Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/ub9AG3Etp8KQpPob4uhG8SRL_Ek.roa
File: ub9AG3Etp8KQpPob4uhG8SRL_Ek.roa (raw, json)
Hash identifier: 4KKS6kO5Q/tRKx8jjgMzSKOhHFT/naI0oodRl0Idyn0=
Subject key identifier: B9:BF:40:1B:71:2D:A7:C2:90:A4:FA:1B:E2:E8:46:F1:24:4B:FC:49
Certificate issuer: /CN=510b419f0c17b4c8be217f64388d268d14dc261e
Certificate serial: 01884738302D4F7BF4F4C59972E87ADD4EC8
Authority key identifier: 51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/ub9AG3Etp8KQpPob4uhG8SRL_Ek.roa
Signing time: Tue 23 May 2023 06:07:24 +0000
ROA not before: Tue 23 May 2023 06:07:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 133499
IP address blocks: 89.184.192.0/20 maxlen: 32
89.184.208.0/20 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:47:38:30:2d:4f:7b:f4:f4:c5:99:72:e8:7a:dd:4e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=510b419f0c17b4c8be217f64388d268d14dc261e
Validity
Not Before: May 23 06:07:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9bf401b712da7c290a4fa1be2e846f1244bfc49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3d:d0:00:ec:7f:ba:53:01:d7:4c:af:65:09:
8b:71:57:a5:8a:94:54:62:5e:df:ac:fe:37:4a:11:
84:69:7a:4a:6f:d3:4b:84:ba:fb:50:46:c6:30:95:
ec:8c:6f:ba:91:4c:b7:0a:90:59:db:ad:1c:12:c7:
e8:e4:ef:f0:e0:7e:14:9c:34:a3:41:4a:30:09:ce:
0d:27:19:1a:a8:d6:14:5d:13:a3:e8:2f:a5:13:f7:
10:82:14:9d:2b:5d:f2:f5:f2:71:b5:8d:9f:d3:51:
c8:52:61:eb:dd:24:43:54:7a:f6:79:46:c9:f2:b5:
4d:17:af:42:ca:2b:9c:fa:0a:d7:e6:bd:e2:40:27:
84:d7:22:be:91:d7:9c:60:1d:d2:b3:9b:84:5b:2b:
6d:85:0e:17:89:49:ab:f2:a6:75:de:6b:8f:b6:f2:
71:03:ce:85:ac:e2:21:50:a1:f6:0e:0f:15:7e:3d:
33:fd:9f:7e:01:cb:f3:a3:3c:0a:52:fc:25:b4:b5:
7c:5d:e1:59:34:9f:bb:aa:9a:57:d8:1d:df:e7:c5:
2a:c6:40:e6:d1:24:87:d0:c3:45:76:00:05:79:08:
09:34:a7:51:d2:b3:1f:4e:6c:02:79:8e:c1:66:1c:
51:95:e4:2f:9b:a0:a4:3f:2e:96:cf:ad:0d:af:73:
e0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:BF:40:1B:71:2D:A7:C2:90:A4:FA:1B:E2:E8:46:F1:24:4B:FC:49
X509v3 Authority Key Identifier:
keyid:51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/ub9AG3Etp8KQpPob4uhG8SRL_Ek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.184.192.0/19
Signature Algorithm: sha256WithRSAEncryption
89:7c:a7:69:ae:0a:25:8e:ca:12:a2:fd:63:36:3b:4a:30:6e:
8f:b1:ab:d4:96:ca:34:49:f4:42:cc:d6:30:3d:d8:79:a3:85:
3f:5f:3d:0f:5f:67:b8:73:5d:04:68:5c:d3:b3:64:11:99:dd:
d6:5e:8b:b2:f9:04:ee:91:b5:b3:2d:cd:ec:9a:9c:3b:1d:e0:
e6:e8:01:fb:62:b8:58:d8:8e:cf:5e:a6:8e:f6:76:4b:4b:12:
07:6e:cf:6e:67:10:29:54:72:66:d8:2f:84:78:46:b8:ae:f1:
a2:c8:f6:70:0b:d3:aa:14:24:3d:62:47:df:ca:01:c1:2c:e9:
09:c7:43:ba:26:c6:41:eb:b5:9e:82:94:06:8e:eb:3d:86:8a:
c7:c3:b4:fe:f5:95:af:60:5b:fc:43:3c:b0:99:66:46:c1:5e:
71:6d:f0:19:37:68:bf:35:33:f9:4a:61:bc:d5:6c:3d:1e:e4:
56:a9:28:68:6b:1f:ce:c6:24:09:91:db:d2:01:37:6e:4d:14:
c3:29:1a:3d:47:dc:5c:ff:cf:16:37:1f:b0:5f:75:91:4f:6e:
a7:d5:55:c3:64:ef:ce:7b:2a:bf:58:d2:88:c3:46:3a:bb:57:
c3:4d:ae:58:98:93:cd:f9:75:ee:0d:c5:88:28:dc:de:15:88:
a9:d3:ea:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:45 2024 by rpki-client on console-fra.rpki-client.org