Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/CNUjSH6buF0EOdKdgfcq_USMhYU.roa
File: CNUjSH6buF0EOdKdgfcq_USMhYU.roa (raw, json)
Hash identifier: WyY9bYOf9edkd4T4xaKC2gtl/dAx6i2KtbY2wdYD314=
Subject key identifier: 08:D5:23:48:7E:9B:B8:5D:04:39:D2:9D:81:F7:2A:FD:44:8C:85:85
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018A03EE048BE9F817A545F1C85B286C5273
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/CNUjSH6buF0EOdKdgfcq_USMhYU.roa
Signing time: Thu 17 Aug 2023 14:37:24 +0000
ROA not before: Thu 17 Aug 2023 14:37:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20616
IP address blocks: 89.34.107.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:03:ee:04:8b:e9:f8:17:a5:45:f1:c8:5b:28:6c:52:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Aug 17 14:37:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=08d523487e9bb85d0439d29d81f72afd448c8585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c2:f8:d9:e1:e1:52:76:f1:c7:f5:95:cd:42:
13:e3:ef:20:91:5c:7f:70:d2:cd:56:c9:14:a5:cb:
5d:1b:6c:73:aa:5f:23:28:1b:78:7f:60:05:d7:9b:
91:10:8d:dc:6b:75:18:c2:19:1a:68:b5:ec:e8:f5:
5e:55:17:a2:63:e5:79:c3:d2:98:d4:1a:44:2a:7b:
1a:00:bc:95:a9:24:f1:77:5a:50:53:91:6b:11:aa:
29:e8:19:0a:cd:29:37:c4:2d:91:ba:5b:a2:43:40:
b9:96:39:c7:73:76:74:2e:7e:79:5c:d7:c1:11:23:
7c:d7:59:c4:1d:2c:de:49:83:59:1e:c6:84:75:63:
a5:ce:be:18:7c:c8:47:66:d8:a6:2f:bc:e8:84:1e:
00:d9:78:f0:f6:4d:cd:ca:12:c9:11:50:92:a3:20:
27:47:55:33:f5:79:4b:4f:ce:11:a8:ac:01:78:b4:
61:1d:cf:2a:f2:fc:7b:5e:28:da:80:5e:51:ce:fa:
fd:dd:67:f5:eb:f0:23:14:04:83:cc:d5:63:dd:05:
93:c3:84:bc:a6:7f:81:1e:88:0e:27:f4:f8:fd:b8:
5a:93:34:e4:fa:35:f7:01:bd:a6:e3:c2:13:e7:35:
99:21:46:e2:4a:d5:56:5f:fc:75:4f:01:80:c5:87:
ef:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D5:23:48:7E:9B:B8:5D:04:39:D2:9D:81:F7:2A:FD:44:8C:85:85
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/CNUjSH6buF0EOdKdgfcq_USMhYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.107.0/24
Signature Algorithm: sha256WithRSAEncryption
16:e0:90:42:a1:9d:c0:6a:9e:80:91:70:b7:35:4d:f9:b4:b9:
e5:1d:31:75:ce:f5:99:94:96:44:10:43:b7:f8:a4:d5:00:2b:
34:ea:da:fd:b6:12:99:7a:d0:c9:f4:b1:3b:6b:ca:47:a7:5c:
3a:06:fa:b1:51:b9:84:df:23:55:d7:90:5f:b5:f4:88:56:ba:
29:84:4e:3a:d4:1f:e6:4e:86:4b:69:7a:de:61:5d:f1:14:33:
3d:90:d1:e1:88:4e:16:2b:78:79:cc:21:bf:ce:4d:ae:92:98:
2e:7a:0c:c4:31:e5:5e:be:5b:d2:2b:96:69:7f:0d:79:da:84:
5d:40:43:db:26:60:f2:90:df:0d:47:d2:37:b2:40:45:e9:b1:
fd:82:e5:56:41:a9:d9:e7:6e:2f:06:a2:49:4f:8c:ae:c6:eb:
54:60:07:57:d9:44:dc:3e:4a:2b:6a:e8:68:d0:05:b2:04:13:
e5:93:51:ef:82:e8:bd:a1:71:b8:75:ba:5c:33:f8:30:48:82:
45:f6:49:da:1e:59:f3:da:98:4b:5b:f4:6e:a8:36:bb:5e:8f:
c0:dd:2c:fb:3c:d6:37:0d:48:b8:db:d1:30:48:c8:7b:f4:40:
3a:db:c7:6c:7d:e9:6e:8f:22:10:de:fe:2b:05:df:15:f6:5b:
a0:31:28:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:52 2024 by rpki-client on console-fra.rpki-client.org