Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/AUCRjrUdCHRLT_MuQ4TueRMNmzU.roa
File: AUCRjrUdCHRLT_MuQ4TueRMNmzU.roa (raw, json)
Hash identifier: qQnIQCqdRIs5Oht/uCXOVG4mDSJGSrhgWENdt6UWm1o=
Subject key identifier: 01:40:91:8E:B5:1D:08:74:4B:4F:F3:2E:43:84:EE:79:13:0D:9B:35
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 0186598E719C007B87C37118555E1F9FB9D2
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/AUCRjrUdCHRLT_MuQ4TueRMNmzU.roa
Signing time: Thu 16 Feb 2023 09:29:12 +0000
ROA not before: Thu 16 Feb 2023 09:29:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41313
IP address blocks: 89.25.20.0/22 maxlen: 22
89.25.21.0/24 maxlen: 24
89.25.22.0/24 maxlen: 24
89.25.23.0/24 maxlen: 24
89.25.20.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:59:8e:71:9c:00:7b:87:c3:71:18:55:5e:1f:9f:b9:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Feb 16 09:29:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0140918eb51d08744b4ff32e4384ee79130d9b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:03:81:4a:f8:47:d7:2f:35:95:69:95:23:87:
37:2b:e4:2f:f2:11:d6:b2:d2:be:d7:70:b0:cf:80:
df:77:d1:35:a1:89:19:ea:27:52:c0:68:d1:9e:aa:
f6:44:15:e2:0e:67:fe:f0:45:30:c7:46:67:ba:48:
9c:9c:60:b3:d2:3f:00:b9:cf:07:2f:85:f8:99:4e:
a9:cf:e8:50:76:44:67:28:27:52:58:70:fb:11:35:
d9:16:ee:f5:b1:2a:15:6a:d8:bb:12:e1:6e:fa:d9:
d3:8d:15:d6:ec:13:f0:02:b3:d3:f9:65:3e:28:32:
eb:6c:1a:a8:c0:71:95:81:da:2a:0a:8c:3b:fc:31:
2d:49:e9:87:87:b3:14:99:24:b4:f5:4a:1f:1e:77:
46:65:ad:ad:f7:1c:ce:58:19:c0:8f:40:54:51:60:
d6:19:88:7a:cf:57:e1:bc:9c:1b:49:32:30:7a:ce:
a6:bb:ec:11:ed:74:e7:db:fc:36:38:4e:e8:9e:57:
38:92:ea:4f:0f:7a:68:01:fc:8c:77:f7:0f:c1:c1:
d9:7c:49:5f:b4:42:f0:09:4b:45:4f:87:c8:e8:08:
3d:00:2f:c3:4d:c4:3a:6a:f4:56:dd:a6:ad:31:15:
35:15:5b:0a:d1:8b:57:ed:7f:4c:d1:8f:93:5a:df:
26:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:40:91:8E:B5:1D:08:74:4B:4F:F3:2E:43:84:EE:79:13:0D:9B:35
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/AUCRjrUdCHRLT_MuQ4TueRMNmzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.25.20.0/22
Signature Algorithm: sha256WithRSAEncryption
11:b1:f9:90:27:02:db:c1:bc:e2:a8:69:f6:c4:ab:3b:f9:0b:
86:4e:92:a2:7b:af:11:d1:0a:0c:95:1c:96:77:33:42:45:5a:
ce:bc:ac:1b:9e:4b:50:96:42:58:75:9e:78:42:0c:93:4f:49:
a2:f1:ce:8c:d6:bf:5d:8f:bf:14:b9:94:27:a1:42:e0:1f:b0:
3b:76:ab:c1:05:54:1d:2a:b8:e2:59:ac:a3:3f:69:50:0f:f5:
a6:d7:1f:2c:5f:8c:6a:95:04:e1:2d:fc:61:00:19:0e:e6:b9:
bf:5b:4d:9e:07:fe:76:1b:21:c5:1d:d8:d5:bb:4e:11:47:8d:
19:de:5e:72:ae:86:b7:6a:62:12:7a:7b:1a:b8:0d:07:04:f4:
42:3e:30:8d:a0:78:0e:50:41:7c:10:70:1a:78:54:7b:4a:60:
be:63:31:c9:5f:20:f3:f1:cc:36:5b:75:0d:c7:9c:b6:aa:f9:
bb:c5:a9:d4:8f:63:0e:79:52:72:82:7f:77:98:62:eb:1c:91:
bb:d4:c2:fc:2f:05:8f:4e:e0:90:d3:7e:41:40:9c:34:4c:6e:
56:f1:b0:0d:e3:54:f5:a8:1a:40:93:fc:8b:f9:9a:98:8a:d6:
21:67:6c:ae:69:9a:a6:f9:f9:7a:23:ed:86:83:e7:6b:6f:00:
0a:82:6f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:51:44 2024 by rpki-client on console-fra.rpki-client.org