Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1-NBTbZ192g_JPUTcGYM1d8MZNFo.roa
File: 1-NBTbZ192g_JPUTcGYM1d8MZNFo.roa (raw, json)
Hash identifier: DiM4meVrTWdxQP5JjMYsTiokMvnhoW+GlL9hD+EiQCg=
Subject key identifier: F8:D0:53:6D:9D:7D:DA:0F:C9:3D:44:DC:19:83:35:77:C3:19:34:5A
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018C7BEAFA6E996279EA159E4D8634AB583A
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1-NBTbZ192g_JPUTcGYM1d8MZNFo.roa
Signing time: Mon 18 Dec 2023 07:54:06 +0000
ROA not before: Mon 18 Dec 2023 07:54:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142519
IP address blocks: 89.39.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7b:ea:fa:6e:99:62:79:ea:15:9e:4d:86:34:ab:58:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Dec 18 07:54:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8d0536d9d7dda0fc93d44dc19833577c319345a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ae:c1:7d:72:5f:ce:4d:f7:00:4f:c7:d1:fa:
08:75:9a:a7:3c:9c:0b:5f:ce:ec:87:4f:af:34:73:
18:0d:40:fd:7f:16:6d:ce:7e:22:62:56:61:9c:49:
1e:8d:b3:9e:f6:d3:29:7e:27:71:c3:fb:67:2a:7c:
ef:2a:68:9c:19:b4:cd:44:b6:02:c5:eb:63:34:69:
85:d7:64:c3:45:11:f5:d1:79:02:01:d0:f0:81:63:
6f:e3:cc:97:99:1c:d9:c5:c9:f2:f2:19:c7:7c:43:
ea:ff:a0:54:b6:c1:d1:11:99:f2:db:9a:a2:d7:aa:
22:f4:d5:84:c4:d7:a4:4d:a3:30:ae:d0:ca:65:bb:
b9:c4:20:7b:fe:da:cc:1d:d9:16:ea:61:8f:d9:57:
2a:05:e3:c9:43:a1:36:40:c7:0c:0e:5b:fb:72:e5:
0c:21:bc:74:f3:03:36:2f:f5:0d:e0:f3:8d:42:7a:
c5:5f:3a:0c:ef:0c:ab:1b:31:d2:44:6f:e2:31:cc:
2e:5a:05:63:58:4f:8f:7d:12:02:c9:61:e5:77:e1:
62:8e:d6:ef:6b:10:2c:82:88:71:e3:19:b9:26:e0:
fc:38:7b:29:bf:da:63:a9:62:49:0c:f5:17:01:d0:
51:09:91:5b:3b:7b:b9:0a:a6:8e:3d:e0:14:57:6d:
35:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D0:53:6D:9D:7D:DA:0F:C9:3D:44:DC:19:83:35:77:C3:19:34:5A
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1-NBTbZ192g_JPUTcGYM1d8MZNFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.125.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:35:ae:be:95:f4:51:fb:e0:81:4a:91:64:59:ab:a6:80:d4:
d3:b4:d6:82:e9:a9:a3:a4:53:9d:d8:86:a8:fc:48:9b:e2:0c:
6f:7a:f3:93:91:49:cb:89:29:ba:e3:33:93:94:0f:44:f6:50:
b6:d2:c0:65:36:e0:2b:64:4c:00:b4:cc:40:9a:40:8a:5c:1a:
d9:03:a4:ff:84:56:17:f6:81:4c:6b:51:81:08:fc:fd:a4:33:
b9:47:9b:db:5b:16:af:99:e5:62:47:c5:9c:c0:f2:d8:24:c3:
bc:df:15:63:9e:a3:4a:fd:8c:5d:05:04:f0:13:83:3f:1c:79:
0a:23:ea:43:0b:82:ce:b3:fb:30:b7:ce:82:23:0f:e5:40:ef:
19:c5:88:92:3e:d1:c9:28:73:5c:e4:94:0f:4b:6f:7d:1a:26:
10:4b:50:14:c2:b9:6a:d9:b1:8a:57:6e:eb:e6:0c:e9:20:af:
2d:52:5d:3b:c0:80:d5:b9:01:66:52:e5:27:a0:46:cb:0c:30:
e6:77:2c:e0:99:93:2a:04:3c:28:18:25:79:50:c6:60:f2:6d:
b2:f3:4c:62:1d:97:cf:f2:de:83:51:5b:f2:a7:b5:66:cd:40:
57:b3:5e:f4:5f:a2:1e:4a:35:d7:f5:ab:57:f3:f2:89:dc:23:
e4:09:96:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:11 2024 by rpki-client on console-ams.rpki-client.org