Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/AfDR39cN1ewlg9ovWb3EhLlWuhI.roa
File: AfDR39cN1ewlg9ovWb3EhLlWuhI.roa (raw, json)
Hash identifier: jqEv+E9pH7FDX/VV0ZZzOipBPg3Z6d0CI37JWM6iSvo=
Subject key identifier: 01:F0:D1:DF:D7:0D:D5:EC:25:83:DA:2F:59:BD:C4:84:B9:56:BA:12
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01856FD5120C9C54A9B0931D25D14F49C9FE
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/AfDR39cN1ewlg9ovWb3EhLlWuhI.roa
Signing time: Mon 02 Jan 2023 00:15:12 +0000
ROA not before: Mon 02 Jan 2023 00:15:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16157
IP address blocks: 89.44.76.0/24 maxlen: 24
93.119.195.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:12:0c:9c:54:a9:b0:93:1d:25:d1:4f:49:c9:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:15:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01f0d1dfd70dd5ec2583da2f59bdc484b956ba12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c4:59:b9:8a:ba:77:9f:7a:e9:79:24:6a:10:
5f:c9:7d:e3:1a:37:17:78:76:01:5c:07:87:6b:6b:
7e:67:2e:b9:57:ea:16:b5:63:40:3e:d7:5c:a1:e8:
ed:1e:81:ea:90:c7:a0:3f:4d:f9:f5:3e:49:1e:c3:
90:d4:18:38:50:6b:cf:d8:c3:fa:06:b5:7d:5a:54:
9c:de:bc:5d:84:67:30:c6:a8:f7:fa:7f:e3:b8:62:
79:1f:48:d2:5c:22:52:33:0e:c6:6a:03:48:5e:76:
26:7b:cc:71:24:c3:12:6f:96:9d:ba:5c:5a:56:82:
f4:8b:66:32:c0:6f:ab:7f:1b:44:f5:5d:de:19:7a:
78:88:f8:94:8f:fe:77:39:00:08:dc:cf:b5:81:d3:
67:7a:bd:96:4b:11:24:2d:3a:60:cf:84:60:95:1e:
23:b3:1c:9f:36:c0:31:92:a4:51:61:86:6d:d5:71:
0e:3c:00:7d:11:62:a7:19:a9:64:ed:bf:6e:ad:00:
d5:45:02:1c:31:60:1b:c6:19:32:05:df:75:4f:a8:
e6:59:95:43:35:f8:66:ea:e1:56:4a:22:c1:27:64:
f8:01:8d:57:85:bf:bf:25:19:99:a8:a0:71:ac:4e:
20:78:67:b8:7a:35:4b:e4:17:92:d0:cc:06:e6:8d:
26:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F0:D1:DF:D7:0D:D5:EC:25:83:DA:2F:59:BD:C4:84:B9:56:BA:12
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/AfDR39cN1ewlg9ovWb3EhLlWuhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.76.0/24
93.119.195.0/24
Signature Algorithm: sha256WithRSAEncryption
08:2e:db:c2:61:f6:fb:c8:5c:35:5d:09:7f:c2:58:75:12:b1:
47:5e:2b:84:0a:8e:b6:5f:c0:d3:52:e1:b2:f3:44:bd:0b:bf:
8c:f2:96:be:a1:08:57:ce:0f:30:15:04:3f:80:67:14:20:02:
26:a2:1d:60:6f:28:01:82:cb:c0:d9:5c:49:ac:f6:6a:19:65:
7f:cc:1a:fd:45:f8:f6:b5:1e:2b:11:f3:56:50:7f:27:1d:67:
f7:40:1b:27:0d:d5:f9:0e:48:29:39:96:c1:83:7d:df:09:87:
14:d0:79:52:f1:b8:e1:d3:bc:b3:a9:9b:3c:1f:c3:03:c0:bd:
42:ff:96:9f:1e:a2:fe:64:c9:c7:f2:e7:b3:11:23:9a:98:41:
62:fe:ec:26:96:f5:ea:aa:e3:ab:c5:d1:ff:dc:69:60:b7:13:
60:27:32:fc:e9:c7:47:99:29:db:ef:34:86:93:ec:a8:0d:1c:
7c:cd:36:f9:e8:4b:ca:99:da:f8:90:b3:7e:22:cc:13:0e:31:
9a:8e:77:a8:f1:c9:2b:80:4a:6b:f5:81:90:4a:08:f7:e4:3c:
ba:13:33:03:94:6f:bf:b8:b1:e0:40:cd:96:0f:e7:25:75:08:
b8:cb:66:53:9e:43:6d:93:0e:b1:05:31:33:43:df:de:f6:f8:
8a:bd:77:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:52 2024 by rpki-client on console-fra.rpki-client.org