Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/044fQVGTK2RXneMUkqR7_Y6ngWE.roa
File: 044fQVGTK2RXneMUkqR7_Y6ngWE.roa (raw, json)
Hash identifier: yP6kmIDR5TRRfYynTTCMR4jyyXl+GHCA+BZv8Zt1zxA=
Subject key identifier: D3:8E:1F:41:51:93:2B:64:57:9D:E3:14:92:A4:7B:FD:8E:A7:81:61
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01856ED4C7C57F0C5FF0EC81C5AD71A66154
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/044fQVGTK2RXneMUkqR7_Y6ngWE.roa
Signing time: Sun 01 Jan 2023 19:35:16 +0000
ROA not before: Sun 01 Jan 2023 19:35:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48020
IP address blocks: 89.45.208.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:c7:c5:7f:0c:5f:f0:ec:81:c5:ad:71:a6:61:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 1 19:35:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d38e1f4151932b64579de31492a47bfd8ea78161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5d:88:5d:31:f5:0b:57:2f:06:d4:a3:09:f0:
f2:c5:da:3a:47:10:58:88:e0:59:f3:c8:5e:c3:a1:
6d:ed:2d:c4:60:db:cc:8b:13:0b:2d:e3:99:ba:fe:
c4:6f:91:56:fa:55:34:43:2f:aa:da:8f:7c:fc:b6:
67:0e:48:07:01:db:d3:17:f4:9e:36:54:b0:c5:61:
af:64:90:f8:94:37:de:3d:e1:a2:96:cb:ed:9c:20:
65:d5:4f:13:92:08:e0:b0:b4:83:72:59:82:aa:95:
4f:81:77:fa:9e:ef:71:9b:d7:f9:ba:2f:a1:08:a6:
a7:52:55:ce:6f:b2:8f:45:f9:73:5f:3c:56:69:42:
38:8d:f7:3d:6e:4c:3c:d5:a1:5a:2e:f0:b6:59:e4:
8e:2a:1a:fb:18:d2:71:d2:7e:1a:36:04:ad:50:a8:
a5:45:81:20:be:71:84:28:2d:7f:82:0a:c8:da:2a:
33:e5:65:b3:51:21:0a:ec:d1:66:ee:df:ed:33:d2:
42:f4:c6:0f:bd:a3:49:96:3d:cc:98:ea:52:b3:03:
bb:1a:4a:a6:5e:c6:16:3f:7e:68:a3:1f:1f:39:9a:
12:c7:55:9c:b6:b2:bc:2e:d2:ca:ea:35:34:ff:55:
c5:42:a9:bb:00:c6:ae:08:3b:8e:61:87:ad:5c:ef:
e6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:8E:1F:41:51:93:2B:64:57:9D:E3:14:92:A4:7B:FD:8E:A7:81:61
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/044fQVGTK2RXneMUkqR7_Y6ngWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.45.208.0/24
Signature Algorithm: sha256WithRSAEncryption
64:1a:c1:01:2a:f5:c8:f1:9a:78:b3:93:1d:a0:c2:b1:1f:46:
32:6d:0e:e2:95:aa:4e:db:79:be:15:8a:60:b1:ff:13:80:a0:
82:7d:ff:89:5a:ae:32:71:cf:4b:48:ae:12:f7:35:3c:b5:6e:
00:c5:f7:92:92:d5:0f:a5:13:42:11:91:bc:5a:52:4b:15:df:
5b:2b:04:bb:ae:1a:be:cd:09:9c:68:55:85:8b:be:ca:da:6b:
27:cb:d1:7e:70:21:eb:eb:88:8a:d8:2d:92:91:49:fc:17:98:
c9:df:5b:6e:c4:5f:90:8f:f3:6b:0d:0c:da:4c:c0:b4:06:e0:
cc:31:ba:06:c0:70:28:6c:54:09:18:22:ac:5a:dd:fe:a7:88:
c4:a6:9c:21:3f:4f:12:ca:0f:87:bc:72:9a:41:26:7c:d1:31:
34:0b:37:39:ec:e5:6a:48:10:18:6d:df:2b:3c:9b:f4:c5:14:
2b:9b:ce:48:18:21:d8:cd:9e:c3:a5:85:e3:e2:bd:57:15:d8:
f7:03:5a:7c:84:89:32:0f:42:4c:e8:7e:0d:8b:a1:c1:00:cf:
aa:43:12:eb:0d:24:f2:ee:2d:3a:b0:78:40:3d:77:ed:29:f0:
0a:59:ab:01:ff:80:fe:b6:a6:46:cb:3b:65:96:83:41:05:f1:
42:93:b5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:08 2024 by rpki-client on console-ams.rpki-client.org