Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/ps7XeYaF04R1RKrfFIV1Lbik3jw.roa
File: ps7XeYaF04R1RKrfFIV1Lbik3jw.roa (raw, json)
Hash identifier: NKJXvxfgiXEQCFa64a3Uc1cDZLhQr3sLf3irm+YnlyI=
Subject key identifier: A6:CE:D7:79:86:85:D3:84:75:44:AA:DF:14:85:75:2D:B8:A4:DE:3C
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 018572BA6722F35799F19DE7EAA2C3BA8768
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/ps7XeYaF04R1RKrfFIV1Lbik3jw.roa
Signing time: Mon 02 Jan 2023 13:44:56 +0000
ROA not before: Mon 02 Jan 2023 13:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2010906
IP address blocks: 89.116.97.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:67:22:f3:57:99:f1:9d:e7:ea:a2:c3:ba:87:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Jan 2 13:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6ced7798685d3847544aadf1485752db8a4de3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:69:42:af:c1:c6:c7:1b:c8:29:96:4c:68:a6:
05:f0:b6:2c:98:a4:82:1e:e8:a4:ee:44:a2:82:ff:
cd:8e:72:ac:f2:69:33:20:be:56:cc:f3:89:cd:69:
ad:01:f7:16:32:6c:0c:6e:c4:86:e2:94:59:c5:85:
64:49:18:04:e5:4e:1f:6e:ce:2d:99:f0:bd:d0:e5:
07:6f:87:5a:ec:a2:1c:17:3e:d3:7f:27:ea:e0:88:
c9:36:c2:a5:12:79:27:cb:f5:e0:97:a6:75:c0:aa:
1e:cd:dd:47:73:ea:c7:5c:7d:3f:95:24:ec:76:42:
6c:df:4d:d9:c5:a6:e9:53:0b:42:c1:81:84:b7:bf:
b5:df:79:94:8d:62:11:e6:26:8b:e0:8e:ec:f8:3b:
18:ce:a0:44:2b:f6:2a:3e:75:e5:8c:0c:c8:2d:7a:
13:03:f8:81:06:5b:42:d9:b2:a2:02:95:2c:7c:44:
25:0d:22:b5:25:23:57:10:4f:2b:87:e3:23:e9:f5:
0f:25:e7:46:e6:85:5e:1c:fe:50:1c:48:6d:fd:39:
fd:28:01:14:e0:ce:04:f0:6d:8e:e6:d8:bf:49:d0:
2e:3e:d6:41:1c:39:49:f4:15:43:39:12:8d:be:64:
d8:0f:79:5a:a1:09:1c:5d:0d:b6:14:06:a1:fd:f0:
6f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:CE:D7:79:86:85:D3:84:75:44:AA:DF:14:85:75:2D:B8:A4:DE:3C
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/ps7XeYaF04R1RKrfFIV1Lbik3jw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.97.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:dd:84:c3:3a:a3:6b:39:0a:e9:19:fc:e4:0c:aa:d7:31:ce:
36:ac:56:59:ab:4f:65:4f:2d:26:b5:9f:24:e9:c8:02:93:4f:
f7:b6:4c:9b:7b:21:99:b2:19:1d:97:3a:d9:96:82:29:a5:68:
d1:ec:e6:a8:ca:14:1f:89:40:12:7e:c0:80:12:cb:f0:ef:dd:
b9:1e:f3:ea:3b:ad:c4:91:a8:72:4e:2d:f8:c3:67:a0:ee:32:
84:93:36:c7:de:ab:a1:c2:cb:44:9d:b4:f7:6d:5d:1c:b0:5e:
76:87:1c:3d:28:f9:8e:cf:5c:f3:af:88:f4:0f:6b:e5:8c:bc:
80:eb:7e:76:4f:56:da:48:fb:64:d5:03:49:f7:5c:07:21:d9:
48:90:9d:3d:50:90:f6:de:52:f8:a2:b3:49:c5:eb:43:ca:a1:
79:e0:a6:8d:b9:99:1b:24:53:d6:b9:21:cc:76:0c:43:62:53:
bc:51:44:b1:81:99:21:70:5c:4a:d1:60:b7:ae:b0:94:fc:0e:
af:7c:b2:95:2e:e2:f5:72:20:6e:80:5b:32:33:1f:63:57:2d:
00:72:d9:1f:24:7a:b1:66:37:31:fd:19:37:c9:62:71:5d:a4:
0c:92:46:68:72:b9:28:22:9b:01:0e:42:e3:f2:c8:8e:7c:23:
53:60:0c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:46 2024 by rpki-client on console-fra.rpki-client.org