Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/mQWz6ib1gNJDuM4vZDGQhysF02g.roa
File: mQWz6ib1gNJDuM4vZDGQhysF02g.roa (raw, json)
Hash identifier: E6OHYHhy5EO2fuvDTtwXLX7ku8bHUMmXJb/nKotauU8=
Subject key identifier: 99:05:B3:EA:26:F5:80:D2:43:B8:CE:2F:64:31:90:87:2B:05:D3:68
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 018CC513F750031A16D9D71780EF8739E81C
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/mQWz6ib1gNJDuM4vZDGQhysF02g.roa
Signing time: Mon 01 Jan 2024 12:51:09 +0000
ROA not before: Mon 01 Jan 2024 12:51:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202029
IP address blocks: 89.44.242.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:13:f7:50:03:1a:16:d9:d7:17:80:ef:87:39:e8:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Jan 1 12:51:09 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9905b3ea26f580d243b8ce2f643190872b05d368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4e:e6:12:79:ae:76:99:29:0c:58:80:bb:40:
fe:2f:52:54:b5:ce:4d:fd:89:8d:3d:bf:01:79:db:
3c:dd:ef:5c:0d:c9:7d:a5:ee:ff:ad:cd:65:b5:9c:
e8:4d:32:1a:94:34:34:74:83:ae:7b:ca:12:d1:e2:
8f:a5:50:e9:a3:bf:fe:68:24:1f:6c:f5:04:b2:1e:
a4:b7:36:c1:69:51:dc:08:94:f0:9f:8b:fa:e5:cb:
c3:5a:4a:00:85:4a:41:20:93:fe:b9:4d:16:3a:36:
9b:b4:36:cf:22:2c:a9:11:25:06:3a:80:f7:fa:e5:
97:da:39:38:be:2a:5b:ce:dc:98:a7:6f:3e:ef:bf:
7d:4a:d8:76:e5:ad:2f:58:6f:40:63:06:33:1d:4a:
61:74:2e:84:da:68:81:43:c7:04:c9:a6:d8:a7:2a:
3d:a8:51:fc:d8:6a:20:ee:13:70:d3:75:67:e4:c1:
40:27:be:18:15:4b:71:d7:81:a1:a5:9a:b0:41:26:
eb:f9:94:c8:c9:16:5a:78:90:cd:f3:e6:d3:a6:f7:
57:e7:d1:6f:52:97:cf:2f:a3:8a:7d:d2:7a:db:51:
73:33:ee:35:f4:c0:36:9f:94:66:01:ea:45:a4:13:
0a:dd:02:2e:ab:59:f5:80:0d:b9:52:c6:6b:fe:a9:
e8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:05:B3:EA:26:F5:80:D2:43:B8:CE:2F:64:31:90:87:2B:05:D3:68
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/mQWz6ib1gNJDuM4vZDGQhysF02g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.242.0/24
Signature Algorithm: sha256WithRSAEncryption
02:ef:59:54:04:03:62:32:d1:d5:00:d0:c1:e7:8a:1f:c6:01:
ff:5d:a3:0d:d0:f4:2b:c8:4d:16:c3:55:49:dc:78:3a:ca:a5:
70:2a:f3:08:e1:ad:c0:1c:4e:f6:ae:5b:70:0e:30:17:6f:c8:
db:b5:1f:e3:01:e5:15:a7:b1:c8:db:9b:92:9e:31:7d:92:89:
e2:13:c0:48:17:14:85:86:3b:a7:66:d9:d7:c7:b2:d5:1d:aa:
38:55:91:23:d7:03:91:97:cd:fe:92:4c:4b:90:54:84:78:f8:
9b:e9:db:96:5d:cf:d4:32:bb:a1:aa:89:9d:4a:35:9a:0a:f9:
7f:8d:f5:15:02:1f:86:92:8e:92:7e:71:a2:b7:a0:a8:75:5a:
67:35:ff:00:3d:f1:d9:54:22:43:26:f3:93:41:08:d1:42:34:
cd:47:f4:19:78:9c:d3:72:b0:38:fe:27:26:c9:19:cd:5a:3a:
6b:7e:9b:cd:e7:40:92:8c:ca:4e:a8:06:78:08:08:20:c3:80:
cb:c6:ea:9a:ee:97:05:fd:1f:f3:63:61:d5:27:71:f6:1c:4e:
e8:bd:c6:c1:07:dd:63:69:2f:4c:37:01:10:6d:67:79:af:06:
49:84:d0:bf:b3:1b:b1:d1:ba:10:de:7d:55:3e:8c:3b:32:38:
ee:9f:72:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:49 2024 by rpki-client on console-ams.rpki-client.org