Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ddcI80tuo22CVGtRS7EmkIgLSqE.roa
File: ddcI80tuo22CVGtRS7EmkIgLSqE.roa (raw, json)
Hash identifier: Mv2aVAX/Ggf1/zX9qMX/qHiXpWB4sNjaTXxDuCNYT7Y=
Subject key identifier: 75:D7:08:F3:4B:6E:A3:6D:82:54:6B:51:4B:B1:26:90:88:0B:4A:A1
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018C3B2DEF26F02563A58398C3263BF8AD9F
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ddcI80tuo22CVGtRS7EmkIgLSqE.roa
Signing time: Tue 05 Dec 2023 18:11:55 +0000
ROA not before: Tue 05 Dec 2023 18:11:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200482
IP address blocks: 89.43.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3b:2d:ef:26:f0:25:63:a5:83:98:c3:26:3b:f8:ad:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Dec 5 18:11:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=75d708f34b6ea36d82546b514bb12690880b4aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:07:9d:3b:33:0e:e9:15:e3:d6:55:22:53:d7:
4c:cd:bb:94:c5:35:f6:59:d8:bc:6f:2a:12:29:0b:
a6:ad:b8:48:2a:e1:8c:01:02:71:93:62:ba:8f:3c:
7a:6d:17:7d:fd:40:5f:a1:60:18:b3:e5:a7:29:c8:
8c:6d:30:e9:05:76:a6:bb:bf:98:ac:61:ae:27:dc:
86:12:51:13:3e:3e:39:3a:f9:b2:80:77:df:03:dd:
8b:69:84:1b:f9:13:3d:55:c2:95:ba:5d:3b:24:d1:
71:09:8d:25:5d:8d:91:e3:bf:c2:8f:7e:94:54:12:
0c:f8:ba:45:bc:cf:e1:93:23:d0:e9:9b:51:22:2a:
ce:8e:b5:dc:f4:5b:ab:50:f7:6b:52:72:6a:a8:e7:
b6:d9:d5:d8:48:fc:e3:1b:a5:21:8f:be:ac:7e:4a:
b8:2e:da:bf:08:de:93:2a:c8:b8:73:33:24:96:b0:
4f:6b:19:bf:59:1a:4d:2b:74:b3:b8:ee:43:04:10:
83:38:04:c4:0b:16:8f:81:e1:4f:c4:42:89:99:05:
5a:50:97:b5:8b:da:f1:24:ac:23:1c:c8:82:21:fe:
11:c3:df:4a:fd:b8:32:d8:11:c3:e1:53:b4:c8:7c:
09:99:5a:82:5b:24:68:bb:39:49:ef:13:ea:e3:6c:
80:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D7:08:F3:4B:6E:A3:6D:82:54:6B:51:4B:B1:26:90:88:0B:4A:A1
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ddcI80tuo22CVGtRS7EmkIgLSqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.43.62.0/24
Signature Algorithm: sha256WithRSAEncryption
03:aa:c5:d4:ee:76:a6:1d:40:ae:13:7a:00:38:55:d5:bf:d1:
59:e9:c5:94:ce:a1:1b:0a:fb:e3:b1:01:84:49:04:20:4c:e0:
75:5a:92:d8:1f:76:bb:0d:a8:ae:e5:2a:fe:99:73:96:18:8a:
1e:a3:ac:1e:59:1f:93:e9:07:f3:95:4a:24:e4:f8:1a:09:87:
55:ea:70:48:36:d1:80:85:b8:4e:92:34:1b:36:c2:1b:96:0a:
c6:dc:46:5b:8d:db:79:66:2d:fe:f3:5d:28:16:7e:64:54:ab:
f0:aa:17:79:b2:85:e5:48:ec:25:8d:c1:f6:2c:bf:0b:6b:5d:
b0:c0:e1:a3:b2:7e:82:f0:45:e7:ec:84:05:af:77:7d:7c:cc:
ef:6b:4c:c2:23:3d:aa:9d:12:19:20:da:15:cc:2a:39:43:c3:
bf:71:1f:fa:a0:d7:53:d0:d3:93:ef:f6:bd:3f:8a:1c:74:d8:
3f:cd:c4:dc:b9:4e:a1:c0:0c:3f:22:65:b3:44:f6:bc:d3:dd:
56:70:38:2e:22:60:01:35:58:94:0c:2e:24:38:3c:b7:af:71:
95:3b:8d:d4:43:48:37:19:94:1a:ac:a0:21:a1:14:09:d9:1d:
6a:21:66:36:fb:64:9d:e0:3a:3d:9a:cb:ab:0f:42:c5:81:4b:
43:06:46:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:13 2024 by rpki-client on console-ams.rpki-client.org