Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/pOxgwT3Ydd09rwPhA76UGRH6lWU.roa
File: pOxgwT3Ydd09rwPhA76UGRH6lWU.roa (raw, json)
Hash identifier: NgQtRpvRQNGqBSL48PgmWU4rRm3eImw/h//UDGtiX/o=
Subject key identifier: A4:EC:60:C1:3D:D8:75:DD:3D:AF:03:E1:03:BE:94:19:11:FA:95:65
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01876FA52C51F5DE53CE1C21242E5B083712
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/pOxgwT3Ydd09rwPhA76UGRH6lWU.roa
Signing time: Tue 11 Apr 2023 09:28:28 +0000
ROA not before: Tue 11 Apr 2023 09:28:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211373
IP address blocks: 89.37.192.0/23 maxlen: 23
2.57.242.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 20 Apr 2023 10:17:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6f:a5:2c:51:f5:de:53:ce:1c:21:24:2e:5b:08:37:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 11 09:28:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4ec60c13dd875dd3daf03e103be941911fa9565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:da:54:2b:94:38:68:20:24:ee:df:52:fb:6f:
ba:cd:ef:2c:66:43:d2:30:8d:21:55:4c:3b:ce:75:
59:b9:93:25:c1:24:68:26:9b:10:c1:b3:3a:f0:64:
51:21:02:4f:75:d0:e6:11:05:d1:6f:13:73:ca:35:
f6:3c:d2:80:59:81:59:c7:f7:96:d1:d0:d3:0f:de:
16:ac:e1:f6:8d:ad:a2:d1:0f:a7:83:e3:18:bb:81:
f1:38:16:f1:be:db:04:4f:13:cf:7c:ff:13:f8:e8:
05:cf:c0:61:79:08:4b:2b:f1:94:a9:97:c1:16:0d:
91:cc:c6:48:53:d3:b6:b0:14:c1:86:86:b0:97:d7:
e2:59:5e:48:7b:f6:89:ba:49:f9:2b:d8:fd:ec:c9:
9a:b3:d5:fa:f9:bb:7d:6d:c4:83:56:23:81:71:e4:
ed:6c:a1:a8:48:94:d2:c6:86:8c:d3:05:62:83:52:
42:b4:71:6a:b5:e2:33:53:0f:ae:e3:c6:0e:5a:17:
32:db:24:6a:ae:e2:f2:02:3d:81:ff:f0:d0:06:81:
22:bf:a4:7f:ab:c9:3d:e0:78:60:3b:33:0c:97:16:
17:4e:b1:54:b9:e8:ac:40:ec:56:59:3a:43:a8:31:
40:bb:62:1b:38:5d:b3:18:d2:37:89:08:ea:f3:b5:
98:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:EC:60:C1:3D:D8:75:DD:3D:AF:03:E1:03:BE:94:19:11:FA:95:65
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/pOxgwT3Ydd09rwPhA76UGRH6lWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.242.0/23
89.37.192.0/23
Signature Algorithm: sha256WithRSAEncryption
86:e3:3e:ed:74:98:40:8c:ec:1c:2d:7d:e9:0e:8d:2c:3c:bd:
74:40:4b:c0:d2:f2:9c:d3:b3:4d:21:c0:69:fd:64:18:e6:54:
0a:51:90:ee:b6:c0:2e:38:80:90:b4:44:51:7c:81:46:b9:7a:
fb:79:ad:8f:87:01:cf:24:0e:d4:ed:44:6e:1e:e5:69:bb:e9:
69:2a:2b:f1:62:49:dc:a2:63:ef:0c:fe:02:03:74:3d:6a:64:
86:92:9a:b1:66:e9:df:57:29:1c:2f:1e:c2:58:53:de:65:f6:
e3:a4:02:19:a9:ac:3e:cb:65:e9:f2:c3:87:28:55:6f:aa:e5:
4e:77:25:2d:fd:36:b0:e6:a2:d4:29:93:15:f5:4c:40:a3:19:
49:46:30:bf:0c:90:c5:d1:a0:3d:54:4a:58:99:93:9c:76:7e:
46:96:a1:06:23:2e:2f:74:d6:17:bf:5c:c5:d7:9f:6a:cd:b9:
41:60:0d:53:1b:3e:b3:d2:e6:87:15:e5:10:57:18:62:4c:13:
01:db:29:7d:48:c6:73:72:91:97:10:b4:f4:9c:9c:55:07:a9:
ba:6c:3f:fe:e0:00:46:6c:6b:57:cf:10:9a:60:a1:2a:49:cc:
4e:3c:16:ca:4e:ec:b6:6e:bd:ec:b4:ae:66:c1:a9:94:f3:98:
dc:21:c6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:14 2024 by rpki-client on console-ams.rpki-client.org