Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/ffUWsQ2oTZq_dmK_CusCELUdFyk.roa
File: ffUWsQ2oTZq_dmK_CusCELUdFyk.roa (raw, json)
Hash identifier: fvx2b1jcUVWPhxr14uYKP8lATY84dDzCWouI9wSccmM=
Subject key identifier: 7D:F5:16:B1:0D:A8:4D:9A:BF:76:62:BF:0A:EB:02:10:B5:1D:17:29
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 0189C4A645A220A96F04E2CDA3244F2375D4
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/ffUWsQ2oTZq_dmK_CusCELUdFyk.roa
Signing time: Sat 05 Aug 2023 07:42:58 +0000
ROA not before: Sat 05 Aug 2023 07:42:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207141
IP address blocks: 89.44.241.0/24 maxlen: 24
89.44.242.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Aug 2023 19:27:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c4:a6:45:a2:20:a9:6f:04:e2:cd:a3:24:4f:23:75:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Aug 5 07:42:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7df516b10da84d9abf7662bf0aeb0210b51d1729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:87:5b:da:9c:18:4c:47:a2:88:c3:d3:ff:5e:
1c:4b:15:f1:ae:7b:5a:ca:28:e4:7a:d6:6d:f2:5a:
b4:18:d5:1f:1f:d5:4b:0d:7f:57:f0:b0:7a:d8:99:
27:07:1a:57:7c:bd:94:99:1e:aa:de:3a:25:eb:41:
68:cf:7e:b8:ed:03:e3:b0:c3:ec:a6:4e:31:c6:33:
e0:e0:24:23:9b:9d:79:8f:c6:b9:c3:ff:61:06:2b:
4b:15:52:a2:83:ee:cd:f4:d3:88:b7:d0:5c:3e:48:
1f:59:51:d6:99:83:11:2d:02:5f:7c:27:ad:73:a0:
ee:3b:b4:2a:ec:b8:2f:9f:22:ec:34:51:ee:1d:86:
96:0c:cd:50:08:75:9d:0d:99:b7:d2:e3:c6:6d:58:
3d:7a:76:db:87:89:8a:8f:8f:7c:98:69:b9:a9:7b:
06:d2:46:af:30:ff:70:cc:23:ec:7b:f6:42:bb:f4:
ca:63:97:7a:c3:9f:42:95:c0:e1:6f:0c:db:5e:c4:
a5:15:14:81:d9:09:83:af:6d:99:53:7e:e1:4b:5c:
01:c1:b2:bd:fa:06:fd:d2:41:b5:a3:63:f1:93:d9:
a6:67:16:9d:2a:93:e8:5b:3e:6c:85:72:89:1d:c4:
80:f5:92:63:cb:94:8e:b7:ec:0e:41:0d:5d:ba:77:
74:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F5:16:B1:0D:A8:4D:9A:BF:76:62:BF:0A:EB:02:10:B5:1D:17:29
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/ffUWsQ2oTZq_dmK_CusCELUdFyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.241.0-89.44.242.255
Signature Algorithm: sha256WithRSAEncryption
31:30:41:14:0f:5e:d4:b5:a7:11:22:b6:cb:07:6d:d3:4b:16:
07:5b:d8:cd:77:76:59:fa:23:d0:02:ab:75:cf:fc:6b:04:cf:
f2:97:d8:b8:8a:bf:e4:64:db:db:2a:d7:78:f6:43:ec:4c:91:
a4:da:a0:88:60:fd:69:85:46:c8:d4:62:1e:62:fe:76:76:db:
cc:10:f5:83:ef:99:d1:b6:33:d5:92:a9:73:d0:a9:03:e1:8b:
c8:9c:39:d0:97:e7:9c:31:25:d7:9b:92:66:fd:42:c8:d2:71:
5f:0a:ab:12:0a:31:2c:41:ef:a4:39:12:72:6f:69:d7:c9:f8:
b3:b2:12:6b:6c:54:a7:74:83:fa:08:f0:da:d0:21:c6:e4:05:
3a:9c:3a:10:ca:ce:e5:1d:a7:2a:66:f1:62:0a:b7:1c:5f:53:
fe:04:39:e6:64:0f:aa:7b:11:34:3c:bb:a4:26:3f:df:a3:c5:
22:11:ed:59:ef:79:de:80:be:a4:57:f0:67:17:fd:0c:9d:d4:
4b:7f:a6:c3:a2:8d:47:d7:f5:ae:13:04:14:3c:61:76:4f:f6:
16:f0:5a:6b:ab:32:67:f2:5a:18:26:15:ba:03:b6:32:e2:50:
11:6a:73:d2:9b:1e:ad:f9:27:0a:3b:a3:b1:b5:ab:8b:28:d2:
4d:ee:69:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:49 2024 by rpki-client on console-ams.rpki-client.org