Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/fmNkyAjZcjuxMpNctAdlfJWtOo0.roa
File: fmNkyAjZcjuxMpNctAdlfJWtOo0.roa (raw, json)
Hash identifier: m0//6mPJg7wSPGiKvk9Ux+WyD9fTLo8qCvUlvKAFBug=
Subject key identifier: 7E:63:64:C8:08:D9:72:3B:B1:32:93:5C:B4:07:65:7C:95:AD:3A:8D
Certificate issuer: /CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Certificate serial: 018B3CBD14B9B0A81C5C26A60F62337EF863
Authority key identifier: B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/fmNkyAjZcjuxMpNctAdlfJWtOo0.roa
Signing time: Tue 17 Oct 2023 08:25:06 +0000
ROA not before: Tue 17 Oct 2023 08:25:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62055
IP address blocks: 89.38.42.0/24 maxlen: 24
89.38.45.0/24 maxlen: 24
185.48.192.0/22 maxlen: 22
2a01:98e0::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3c:bd:14:b9:b0:a8:1c:5c:26:a6:0f:62:33:7e:f8:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Validity
Not Before: Oct 17 08:25:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e6364c808d9723bb132935cb407657c95ad3a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:5a:35:9d:b4:b3:20:bd:4a:a0:28:d6:d9:88:
fa:cf:3b:85:9c:12:68:28:f9:b5:c1:59:7b:94:8c:
70:db:8a:b5:e2:d4:6f:1c:45:17:23:83:aa:16:40:
c4:0c:e3:64:f2:6a:ea:c4:3d:b5:23:a8:4a:e5:60:
51:fb:cc:76:94:f1:bb:91:d8:59:a0:2a:f8:2c:66:
19:17:38:cd:de:21:12:97:21:6a:e0:e5:c7:61:ad:
c4:d1:05:e4:e5:8a:37:d1:54:75:b1:e5:83:58:94:
43:c4:d1:cb:13:3c:22:b5:18:a2:48:94:fc:34:28:
d6:67:e1:4a:32:60:05:fd:22:44:a7:ae:11:ca:4e:
d2:4b:8a:d8:36:9b:27:fd:91:9a:d3:df:ea:63:1f:
ab:49:06:55:a0:1e:2b:52:61:02:4a:e0:e2:e5:10:
84:55:8b:f7:1c:3e:6b:0c:94:53:26:a5:83:84:25:
91:32:60:3b:3a:56:2e:de:4d:29:60:f6:fc:c4:ac:
68:73:45:25:4a:9f:41:72:aa:af:d0:de:d1:8b:f6:
fe:fc:12:26:8e:9d:d5:1b:7e:1c:10:13:d1:af:13:
6f:fb:a1:01:ad:0f:e9:63:17:2f:72:4c:e2:69:37:
3c:70:3f:e4:d8:91:35:86:6b:4d:a1:44:38:05:6f:
4f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:63:64:C8:08:D9:72:3B:B1:32:93:5C:B4:07:65:7C:95:AD:3A:8D
X509v3 Authority Key Identifier:
keyid:B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/fmNkyAjZcjuxMpNctAdlfJWtOo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.38.42.0/24
89.38.45.0/24
185.48.192.0/22
IPv6:
2a01:98e0::/32
Signature Algorithm: sha256WithRSAEncryption
7c:3d:d4:c2:8d:61:3e:e7:cf:fa:5d:dc:b9:f3:80:9e:cd:12:
88:c9:cb:bf:60:a6:73:f9:25:62:e7:c6:1c:5d:5b:96:0d:29:
de:5b:bf:af:67:80:6f:4e:2a:4d:8d:85:3b:33:d1:e6:39:14:
56:17:26:58:d6:e4:15:ee:87:db:01:58:96:0e:c1:50:12:bf:
47:0a:6f:89:1c:45:84:65:81:d3:4e:e3:0f:bf:50:ef:5f:e2:
9e:c5:d3:45:ec:08:89:bb:82:87:1a:f5:bf:9f:7c:c3:36:99:
f0:45:60:27:d5:ad:19:08:e8:c2:86:c9:32:14:7a:e0:5a:97:
87:40:56:9f:be:59:1a:34:20:89:38:39:d5:98:96:5e:23:82:
11:b4:f4:ec:e2:25:40:b0:8f:39:39:10:58:11:57:68:ac:9e:
5b:b3:d4:b1:b6:6c:cb:3b:45:95:00:76:fe:b4:0d:3e:3e:03:
3a:30:16:a1:73:f7:51:e5:51:70:47:52:25:9f:69:3d:91:e9:
52:1f:85:25:5c:b5:29:ec:77:7d:92:f6:94:b3:74:03:fd:80:
35:73:03:7d:89:de:20:70:4a:3a:12:3a:85:27:18:f9:96:fa:
9f:9e:45:44:2f:97:ea:56:69:1a:bb:e8:08:65:f3:0a:ba:cc:
57:57:8a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:04 2024 by rpki-client on console-fra.rpki-client.org