Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/vPpQm35lkoFistham0FW-BgQXLE.roa
File: vPpQm35lkoFistham0FW-BgQXLE.roa (raw, json)
Hash identifier: 62o1ANnulQ93tMhTVmV228jp4zUNQiQfbWltYjIJfHA=
Subject key identifier: BC:FA:50:9B:7E:65:92:81:62:B2:D8:5A:9B:41:56:F8:18:10:5C:B1
Certificate issuer: /CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
Certificate serial: 0185710BF1EA2DA00F8680581AEC6FE07CA5
Authority key identifier: E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/vPpQm35lkoFistham0FW-BgQXLE.roa
Signing time: Mon 02 Jan 2023 05:54:46 +0000
ROA not before: Mon 02 Jan 2023 05:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60267
IP address blocks: 89.29.224.0/24 maxlen: 24
89.29.231.0/24 maxlen: 24
89.29.229.0/24 maxlen: 24
89.29.246.0/24 maxlen: 24
185.64.240.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0b:f1:ea:2d:a0:0f:86:80:58:1a:ec:6f:e0:7c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
Validity
Not Before: Jan 2 05:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bcfa509b7e65928162b2d85a9b4156f818105cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ba:ba:60:66:63:99:98:41:2c:11:6f:76:66:
66:d8:2a:88:49:32:31:7f:31:a6:7c:87:11:98:52:
fd:9b:4f:9c:9e:be:78:3e:d5:5c:2a:d9:6a:63:a6:
a4:27:26:35:34:93:99:0c:1d:05:47:02:96:99:85:
21:71:8d:53:28:cd:78:0e:f1:e8:57:f8:3f:f3:29:
9f:4f:ae:62:c4:42:dd:77:a4:d9:66:4d:18:fa:82:
fd:fb:cd:3d:e6:0f:58:5f:12:25:1a:48:a8:1c:8d:
08:a4:50:ec:25:05:b0:6e:7e:b2:e4:09:34:b0:12:
09:9b:26:f1:91:bd:30:e7:e5:f1:15:a2:8d:1e:ca:
26:d8:01:f8:27:f8:75:8f:22:30:eb:9b:52:bf:13:
8c:f1:65:48:19:ff:0f:22:7f:b0:95:38:ff:4d:6e:
bd:7f:84:95:04:c2:d7:db:69:bd:76:33:44:06:d4:
1d:19:71:58:e5:c0:e4:9a:6e:c6:4d:59:fe:dd:5e:
d3:64:4d:6b:dc:85:a2:07:09:46:8f:b1:f3:c3:c2:
f0:32:db:23:f2:ed:f6:e9:2b:ee:56:5e:6b:9a:89:
ab:ef:ad:fe:07:54:ef:06:42:4c:d7:a0:3b:26:c6:
19:79:00:38:de:35:bd:b5:a6:81:14:fb:2d:19:5b:
f8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:FA:50:9B:7E:65:92:81:62:B2:D8:5A:9B:41:56:F8:18:10:5C:B1
X509v3 Authority Key Identifier:
keyid:E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/vPpQm35lkoFistham0FW-BgQXLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.29.224.0/24
89.29.229.0/24
89.29.231.0/24
89.29.246.0/24
185.64.240.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:28:e5:36:82:31:ad:58:5c:5b:77:f1:2b:00:00:00:37:35:
39:32:51:30:e5:9f:e3:56:92:34:ca:ef:f0:04:92:aa:41:d2:
2e:1f:5c:df:9d:86:70:d3:29:87:fe:f6:72:c6:93:63:7a:fb:
ce:ce:68:61:d7:c9:d0:d6:b8:ec:3a:63:81:8e:d9:45:0a:27:
e1:36:18:1e:52:3e:a3:03:ce:08:3f:44:c0:9c:1c:b9:2d:2f:
45:34:b0:05:e0:7f:b2:d8:5e:86:be:d6:a9:16:35:08:19:25:
a2:be:fe:5a:32:e7:c1:64:8f:19:61:b9:12:9e:34:a5:f4:c8:
a8:ad:93:85:e0:a2:46:b3:62:b6:d3:2b:87:1b:3b:49:9f:75:
aa:44:fd:4c:31:fc:35:d1:49:ed:c0:fc:3e:7b:56:1b:03:90:
4e:bd:96:86:d9:9f:ea:04:67:86:fb:0b:ae:1e:06:55:67:12:
56:c1:97:44:ab:ff:d9:73:2b:49:48:85:bb:00:f3:55:9f:0e:
da:d8:b2:87:aa:df:de:7b:ed:39:f6:8d:db:6c:c8:00:f5:d1:
23:19:42:40:2f:c6:0e:a5:ec:85:41:34:66:84:30:87:49:2a:
4e:a3:cb:ec:b0:36:7f:c2:ca:9b:60:f7:0c:33:48:5a:3f:ee:
c0:5e:6b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:48 2024 by rpki-client on console-ams.rpki-client.org