Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/xsH33TZ1dL6-z_SDbPIKC_0aerc.roa
File: xsH33TZ1dL6-z_SDbPIKC_0aerc.roa (raw, json)
Hash identifier: ftoo6olQJ3LU2TZfJWTG7QnGc5Cbwgz7oTRFR+AGDtk=
Subject key identifier: C6:C1:F7:DD:36:75:74:BE:BE:CF:F4:83:6C:F2:0A:0B:FD:1A:7A:B7
Certificate issuer: /CN=07a32999c47eb31d5fbf16ecc3872eaefd43bad7
Certificate serial: 018CC64AE4558671745AB715814B5FACAEDF
Authority key identifier: 07:A3:29:99:C4:7E:B3:1D:5F:BF:16:EC:C3:87:2E:AE:FD:43:BA:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/xsH33TZ1dL6-z_SDbPIKC_0aerc.roa
Signing time: Mon 01 Jan 2024 18:30:46 +0000
ROA not before: Mon 01 Jan 2024 18:30:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29033
IP address blocks: 89.222.34.0/23 maxlen: 23
89.222.0.0/17 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Oct 2024 09:39:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:e4:55:86:71:74:5a:b7:15:81:4b:5f:ac:ae:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a32999c47eb31d5fbf16ecc3872eaefd43bad7
Validity
Not Before: Jan 1 18:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c6c1f7dd367574bebecff4836cf20a0bfd1a7ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:54:7f:f0:9f:06:c2:53:79:26:d4:e3:b9:bb:
54:b8:7f:4f:3a:0b:b0:e9:95:3c:10:48:a5:ff:5e:
27:ee:d7:15:da:6b:d2:1e:eb:c3:eb:17:c9:a3:8c:
95:80:c4:d8:40:db:00:e6:54:31:1a:f3:dd:64:fd:
90:e1:96:23:4b:b0:f7:e5:6f:63:6a:fa:88:f4:db:
56:72:f0:42:db:ae:0e:b2:a2:20:bb:1f:55:6d:dd:
08:a9:bd:15:b8:ee:45:a2:80:da:59:fd:8c:54:ff:
98:4d:2c:e1:b2:eb:04:ec:96:fd:6d:9a:42:dc:63:
9a:2f:38:e2:1c:67:ed:fb:eb:ce:8e:6e:54:7f:66:
03:d8:fb:9a:5c:ce:7b:8b:8f:3e:b7:9f:c6:e5:87:
36:45:32:1e:51:8d:55:38:ce:60:1f:cd:55:7f:8e:
87:42:76:b6:7b:67:01:4d:34:fb:6e:7b:10:09:33:
5f:eb:67:9a:66:80:85:5a:4d:7b:00:09:97:ab:e4:
45:fc:56:e3:0c:c1:6c:22:b4:7e:f6:52:e3:21:c5:
b5:0b:8d:df:3e:13:f0:14:e7:06:fe:ab:17:d9:19:
5b:ad:10:9e:97:09:4c:8a:30:80:72:57:06:76:9a:
ff:5b:ed:ef:bf:31:85:78:c1:b0:c9:72:57:4b:8c:
aa:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C1:F7:DD:36:75:74:BE:BE:CF:F4:83:6C:F2:0A:0B:FD:1A:7A:B7
X509v3 Authority Key Identifier:
keyid:07:A3:29:99:C4:7E:B3:1D:5F:BF:16:EC:C3:87:2E:AE:FD:43:BA:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/xsH33TZ1dL6-z_SDbPIKC_0aerc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.222.0.0/17
Signature Algorithm: sha256WithRSAEncryption
11:b0:76:94:52:80:88:ac:b4:50:18:59:56:fc:dc:51:6b:61:
c3:03:5b:ea:44:9f:ad:bf:5b:b3:78:f7:6c:66:0c:2c:d4:9b:
ee:a7:bc:6d:78:ae:bc:ed:0e:e4:01:13:8c:c6:51:2f:0b:3e:
0d:cd:89:11:bb:97:31:32:b9:cf:c3:6d:ee:37:7d:7f:7b:61:
31:d9:95:51:92:b7:c2:b9:c4:b1:12:fe:b1:8e:74:45:62:37:
10:43:f7:f4:33:6a:2a:e4:c7:af:ef:47:36:1d:a9:97:bf:d4:
30:96:9f:00:de:ef:ab:69:a1:ee:0b:67:68:3a:a2:8e:8c:76:
93:75:f5:6d:cd:ee:c3:14:25:38:3a:40:32:8f:9a:fd:1b:a6:
43:fc:be:fc:4d:c9:ab:3a:1f:df:06:ae:e8:9a:52:0a:d9:46:
f1:6b:01:70:df:8e:aa:ab:6f:63:07:71:f9:9b:02:6b:f5:f4:
03:1d:45:e6:90:d5:7a:4c:86:43:d2:37:58:de:52:9a:cc:09:
4c:d0:cd:fb:62:28:65:c2:9d:b1:0d:6f:34:32:c2:6e:d2:9b:
ee:d7:95:6e:32:95:44:8e:18:b4:57:6f:2b:3c:50:90:2f:c4:
21:e4:3d:92:de:48:a6:ee:81:de:9c:34:a7:73:6b:d0:f8:3b:
40:f5:13:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 2 14:01:02 2024 by rpki-client on console-ams.rpki-client.org