Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ulDuEMjbgyjsjx5TlTIhOk6bh44.roa
File: ulDuEMjbgyjsjx5TlTIhOk6bh44.roa (raw, json)
Hash identifier: AntQCwImp+BxCopDQDTlvTHRFT2+BfDmJUd5/18tjv8=
Subject key identifier: BA:50:EE:10:C8:DB:83:28:EC:8F:1E:53:95:32:21:3A:4E:9B:87:8E
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0192C9D7D0B4ACF8B38E10019A1933AE0010
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ulDuEMjbgyjsjx5TlTIhOk6bh44.roa
Signing time: Sat 26 Oct 2024 17:20:17 +0000
ROA not before: Sat 26 Oct 2024 17:20:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 89.39.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 03 Nov 2024 09:32:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c9:d7:d0:b4:ac:f8:b3:8e:10:01:9a:19:33:ae:00:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 26 17:20:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba50ee10c8db8328ec8f1e539532213a4e9b878e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0a:e1:3c:98:61:44:ab:a4:ab:69:39:57:35:
72:9c:e0:5a:68:10:37:3b:18:6c:f8:73:b3:1a:af:
6f:63:8d:bd:b2:71:60:26:0e:e3:97:50:55:42:9a:
58:e6:b1:c3:69:09:76:14:19:46:68:79:4d:8e:4c:
49:b9:c5:21:45:b4:62:83:c4:20:54:af:cf:fb:d5:
fa:af:ae:aa:24:c8:c4:9e:2d:76:f7:ca:8c:a8:5c:
42:59:02:ce:7d:8c:32:92:3d:73:c9:e1:17:05:08:
16:ca:71:62:d6:93:77:7b:2a:9b:09:a6:9b:c6:2e:
11:3a:bc:5d:61:e7:21:5f:be:a7:f9:ab:9a:d4:79:
24:bc:0c:36:a3:c2:a8:54:8f:3a:56:cd:d3:93:0d:
f1:bd:c1:a4:00:b4:8b:10:50:d5:a3:53:31:73:22:
73:70:15:fd:26:47:a1:f7:55:e4:23:4f:ca:f4:b6:
d9:d3:fc:3c:6a:ca:b7:dc:da:82:e5:44:a1:74:34:
3c:74:fe:48:ce:67:41:db:d1:a6:f0:03:60:2b:88:
90:00:d9:44:a3:eb:8d:c5:0f:8e:5b:8c:90:d0:4b:
2a:f9:de:9b:88:6e:2f:f0:8d:b1:1d:af:37:b7:fb:
7f:10:b8:e9:ad:00:57:0c:2e:7d:8f:16:cc:dc:22:
ee:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:50:EE:10:C8:DB:83:28:EC:8F:1E:53:95:32:21:3A:4E:9B:87:8E
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ulDuEMjbgyjsjx5TlTIhOk6bh44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.120.0/24
Signature Algorithm: sha256WithRSAEncryption
02:50:d0:1c:03:78:fa:96:e9:c3:0d:05:72:cc:32:54:35:5c:
b8:51:f7:12:aa:ee:12:51:f6:9d:a5:d3:5b:86:65:5b:cc:08:
07:43:ab:65:6c:e6:c7:04:3c:e8:56:7f:f5:ae:d6:be:12:8a:
7d:e4:72:cb:4d:75:45:0c:a0:f8:6f:2f:9a:7c:90:5b:5e:16:
7f:f5:b8:c1:4f:d1:88:19:73:53:6c:c9:b6:3f:33:ef:c8:76:
29:35:93:0f:ed:98:53:ee:26:34:d7:d5:be:ef:65:30:38:09:
8f:e9:a6:99:97:f9:5d:43:da:a1:36:2d:c9:87:5c:dc:95:36:
db:a9:05:11:b5:3d:73:6e:0b:73:f9:98:2d:82:23:e1:67:bf:
55:89:65:97:2b:26:5e:5a:9b:3d:f9:fb:83:d3:9a:2f:0c:87:
a0:68:d9:fe:7e:e8:1f:c2:63:a4:23:d5:78:5a:b6:ea:e4:c7:
dc:59:3e:9c:db:1d:c1:dd:3a:a1:14:f7:01:e6:61:3d:51:07:
f7:ea:d5:5c:d2:96:c4:79:09:99:9d:3d:4c:30:77:42:32:53:
94:99:db:ed:60:24:95:be:e6:c9:46:39:d1:26:a6:71:d3:06:
b7:56:9a:a7:bd:0e:f2:4f:0a:53:33:f0:40:70:d2:e6:fa:b5:
dc:77:22:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 10:47:12 2024 by rpki-client on console-fra.rpki-client.org