Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/2JdRUumryQX9wONEJRX2_ptOdG0.roa
File: 2JdRUumryQX9wONEJRX2_ptOdG0.roa (raw, json)
Hash identifier: H2bZbi0TpjX/vUIeES/ozlCRdQqVTKf7O5dxjfFJBlg=
Subject key identifier: D8:97:51:52:E9:AB:C9:05:FD:C0:E3:44:25:15:F6:FE:9B:4E:74:6D
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018B1E1D42B3FF1B8DB8AA046A3E65FEDD53
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/2JdRUumryQX9wONEJRX2_ptOdG0.roa
Signing time: Wed 11 Oct 2023 09:41:55 +0000
ROA not before: Wed 11 Oct 2023 09:41:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198652
IP address blocks: 89.37.192.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Dec 2023 17:38:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1e:1d:42:b3:ff:1b:8d:b8:aa:04:6a:3e:65:fe:dd:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 11 09:41:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8975152e9abc905fdc0e3442515f6fe9b4e746d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e2:66:07:af:47:42:5f:a3:ad:ff:45:59:b4:
fb:ca:8f:6c:de:1d:94:8b:f7:ef:0e:6e:90:2d:c4:
43:44:8f:0c:e4:00:9d:4d:d8:7e:a7:98:d7:a3:68:
97:e1:ee:0f:93:95:09:82:2f:a1:87:7b:24:66:38:
10:51:34:f1:6c:8b:d3:24:9b:1a:ce:10:1a:2f:de:
bf:de:d9:bb:fa:19:3e:85:04:be:7c:7d:12:7f:ae:
e2:e1:b1:4e:14:f5:c7:dc:52:11:5c:be:3f:78:d5:
8e:c4:73:41:ef:65:b3:eb:3c:4c:17:09:33:76:cb:
dc:12:98:5d:47:44:c4:1d:6f:57:0c:8a:6e:56:bc:
fd:36:d3:2f:59:e3:66:69:6a:a6:02:3c:0a:1b:09:
60:72:ad:4b:c0:76:7c:c3:59:1e:81:a9:f2:a3:d3:
8e:ef:cb:e7:53:ee:e9:9c:7d:d5:cb:8d:e2:43:d9:
d6:3a:34:57:e7:a4:96:c3:6d:a7:d7:5d:ce:7d:81:
7f:b5:06:e7:7a:57:d7:73:25:de:13:7a:57:6f:ff:
b8:67:ef:6f:63:67:b1:06:77:4d:9e:7a:20:8e:53:
b5:40:18:8b:df:45:03:5e:da:35:ea:fe:d3:99:34:
40:7b:27:ab:71:f0:53:10:e5:fc:4d:96:4b:92:a5:
d1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:97:51:52:E9:AB:C9:05:FD:C0:E3:44:25:15:F6:FE:9B:4E:74:6D
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/2JdRUumryQX9wONEJRX2_ptOdG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.192.0/24
Signature Algorithm: sha256WithRSAEncryption
11:81:f5:0b:9b:37:be:4e:4e:59:34:65:1b:af:27:28:ce:1b:
b5:a3:c7:b7:3a:27:c5:38:11:29:6d:46:44:1a:00:08:6e:8e:
bc:fa:c0:21:af:2f:f3:f6:27:1b:75:d2:94:d9:e2:31:0d:be:
26:cc:fb:5c:fd:3e:2c:f0:1b:e5:d3:40:61:31:6d:b4:42:eb:
d5:38:f5:c4:0b:f2:f3:fb:98:28:4d:ec:d4:f4:d4:c1:b8:1a:
dc:76:c2:58:a7:fe:87:14:09:24:30:f5:e8:9a:dc:ae:fd:85:
f0:0d:aa:4c:7f:cb:79:85:27:3d:7d:bc:20:27:ad:6f:ec:31:
c9:05:e4:63:cb:e4:93:99:46:e7:76:bd:94:0b:e9:e2:43:1b:
1a:db:c7:cb:cd:11:f1:dc:dd:a6:60:27:07:b8:13:af:af:01:
73:a4:60:60:90:21:e5:a7:fb:5e:63:63:d1:94:86:dc:d8:ae:
18:5e:03:ed:04:fe:ee:02:53:fc:e6:6e:a1:b6:b1:98:4e:42:
5b:5b:2f:a1:d1:19:5f:c7:31:1e:97:05:75:6f:d2:28:52:c5:
3e:9e:40:dd:26:be:82:85:b5:d4:87:85:b6:0d:61:e5:11:2c:
af:e8:40:3b:d8:89:75:4e:37:9f:81:2f:4b:9f:d7:57:5c:03:
0a:04:0a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org