Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/v_Vj800FGJ7rgI-5pvRDrMP4hsQ.roa
File: v_Vj800FGJ7rgI-5pvRDrMP4hsQ.roa (raw, json)
Hash identifier: V6be3bmaP1WhaRrY37udaEMrRCUwJNNGNLqDLfKQKQ8=
Subject key identifier: BF:F5:63:F3:4D:05:18:9E:EB:80:8F:B9:A6:F4:43:AC:C3:F8:86:C4
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0192DA7F6E4236ADD555A7D8F0783EDE1F74
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/v_Vj800FGJ7rgI-5pvRDrMP4hsQ.roa
Signing time: Tue 29 Oct 2024 22:57:17 +0000
ROA not before: Tue 29 Oct 2024 22:57:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207590
IP address blocks: 89.45.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 09 Nov 2024 09:19:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:da:7f:6e:42:36:ad:d5:55:a7:d8:f0:78:3e:de:1f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 29 22:57:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bff563f34d05189eeb808fb9a6f443acc3f886c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:40:7a:ea:a4:51:29:6c:eb:de:f5:6e:18:1e:
74:31:07:b4:91:f6:f0:a6:a1:ac:12:bf:f4:25:15:
db:31:c4:1a:bd:2b:83:2a:8a:02:ad:14:ee:a0:5e:
06:bd:b1:5c:15:3a:80:e9:fa:f8:38:0c:f4:68:dd:
62:cf:c0:51:42:37:d1:77:cd:b9:92:71:2b:2d:b3:
0b:ff:7f:70:89:ec:8e:55:dc:ac:69:cb:5b:83:9b:
59:af:26:c1:5d:d9:04:c4:f7:9e:53:36:87:1c:48:
de:18:cc:c0:90:75:11:7a:73:3c:b8:0b:c7:56:70:
0d:3d:61:68:9f:be:e0:e7:2d:fb:7b:c1:df:b1:e9:
8d:57:b8:84:50:ca:d6:72:ac:fa:22:06:be:ae:f9:
99:cc:3d:31:01:75:e2:3a:51:2b:61:d4:c9:bb:bf:
05:8d:5a:31:be:ba:32:e0:3c:26:49:98:db:d5:55:
ed:1c:7e:d2:45:61:97:37:1f:6d:31:33:64:2b:4c:
36:03:9c:06:85:f3:3e:c6:d8:2f:ea:87:ba:ba:6d:
03:cf:41:65:eb:6b:ae:40:8f:87:16:89:52:fd:80:
5b:99:69:50:26:36:b7:8d:7f:e7:3d:be:24:67:4d:
54:68:1a:37:21:c7:f6:7d:71:43:a3:93:4d:d8:4b:
2e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F5:63:F3:4D:05:18:9E:EB:80:8F:B9:A6:F4:43:AC:C3:F8:86:C4
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/v_Vj800FGJ7rgI-5pvRDrMP4hsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.45.44.0/24
Signature Algorithm: sha256WithRSAEncryption
60:02:30:1e:d2:15:20:d5:03:15:d1:1c:51:f4:f6:6a:0e:68:
f1:ed:4a:7b:de:f6:fe:04:50:a4:b6:07:0f:a7:2d:35:4c:ff:
74:6f:cd:3b:41:6e:9b:64:52:36:81:58:d5:e9:a9:50:24:ee:
de:31:47:82:30:e0:73:37:e6:c5:fb:e5:83:f6:26:4b:8d:c8:
2a:24:d2:ec:6e:b0:d7:91:ca:98:e5:71:06:28:5c:a5:62:b4:
83:bf:91:66:ea:70:9d:55:0e:0d:06:a8:76:43:df:34:a6:82:
5d:82:d0:07:2a:63:e2:aa:b5:c5:63:72:c5:7a:08:1b:4f:f4:
e4:2f:bb:34:f8:a5:ee:99:39:8c:b2:ef:61:02:06:20:f6:8a:
22:32:0c:00:d2:3c:e3:fe:b9:37:a8:5b:85:17:a4:cf:e0:05:
ae:dd:1e:bc:20:8e:74:35:80:b9:04:c5:3f:0b:61:9a:a0:b6:
4a:53:e2:da:e4:dd:2c:1a:a2:84:46:8a:d6:85:7b:ac:f9:31:
0b:43:83:38:38:b7:6c:29:6e:20:4d:d4:45:ac:62:d6:74:b1:
53:1a:96:d8:03:06:07:43:5b:78:b7:21:b0:f2:c5:69:fb:c8:
60:07:e0:9c:3d:36:e9:29:39:75:88:1b:43:c1:5e:2b:ca:e7:
ea:ee:69:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 9 12:52:35 2024 by rpki-client on console-ams.rpki-client.org