Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/KXJSuo7a4pOr6sq-9pduZnLLyGs.roa
File: KXJSuo7a4pOr6sq-9pduZnLLyGs.roa (raw, json)
Hash identifier: kM2zLWp0qSkMwht2uFESi7/O3+XHuZwYMpgJfS57cFU=
Subject key identifier: 29:72:52:BA:8E:DA:E2:93:AB:EA:CA:BE:F6:97:6E:66:72:CB:C8:6B
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 01909C29A98D9E8481EA1F02A30E3ABBB721
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/KXJSuo7a4pOr6sq-9pduZnLLyGs.roa
Signing time: Wed 10 Jul 2024 10:21:34 +0000
ROA not before: Wed 10 Jul 2024 10:21:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39650
IP address blocks: 89.44.240.0/24 maxlen: 24
185.239.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 03 Aug 2024 15:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9c:29:a9:8d:9e:84:81:ea:1f:02:a3:0e:3a:bb:b7:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Jul 10 10:21:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=297252ba8edae293abeacabef6976e6672cbc86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3b:37:1c:4a:3e:01:3c:02:38:56:ca:92:b4:
b6:79:3a:fd:22:ed:4b:5f:7a:1f:15:77:a6:45:c8:
6a:a8:13:fe:63:49:68:83:d8:ec:ef:90:f7:50:96:
7d:85:07:74:9d:a5:1c:82:04:6f:b8:f4:6b:2c:13:
44:4d:59:36:29:2e:12:d0:d9:56:51:7b:7d:58:57:
4e:95:9b:8d:fa:25:a9:6c:7d:09:cd:e0:90:9d:ed:
96:c4:7d:92:ce:db:73:66:29:a3:c8:f2:5c:81:0b:
45:8b:73:a8:58:9d:58:c9:36:94:44:eb:d1:ad:54:
cd:d5:e0:5d:bd:2a:c4:d9:8e:1b:be:bf:93:84:92:
2e:eb:e3:a1:46:09:b4:22:ce:ab:aa:ff:30:4a:38:
35:30:8a:b4:e2:f5:b3:b1:95:16:7e:b6:71:1b:9c:
cb:aa:db:2c:93:8a:7c:6a:19:e1:26:a2:6a:eb:eb:
f8:5a:a4:90:19:89:a1:fc:d0:6f:db:3e:cb:f5:b0:
13:0e:a3:1f:10:60:5f:5e:28:ce:fd:d2:03:f7:49:
fd:1c:1f:0e:e1:85:e1:57:21:73:d8:63:68:79:5e:
7b:7d:ca:40:b3:cb:4d:81:b7:4c:4b:b1:2b:e7:ec:
79:b8:04:10:c0:fd:75:05:3e:02:c6:a6:bb:c7:f3:
52:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:72:52:BA:8E:DA:E2:93:AB:EA:CA:BE:F6:97:6E:66:72:CB:C8:6B
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/KXJSuo7a4pOr6sq-9pduZnLLyGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.240.0/24
185.239.1.0/24
Signature Algorithm: sha256WithRSAEncryption
34:3f:b5:c5:43:d3:c7:7d:a0:31:ee:b5:99:77:75:b6:70:c4:
55:00:6b:5a:7f:f4:c7:9c:73:d5:f2:98:2f:4a:b4:94:58:34:
f0:2f:3f:d7:11:df:74:db:81:ac:24:2a:2c:3c:a4:86:0e:dd:
07:95:07:65:3f:d8:5e:c4:c9:3d:16:2b:ba:86:09:b9:32:fe:
1e:f7:95:be:8a:ca:b2:fc:5d:8a:d2:ba:f4:84:27:ca:59:0c:
b4:74:f0:35:d2:27:47:4b:6d:97:ef:33:ad:c6:d7:f8:ff:a5:
b1:96:bc:76:74:84:08:c9:fc:93:23:c0:a4:8e:12:0d:2d:eb:
e1:ed:e2:53:5e:21:ff:c9:6a:e1:a1:4f:d3:41:a6:9c:dc:7e:
a5:6e:7f:03:9e:08:95:5c:8b:14:af:32:33:5b:33:b0:f8:da:
ad:20:c0:16:cb:4f:2d:83:35:c6:0f:36:6a:5c:1e:10:14:3a:
ed:df:43:cb:cc:52:a6:d8:2e:3c:67:26:51:42:68:ef:c8:e2:
4e:9e:08:db:cf:58:84:29:be:8c:8e:4a:d4:70:be:07:9a:7c:
7b:54:5b:9b:49:39:2e:c8:04:d8:37:50:b7:45:22:f9:0a:9f:
1a:88:1d:0a:73:41:59:6f:d1:5b:4f:e4:2f:1b:29:7d:86:83:
36:ce:90:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 3 17:37:48 2024 by rpki-client on console-fra.rpki-client.org