Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/g4nknsNl9vz-hGoR7XJIeCvzLUQ.roa
File: g4nknsNl9vz-hGoR7XJIeCvzLUQ.roa (raw, json)
Hash identifier: kQ0mpBiouUNf28nxID9s3prMah3cqlfVYpuJgXgQ+/s=
Subject key identifier: 83:89:E4:9E:C3:65:F6:FC:FE:84:6A:11:ED:72:48:78:2B:F3:2D:44
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 019118CB56ACF73C5768003AEC869E837B65
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/g4nknsNl9vz-hGoR7XJIeCvzLUQ.roa
Signing time: Sat 03 Aug 2024 15:11:04 +0000
ROA not before: Sat 03 Aug 2024 15:11:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198154
IP address blocks: 89.44.242.0/24 maxlen: 24
89.46.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Oct 2024 12:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:18:cb:56:ac:f7:3c:57:68:00:3a:ec:86:9e:83:7b:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Aug 3 15:11:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8389e49ec365f6fcfe846a11ed7248782bf32d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c1:30:a1:15:86:fe:e1:b4:02:86:b6:0a:20:
95:e9:08:0d:d7:b6:04:9b:a8:53:a6:d4:07:df:15:
ad:d1:6e:24:f2:3b:a6:50:9c:ee:9d:43:dd:82:58:
97:eb:42:00:8d:4c:c5:2b:e7:b0:5e:f1:7a:ed:ba:
68:9b:91:ae:f7:c0:7d:a5:ae:2a:0d:90:d9:05:87:
cd:19:68:00:c5:b9:67:76:af:0b:14:fe:6f:ec:74:
0a:05:d9:13:df:2f:74:2c:d7:6c:f7:77:f0:18:dd:
7e:e5:65:5a:6a:fa:91:2b:22:73:d7:de:fe:fa:64:
c5:a4:7c:54:83:85:07:84:07:ca:f0:ff:6c:4b:84:
04:8c:e8:3e:12:9a:4f:48:5f:c2:49:cd:96:43:da:
95:76:83:53:4a:7b:73:27:3b:78:14:1f:52:d7:5e:
25:6e:ed:5b:bb:34:ca:f9:f0:c6:23:f3:0f:b4:e6:
97:d2:ab:05:2d:38:e4:6c:e5:6d:67:f7:f6:1a:8a:
64:8e:b6:fc:cd:4b:b4:3d:a0:d4:77:bb:9f:3b:80:
e8:77:8c:db:d5:09:9e:91:66:9f:ae:82:06:d5:4e:
10:58:24:fe:49:b6:48:f0:4d:dc:a8:72:00:61:be:
ad:d1:7b:a9:61:d6:49:cb:8d:76:72:40:a0:65:3f:
55:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:89:E4:9E:C3:65:F6:FC:FE:84:6A:11:ED:72:48:78:2B:F3:2D:44
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/g4nknsNl9vz-hGoR7XJIeCvzLUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.242.0/24
89.46.217.0/24
Signature Algorithm: sha256WithRSAEncryption
13:74:d5:0a:11:1f:65:d1:57:7f:b6:e0:09:18:ca:28:a0:45:
e3:aa:1d:6e:45:e5:21:e6:17:72:6a:5b:d4:88:e1:b3:1c:54:
07:82:0b:83:7c:8d:f7:21:a8:bf:c8:f8:e2:1e:5e:2c:bf:7a:
9a:52:d9:f5:b4:98:ef:73:f0:53:91:96:30:c9:9f:60:73:6a:
71:8a:90:2e:ca:ae:0f:cc:19:71:8b:f2:35:4a:66:28:0f:51:
7c:8d:65:28:d7:3c:fd:2e:d8:3f:32:0c:05:67:c6:a1:d1:7b:
20:d5:14:4f:11:2b:d8:2c:b9:bc:5f:a7:2d:47:67:2c:be:ca:
d1:9d:d4:37:2a:22:8b:bd:a5:af:42:4e:09:51:80:0e:1d:9b:
21:60:67:98:a9:0b:b9:90:d3:d1:29:09:e4:9f:fb:c8:27:4b:
19:81:13:54:b2:c1:1d:2c:18:48:56:d1:b9:00:e6:3d:96:9f:
3f:b1:1b:00:c6:ba:64:45:f9:41:b8:f9:73:84:96:c5:04:e8:
6b:84:80:5f:f3:b2:ad:a4:47:d2:02:e4:c3:fe:4a:a5:81:6b:
ec:8f:c4:7c:b3:7e:3f:16:b8:c4:aa:6d:e2:af:ab:76:ae:81:
e2:8a:f2:c6:bf:96:72:f5:12:58:4e:85:7b:f7:1c:bb:0a:12:
9a:6c:71:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 17:15:46 2024 by rpki-client on console-fra.rpki-client.org