Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/L-BadikhR1x7Id-gRreaVqLHJl4.roa
File: L-BadikhR1x7Id-gRreaVqLHJl4.roa (raw, json)
Hash identifier: nNVByWyYS6y1R114TSg1HYwCJlQ26KOXLIz5kIfTIQU=
Subject key identifier: 2F:E0:5A:76:29:21:47:5C:7B:21:DF:A0:46:B7:9A:56:A2:C7:26:5E
Certificate issuer: /CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af
Certificate serial: 018697013B53368EE6EEB2C2664DD3EEE796
Authority key identifier: B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/L-BadikhR1x7Id-gRreaVqLHJl4.roa
Signing time: Tue 28 Feb 2023 07:51:25 +0000
ROA not before: Tue 28 Feb 2023 07:51:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199887
IP address blocks: 89.33.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:97:01:3b:53:36:8e:e6:ee:b2:c2:66:4d:d3:ee:e7:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af
Validity
Not Before: Feb 28 07:51:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2fe05a762921475c7b21dfa046b79a56a2c7265e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:70:95:8d:d5:d0:91:d4:11:26:60:e8:f5:d0:
9d:81:a3:59:08:e0:cc:b6:20:5a:e8:95:66:49:29:
0f:bd:78:92:97:88:c7:de:e0:37:28:15:47:cc:2c:
86:ed:5b:3a:ff:93:0f:5b:a5:2b:5f:1b:5a:4b:87:
32:8f:5c:a0:72:61:57:a9:89:7b:27:71:74:7c:a0:
a5:65:b4:a1:96:86:1d:6d:cf:dd:ec:58:36:54:24:
ed:8d:a7:e3:59:90:13:34:ee:78:f7:aa:0f:b8:2d:
24:6e:1d:14:3d:f4:b0:0e:f1:d6:43:bf:f1:13:14:
eb:1c:dd:f7:a8:52:65:cb:f9:24:9d:f4:d0:62:0b:
6e:9e:f7:da:a4:43:d7:f7:5f:25:24:13:64:0f:4c:
10:f4:df:a3:25:90:5e:f7:21:92:a6:84:29:28:58:
82:56:04:88:6b:a8:96:ec:35:a6:7e:10:de:d3:a8:
30:21:d4:f7:c3:bd:f4:95:e7:a8:f3:b6:64:3a:c3:
5e:ff:36:62:90:7c:c6:b1:b7:28:89:50:d4:8e:74:
4e:26:5b:1f:4b:9f:88:22:03:8d:97:20:75:c6:02:
5b:83:f1:6f:85:4c:62:fd:0e:83:07:2a:c2:36:d4:
b7:e7:d2:95:07:56:6e:5c:48:2c:f3:99:ff:9a:ea:
42:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E0:5A:76:29:21:47:5C:7B:21:DF:A0:46:B7:9A:56:A2:C7:26:5E
X509v3 Authority Key Identifier:
keyid:B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/L-BadikhR1x7Id-gRreaVqLHJl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.166.0/24
Signature Algorithm: sha256WithRSAEncryption
86:b6:f0:a6:86:84:fa:6a:f3:cc:ac:34:f6:24:fe:94:2f:b9:
0c:06:ad:9d:24:cb:0e:49:49:53:94:9d:38:cf:87:55:35:9b:
0a:be:07:aa:e5:67:ec:84:8b:4c:73:94:26:bb:f9:bd:94:50:
30:f5:45:e0:be:fa:de:a9:b8:7e:8f:a1:ba:9e:b5:6d:ff:83:
a2:89:05:f2:09:43:5e:5b:23:a5:38:05:20:1f:e0:47:cc:09:
64:76:8d:41:dc:0f:c7:b3:df:0f:d1:a5:04:a5:03:19:03:1b:
c7:f2:c6:bb:e3:de:a8:ae:5d:75:18:ef:50:3e:d7:ad:9c:68:
bc:81:cf:97:ad:93:1f:b1:4a:c8:7e:d0:30:36:df:ff:f0:2c:
79:d9:b1:b9:ad:6e:3a:c9:52:62:55:f4:da:2b:b8:b5:a7:87:
4d:6a:25:6b:53:fe:dc:fd:a1:59:e5:14:99:41:c7:4f:e8:7a:
da:0e:44:1a:ea:23:76:1e:af:39:4b:c5:84:5e:d0:a8:3f:a8:
4b:eb:33:ed:a6:7a:df:f9:67:cc:43:d1:49:d0:f7:84:08:f9:
3e:68:e0:15:c8:82:be:89:10:06:69:9e:14:7a:3a:6f:a9:f7:
c0:63:3f:83:d1:af:7f:d4:42:57:e1:bb:db:c8:0f:b2:4f:ae:
cc:33:b0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:14 2024 by rpki-client on console-fra.rpki-client.org