Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/crkEA4bs9vDg1YScFdLr1-H8tAo.roa
File: crkEA4bs9vDg1YScFdLr1-H8tAo.roa (raw, json)
Hash identifier: wqp4nT/Nqc7ZanNDA0MLftCsEgLsprX9RYqsUhTAo4I=
Subject key identifier: 72:B9:04:03:86:EC:F6:F0:E0:D5:84:9C:15:D2:EB:D7:E1:FC:B4:0A
Certificate issuer: /CN=07a32999c47eb31d5fbf16ecc3872eaefd43bad7
Certificate serial: 018AF4AA3C2CFA988D225AA80958CB6E84A2
Authority key identifier: 07:A3:29:99:C4:7E:B3:1D:5F:BF:16:EC:C3:87:2E:AE:FD:43:BA:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/crkEA4bs9vDg1YScFdLr1-H8tAo.roa
Signing time: Tue 03 Oct 2023 08:31:51 +0000
ROA not before: Tue 03 Oct 2023 08:31:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29033
IP address blocks: 89.222.34.0/23 maxlen: 23
89.222.0.0/17 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f4:aa:3c:2c:fa:98:8d:22:5a:a8:09:58:cb:6e:84:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a32999c47eb31d5fbf16ecc3872eaefd43bad7
Validity
Not Before: Oct 3 08:31:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=72b9040386ecf6f0e0d5849c15d2ebd7e1fcb40a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:43:50:e3:b7:6d:8f:b4:ae:b5:1e:1d:28:d8:
19:72:61:0d:49:2a:93:f4:6b:3c:2e:4f:49:40:a4:
c6:e2:bf:f6:fa:39:25:01:40:05:72:97:ca:f2:54:
d9:e1:e8:9e:e0:4c:fa:aa:66:1d:0d:91:ee:57:2c:
b3:e9:d8:88:6b:48:eb:24:06:a7:ca:52:c9:99:1c:
e1:f6:74:37:30:83:ba:7b:09:f8:bf:7e:5c:b3:18:
11:74:9b:5e:76:de:75:61:44:79:5f:2b:da:1c:9f:
af:51:3a:63:db:e9:ec:b0:c2:2e:23:25:a6:47:9c:
d2:62:19:f7:0e:f0:fb:c0:30:c5:ac:02:57:e0:fe:
c4:b1:d4:43:e8:35:5d:ab:27:44:35:19:36:1c:76:
ab:2d:21:f7:d8:f8:ab:87:65:ba:09:2c:3b:fb:95:
e2:ef:92:f7:42:d7:b0:95:88:12:da:d6:14:08:ba:
b1:05:4e:2e:fa:86:96:fd:f5:2e:8b:a6:74:fd:36:
1a:e5:8a:34:0a:2b:34:73:16:32:c1:5d:91:98:35:
49:0a:23:13:00:b1:1a:51:4d:6f:2e:00:40:c2:50:
07:fe:95:37:65:fd:6d:39:62:ec:9e:46:fe:ad:6f:
e5:2b:e5:09:b3:dc:a0:bd:8f:c7:58:ea:5e:d6:69:
b0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B9:04:03:86:EC:F6:F0:E0:D5:84:9C:15:D2:EB:D7:E1:FC:B4:0A
X509v3 Authority Key Identifier:
keyid:07:A3:29:99:C4:7E:B3:1D:5F:BF:16:EC:C3:87:2E:AE:FD:43:BA:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/crkEA4bs9vDg1YScFdLr1-H8tAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.222.0.0/17
Signature Algorithm: sha256WithRSAEncryption
68:25:1e:2e:db:7c:5f:7a:ac:76:68:37:d6:1a:cd:f1:23:35:
d9:4a:ec:59:83:4c:a9:5c:7b:e0:67:0e:02:5f:4e:4b:47:bb:
0d:55:4c:81:8e:1c:13:d5:35:02:ef:93:f0:7f:62:04:cc:96:
3c:92:c8:de:1f:31:15:d6:d9:f4:5a:a9:c2:85:87:32:d8:0b:
31:7e:d6:e6:ee:17:d0:e1:37:ab:7e:05:4f:a3:56:4e:b4:8b:
c8:07:c3:bb:42:19:f8:04:05:14:5e:b3:1f:e3:48:61:20:3a:
0e:1d:27:bb:ba:1e:d3:b9:8a:a7:0b:14:8b:02:57:97:f2:33:
5e:7f:97:eb:c3:92:ca:85:7d:ed:2e:b8:d9:dd:10:da:67:88:
62:8d:27:8e:00:60:d8:e0:7d:1e:7f:a9:31:9c:22:46:4e:1e:
13:92:8f:ac:a4:3e:5c:8d:e8:30:92:32:08:f0:35:d9:e0:af:
d0:fd:6c:33:92:d6:96:30:f5:92:99:7e:a4:3b:fd:a0:c7:3c:
d2:6a:79:f3:a4:64:b5:b7:f3:29:be:f1:76:31:eb:7d:f6:0e:
40:7b:c9:50:f0:a4:1d:36:a7:8b:a4:53:db:7e:4a:c3:3c:11:
ff:e6:08:c3:98:76:e8:f0:cd:f0:41:a9:f0:07:7d:8a:9f:11:
f0:c7:51:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:07 2024 by rpki-client on console-fra.rpki-client.org