Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/24A5RaQPsTVkTnGnAIg1FzWWDMs.roa
File: 24A5RaQPsTVkTnGnAIg1FzWWDMs.roa (raw, json)
Hash identifier: 9k+wkJQsvGcNtDtuvADrMUPKHios7XnvyPQfh7Wggz4=
Subject key identifier: DB:80:39:45:A4:0F:B1:35:64:4E:71:A7:00:88:35:17:35:96:0C:CB
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0186CB934C1AF5554257798D553A6B7E1E74
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/24A5RaQPsTVkTnGnAIg1FzWWDMs.roa
Signing time: Fri 10 Mar 2023 12:51:13 +0000
ROA not before: Fri 10 Mar 2023 12:51:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16276
IP address blocks: 89.251.8.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cb:93:4c:1a:f5:55:42:57:79:8d:55:3a:6b:7e:1e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Mar 10 12:51:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=db803945a40fb135644e71a70088351735960ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3f:5e:f7:29:0c:3e:ac:c4:84:da:8b:ed:c7:
b2:58:d5:b5:16:d0:a8:55:57:91:12:89:8b:0d:56:
7f:5c:2f:88:65:62:24:ee:e9:20:c6:df:f3:a1:a4:
91:e8:a0:6a:57:6f:27:27:aa:77:4f:d3:36:78:40:
ec:c2:8a:f9:56:ce:d5:f1:60:bd:c9:91:9c:ff:a0:
1a:54:c2:8a:78:08:d8:6f:0b:f9:2e:7a:b9:de:fb:
4d:7b:69:b8:a3:93:72:da:1d:7a:4d:03:4a:05:00:
3b:fc:5a:10:b1:6a:9b:ff:0e:7e:30:dd:68:f3:5c:
ac:6e:3c:8e:29:ce:66:cb:c5:95:f1:d6:d5:64:59:
90:f0:6d:87:f8:dd:cb:e4:72:e4:24:6f:ff:c6:26:
e3:63:1d:e2:50:8c:ca:56:b0:ee:7f:88:d4:ca:47:
6f:b2:09:d9:df:bd:c8:a3:58:3c:1f:82:67:51:d2:
30:99:ca:65:6b:b2:37:80:d8:3b:b6:67:84:a7:6b:
13:1c:e3:77:f0:ab:5b:fa:17:84:29:69:95:da:c9:
c1:bd:67:1d:87:64:b3:bb:1d:32:11:01:18:41:07:
21:7d:7d:6a:6a:da:69:53:47:a0:e1:3b:9b:db:01:
e2:c4:96:c1:ce:80:19:be:75:a7:12:31:07:4e:c3:
b4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:80:39:45:A4:0F:B1:35:64:4E:71:A7:00:88:35:17:35:96:0C:CB
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/24A5RaQPsTVkTnGnAIg1FzWWDMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.8.0/22
Signature Algorithm: sha256WithRSAEncryption
52:f8:a7:f8:50:70:f2:ee:bb:02:ac:dd:53:2e:9b:81:bc:85:
24:83:4d:ad:7b:8a:7b:78:26:19:00:49:2e:7d:ce:52:55:01:
17:e8:4c:03:2e:a1:5e:81:2c:0d:14:4f:11:dd:40:16:06:e0:
40:60:7c:7f:d6:e0:ec:26:7a:df:b6:4a:ba:a9:14:24:65:1a:
5f:98:05:04:36:48:b9:ad:29:79:b6:66:ee:f5:23:79:1a:8b:
58:1e:9e:7d:4f:89:00:60:bc:d4:ee:a8:d4:31:83:a3:0e:e1:
79:8b:09:17:72:25:42:59:b4:53:c1:80:e6:eb:a0:8e:b8:70:
b3:e1:d9:25:96:ae:bf:e3:33:43:e9:4b:c0:3c:1e:d1:83:be:
c6:67:17:71:c2:a4:12:72:97:e0:4e:21:0a:a0:ce:dc:e3:fe:
0d:5f:bf:89:ca:28:ac:f2:cd:ef:ec:19:fd:59:f1:6f:75:17:
22:1f:f0:c6:48:53:a7:fa:af:75:b5:0b:18:85:93:a1:d9:76:
c1:0a:c7:bc:35:c1:27:b8:d6:02:96:78:5e:2b:3b:da:d0:b0:
23:e4:80:63:f5:3e:ad:ed:3f:5e:b8:5d:57:5c:e3:8c:38:19:
01:6f:e1:89:2f:d9:ff:11:3a:0b:26:e6:15:8e:55:b4:5d:8a:
c7:7f:64:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:24 2023 by rpki-client on console-ams.rpki-client.org