Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/98Tm8SwPgVGPH-3n08VS7VG6Cr8.roa
File: 98Tm8SwPgVGPH-3n08VS7VG6Cr8.roa (raw, json)
Hash identifier: mWNAbGQdhQmrEGPwUmAHD2+i04JBhh4x7wElIn15cG4=
Subject key identifier: F7:C4:E6:F1:2C:0F:81:51:8F:1F:ED:E7:D3:C5:52:ED:51:BA:0A:BF
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018A63DDA60A5029EF51DA03B06E58D8FF4A
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/98Tm8SwPgVGPH-3n08VS7VG6Cr8.roa
Signing time: Tue 05 Sep 2023 05:43:04 +0000
ROA not before: Tue 05 Sep 2023 05:43:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60117
IP address blocks: 89.35.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 10 Sep 2023 07:23:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:63:dd:a6:0a:50:29:ef:51:da:03:b0:6e:58:d8:ff:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 5 05:43:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7c4e6f12c0f81518f1fede7d3c552ed51ba0abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cd:c9:3f:8f:ce:4a:b3:0f:64:09:ba:47:a6:
52:f5:f8:b6:47:fa:fc:ce:96:6c:e1:a8:9f:54:5b:
02:29:5b:a8:dd:ce:0d:1a:93:66:29:bf:40:64:7b:
29:7b:00:19:27:4b:84:da:0a:d5:10:e7:c5:d1:94:
5d:aa:1d:39:51:ff:de:7a:f2:23:9a:c1:68:ae:c1:
90:cd:a3:cc:28:72:bc:68:34:18:17:5e:60:cc:bd:
12:c5:2f:20:7c:a5:67:ca:0b:f1:1a:81:51:22:b7:
ad:f7:a6:f4:d4:78:d8:4c:fa:ea:0e:81:e7:e4:5c:
33:2d:31:55:26:4d:8d:6d:f7:b1:76:74:68:f2:0e:
90:5c:bf:1f:0d:4d:91:2e:95:59:ef:91:c6:73:fe:
1f:1b:db:19:17:b6:2b:f9:fa:1a:d0:f5:fa:90:96:
41:6e:7a:c6:2f:6e:fc:ed:db:3e:cf:ab:a4:45:06:
55:4e:f1:68:b1:a5:2b:16:43:21:8e:c6:8d:07:77:
21:d5:ae:d5:76:61:ac:5a:5c:e5:96:01:d2:18:cd:
24:66:94:0b:3c:ab:dc:81:c5:21:6d:8c:04:1b:94:
45:52:2f:ac:4e:c8:07:b0:1a:73:da:d4:12:fc:0a:
b0:ab:65:5a:8d:65:cd:52:08:de:ca:b2:2e:f6:23:
68:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C4:E6:F1:2C:0F:81:51:8F:1F:ED:E7:D3:C5:52:ED:51:BA:0A:BF
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/98Tm8SwPgVGPH-3n08VS7VG6Cr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.129.0/24
Signature Algorithm: sha256WithRSAEncryption
58:5f:07:a4:55:c6:f7:cb:d0:b4:f5:98:fe:b3:58:cf:cc:8e:
1e:27:49:47:b1:2e:ed:ee:27:88:6d:b3:66:49:42:9e:4c:f2:
43:0f:eb:27:db:f3:8d:98:ea:b6:91:50:c0:ef:c3:cf:ab:3a:
60:be:a9:e8:58:95:b2:70:ba:49:c5:0b:d4:6f:2d:d1:8c:a6:
ae:2d:3c:df:8f:ba:08:b9:9b:57:4b:6a:50:1b:cf:48:3f:02:
df:bb:3f:8e:ca:23:f9:56:96:8f:9e:62:07:e7:28:24:bf:ac:
2e:a4:2d:e8:0d:91:88:0e:c3:87:82:f5:0a:2a:12:51:ce:ef:
87:47:87:e2:f6:98:16:08:07:3f:16:ac:8b:59:23:df:bd:dc:
9a:14:58:fe:78:46:65:3b:ef:2c:6c:78:a5:e2:ea:37:97:73:
f6:8e:34:76:63:5a:3d:a0:60:0e:fc:2f:f5:49:8d:c9:4f:9d:
a7:8a:4d:95:7d:89:71:83:77:15:6b:46:aa:d2:a1:78:f8:ea:
21:88:54:a9:a9:23:0b:6f:09:80:e0:ff:8a:81:dc:1c:ea:64:
23:07:59:5b:38:0d:e5:fc:f8:be:56:06:ea:80:d3:6b:96:07:
e2:f1:2c:3a:ad:aa:af:1c:e5:7e:f7:e1:b5:ac:ec:0d:83:c3:
06:31:ff:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org