Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/k1xA1soxwAJBsQFQGJCOW19_7dk.roa
File: k1xA1soxwAJBsQFQGJCOW19_7dk.roa (raw, json)
Hash identifier: y0jI0EOjiYlrPbd2rxUby5wrrrof16+NBKj+Y+RuzRU=
Subject key identifier: 93:5C:40:D6:CA:31:C0:02:41:B1:01:50:18:90:8E:5B:5F:7F:ED:D9
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018CC4933A007F02F96183A23FC4784BB2B4
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/k1xA1soxwAJBsQFQGJCOW19_7dk.roa
Signing time: Mon 01 Jan 2024 10:30:32 +0000
ROA not before: Mon 01 Jan 2024 10:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 142519
IP address blocks: 89.39.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Jan 2024 07:55:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:3a:00:7f:02:f9:61:83:a2:3f:c4:78:4b:b2:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 1 10:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=935c40d6ca31c00241b1015018908e5b5f7fedd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:aa:3d:47:de:fd:44:be:aa:7c:53:b1:ca:25:
01:73:b7:34:88:21:1c:89:4f:73:7b:72:e3:4f:43:
cb:c6:98:97:cf:d7:f8:3e:fe:32:fd:7d:eb:f6:a1:
9f:90:d8:43:3a:cf:19:7f:41:14:aa:3b:40:d2:fd:
f1:67:16:77:b2:71:65:be:4a:0f:e6:0e:85:67:79:
68:4d:bb:ca:85:26:cb:1b:7a:d6:2d:3a:96:c6:d5:
b6:15:36:38:94:f2:4d:22:55:dd:83:c0:6b:8b:17:
60:95:88:5d:27:e4:d9:af:e2:b5:c3:04:e6:3f:eb:
c9:dd:25:d8:01:e0:a9:8b:99:34:6e:30:24:92:96:
a4:91:43:b3:45:cb:80:1a:4b:c7:76:f6:33:cc:91:
35:c5:62:7d:9c:6d:ce:1b:72:ce:cc:6f:06:c2:e7:
4d:a8:60:4d:01:2f:fb:76:9d:1f:41:e8:84:55:dd:
a7:96:76:fe:d5:a5:f5:9c:94:a5:a7:72:0b:34:97:
13:a9:7c:4a:1f:cc:00:4f:51:49:3f:92:26:85:4b:
73:f1:8d:d5:be:e2:35:28:9a:6e:92:96:c2:c5:ea:
49:78:79:15:f1:0d:a3:18:d7:1a:31:bb:c3:31:de:
3c:71:28:b5:bd:a4:bc:6e:c8:37:0f:40:e1:53:fb:
6b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:5C:40:D6:CA:31:C0:02:41:B1:01:50:18:90:8E:5B:5F:7F:ED:D9
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/k1xA1soxwAJBsQFQGJCOW19_7dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.125.0/24
Signature Algorithm: sha256WithRSAEncryption
73:58:16:08:8d:bb:68:29:64:a1:5f:c7:6d:0b:6f:65:06:66:
71:96:7d:51:09:b0:9f:95:47:13:cd:91:e4:fb:93:e5:eb:e9:
a5:68:f7:0e:91:a6:a1:76:4d:ff:cb:7f:e6:5d:25:d9:06:de:
c3:23:5a:fa:f7:f0:25:ff:68:08:97:84:84:bf:79:9a:2d:ab:
b3:0c:86:d0:3d:72:16:0e:f3:7c:42:ee:a7:dc:cb:c0:04:7c:
47:0e:20:93:a8:9e:cd:fa:37:93:dc:29:2c:e2:bb:6e:bc:bc:
3c:f7:42:4c:fe:c2:87:26:80:ec:1b:66:25:42:61:44:ea:c6:
ef:4f:da:ae:33:fd:04:c2:e4:32:3d:12:87:d7:e5:ee:03:3f:
c4:6b:de:5c:52:c2:92:6a:e0:8d:10:f8:e6:d3:cd:36:79:42:
a1:44:71:a6:d7:4e:12:f4:56:48:dc:56:ad:d2:05:66:63:1b:
28:27:6f:98:0d:5e:68:ec:39:30:7e:77:e4:37:95:ba:55:ed:
7b:8f:4d:bd:0a:86:c6:c7:7c:b2:af:7d:c1:2f:cd:ec:29:c7:
52:50:d6:03:4a:d8:05:50:b3:0a:f6:cc:74:e9:1d:03:54:f8:
2a:98:bd:ee:fd:c0:7e:54:c1:b7:54:15:da:16:c9:61:6b:b8:
50:fe:93:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:10 2024 by rpki-client on console-fra.rpki-client.org