38.42.0/24
89.38.45.0/24
185.48.192.0/22
IPv6:
2a01:98e0::/32
Signature Algorithm: sha256WithRSAEncryption
bc:9a:75:9e:c9:90:07:d5:69:32:c5:7d:35:73:17:54:bc:4c:
a3:71:07:88:b6:05:ea:df:c9:dd:ba:7c:7e:74:ad:8c:e7:70:
bc:c8:4c:de:84:b0:8c:9d:34:e6:46:37:6d:32:ea:f6:9d:7e:
a7:a8:66:7f:87:8a:c0:7e:a5:67:b1:48:7c:e4:51:a1:d6:bc:
39:82:4d:b3:82:ac:ce:f7:3c:bb:35:06:73:47:ad:6e:55:9c:
c1:6a:92:ce:10:2a:cb:ab:c5:c2:4a:15:ae:53:ea:15:ba:62:
fc:00:49:8b:c1:8b:90:88:a1:db:75:ba:d8:bd:48:93:1b:66:
c2:36:68:21:2b:82:6a:e0:f3:4c:85:16:d8:d5:89:d8:53:96:
57:20:23:da:18:05:aa:96:c7:44:64:7b:ca:3d:17:2c:15:14:
19:4a:72:d9:f2:78:0f:e9:43:83:b1:92:29:55:9e:cd:87:11:
9e:6c:31:50:14:8c:67:93:e8:c5:83:35:c2:25:98:91:80:53:
f7:67:4f:47:96:c9:5b:cd:93:29:d1:3b:11:76:34:03:5d:c0:
e3:9c:f2:4e:81:db:a2:89:58:4e:81:e5:fa:c6:12:cf:93:2b:
7a:85:14:f1:6e:b0:0e:e8:95:3b:c7:73:b1:7a:9e:7d:53:ef:
f2:1a:bd:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:04 2024 by rpki-client on console-fra.rpki-client.org