Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/3XMmIggWPuDz7UlHQ2h1FFbFOCk.roa
File: 3XMmIggWPuDz7UlHQ2h1FFbFOCk.roa (raw, json)
Hash identifier: PQA0kRCEiiIiBZrVqRNMcxjxAVbUCy2vxPAqacRpwUs=
Subject key identifier: DD:73:26:22:08:16:3E:E0:F3:ED:49:47:43:68:75:14:56:C5:38:29
Certificate issuer: /CN=4a4b513f7e446e0cd6dcfe56829bbc9fe498d3e8
Certificate serial: 01856E8B61885487FC610238E4FF5EA2E79D
Authority key identifier: 4A:4B:51:3F:7E:44:6E:0C:D6:DC:FE:56:82:9B:BC:9F:E4:98:D3:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SktRP35EbgzW3P5Wgpu8n-SY0-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/3XMmIggWPuDz7UlHQ2h1FFbFOCk.roa
Signing time: Sun 01 Jan 2023 18:15:06 +0000
ROA not before: Sun 01 Jan 2023 18:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41696
IP address blocks: 89.221.176.0/20 maxlen: 24
2a02:e28::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:61:88:54:87:fc:61:02:38:e4:ff:5e:a2:e7:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4b513f7e446e0cd6dcfe56829bbc9fe498d3e8
Validity
Not Before: Jan 1 18:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd73262208163ee0f3ed49474368751456c53829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b6:b0:22:cb:99:f2:d9:2a:88:1d:8d:7c:29:
76:cc:90:9a:7b:44:68:a8:b0:e2:04:4f:ac:fd:fa:
f9:6e:b6:db:f5:17:7a:68:93:7a:49:97:1c:08:2c:
c9:05:42:be:88:f7:83:69:41:3d:8a:55:f5:49:13:
89:4b:79:37:36:26:59:60:94:08:d6:40:88:28:d9:
8d:1c:ee:6d:89:c7:f5:cb:90:e1:24:1f:92:ac:5b:
f4:33:74:a0:4a:08:11:10:58:4e:ca:8c:59:6e:f4:
5e:12:c0:66:8e:68:e5:83:54:75:ff:10:2a:4c:fb:
0d:3d:e3:7f:c7:d8:7c:c8:6b:90:a9:1b:12:71:f9:
72:26:88:05:d1:6c:00:ec:bf:40:25:e2:d1:ae:1b:
54:84:e8:bb:08:4a:10:42:d9:bc:95:24:5b:cd:5b:
69:14:75:52:ee:cd:88:b1:b0:2b:03:f9:0c:33:20:
89:74:59:68:d6:02:79:fa:7c:4b:49:37:02:34:5a:
5d:b4:29:2d:db:88:a1:5b:5f:dd:09:6c:28:b2:34:
2d:7a:17:62:a9:f8:ce:bb:a7:3c:27:e2:41:26:83:
ed:82:70:00:86:f9:65:a7:e6:bd:2f:d4:d5:ab:81:
e0:8c:83:a7:ca:a7:44:78:62:da:ac:37:4e:43:36:
b6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:73:26:22:08:16:3E:E0:F3:ED:49:47:43:68:75:14:56:C5:38:29
X509v3 Authority Key Identifier:
keyid:4A:4B:51:3F:7E:44:6E:0C:D6:DC:FE:56:82:9B:BC:9F:E4:98:D3:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SktRP35EbgzW3P5Wgpu8n-SY0-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/3XMmIggWPuDz7UlHQ2h1FFbFOCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.221.176.0/20
IPv6:
2a02:e28::/32
Signature Algorithm: sha256WithRSAEncryption
c1:0c:82:7d:0b:99:25:72:d0:22:f1:14:be:9d:2a:34:6a:91:
c1:fc:f3:56:07:59:65:68:d8:64:b6:f7:80:24:69:06:d0:d1:
e0:a8:3e:e2:7c:64:46:4c:83:43:76:42:52:c9:46:8d:4f:0a:
ad:11:9f:46:b9:d4:b7:00:57:f5:32:68:d5:9f:64:b4:a9:69:
fa:31:3d:8d:57:eb:e2:92:8b:ce:76:50:a8:67:21:37:bd:a9:
ee:2e:59:1f:69:66:60:57:e6:07:e7:ed:ef:7d:90:c8:11:97:
66:99:ee:44:5f:f9:0b:76:0d:78:1c:fb:40:0a:d6:8a:72:d7:
99:a7:b5:ca:28:c7:f7:99:45:77:bf:b6:d2:30:93:34:e5:1b:
12:88:5f:44:1c:8c:cb:85:3c:d5:ef:cc:17:ed:47:69:7b:62:
ea:61:1e:0e:5e:74:c0:53:d4:f3:13:e0:24:a0:20:72:aa:a3:
2b:a8:01:a0:0d:ca:2d:1f:ea:6a:47:5a:d1:fc:c4:46:e2:d0:
e5:85:bd:21:13:9b:79:8e:cd:dd:64:e5:df:b8:bd:6e:f9:da:
31:fa:0a:73:c6:17:ec:7c:0f:81:f0:2a:12:df:65:6b:7f:a2:
03:a4:87:e6:74:c3:7e:bb:0c:dd:c8:9a:ea:3d:40:b4:04:4a:
46:5d:01:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:59 2024 by rpki-client on console-ams.rpki-client.org