Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/CgdpkT2Bp3MDcA8Ue8U1xyfz5v8.roa
File: CgdpkT2Bp3MDcA8Ue8U1xyfz5v8.roa (raw, json)
Hash identifier: He8xcNQvsmKadYHpIDAMRwk4SmLoZz5cdv4h9ayESW4=
Subject key identifier: 0A:07:69:91:3D:81:A7:73:03:70:0F:14:7B:C5:35:C7:27:F3:E6:FF
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01856FD547A0B906849BE8D01D4EF4B64B36
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/CgdpkT2Bp3MDcA8Ue8U1xyfz5v8.roa
Signing time: Mon 02 Jan 2023 00:15:26 +0000
ROA not before: Mon 02 Jan 2023 00:15:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62322
IP address blocks: 89.33.132.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:47:a0:b9:06:84:9b:e8:d0:1d:4e:f4:b6:4b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:15:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a0769913d81a77303700f147bc535c727f3e6ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d6:d5:ac:ce:36:c0:2e:b4:f4:f4:36:9f:15:
1e:2f:f2:6f:d8:7f:95:c3:2d:fa:ba:24:3a:a8:f9:
b7:8c:03:f0:20:be:86:bf:2e:85:76:e2:f6:43:e3:
50:71:89:ee:85:9c:1d:6e:80:25:29:73:82:1c:85:
58:58:b2:d7:37:de:a8:8b:43:c6:0a:7d:58:de:00:
dd:54:c0:25:45:b4:b5:85:57:97:ba:4a:05:d2:cc:
31:1b:36:d3:c7:7e:88:49:50:72:80:84:db:dd:fd:
89:6a:3a:87:d3:53:a9:1e:8c:a5:e0:fe:20:96:37:
d5:92:cd:d2:4f:1d:8c:08:38:05:ad:9d:24:22:21:
fd:10:12:81:df:e9:9a:f7:39:8b:66:68:5d:cd:ae:
03:64:3b:89:07:35:95:a4:a9:6c:08:16:9b:dc:0f:
de:98:72:0d:08:22:51:99:58:32:14:c7:40:9b:39:
a5:8e:82:c6:bc:59:3c:9a:e6:14:29:1f:92:8f:a6:
6a:6b:6b:88:c2:38:2b:d8:56:dd:86:2a:35:f5:6b:
08:80:0c:21:96:fa:98:2d:a9:5b:40:a2:00:ba:b5:
42:5c:82:3b:7d:44:61:07:70:3b:9d:0a:a7:af:06:
da:93:86:2a:b6:70:28:fa:c6:6f:f0:7d:ae:97:88:
bd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:07:69:91:3D:81:A7:73:03:70:0F:14:7B:C5:35:C7:27:F3:E6:FF
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/CgdpkT2Bp3MDcA8Ue8U1xyfz5v8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.132.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:2a:ee:62:c2:cf:db:75:a0:f8:72:03:9e:e9:a9:8f:46:d4:
02:0e:f7:ac:ac:6e:b4:47:68:f9:50:e8:f8:23:5c:3a:95:52:
0a:28:92:06:5d:e6:13:26:c0:c3:0c:32:84:68:1e:29:3e:b8:
99:d8:70:15:e0:0d:6d:cd:78:66:2c:7d:b7:8e:d3:4e:b7:b1:
e0:a7:bf:5d:64:5b:39:c4:69:d5:22:43:5c:e7:a4:79:e8:5b:
7e:80:d1:b2:1f:1a:75:77:1a:02:a4:05:a4:7e:ca:e4:5c:26:
a9:f3:fc:d7:19:e8:9a:90:4f:49:5a:69:35:79:5a:83:68:04:
4e:41:dc:f5:df:61:65:b5:32:a8:4e:bb:38:e1:51:ed:9a:cf:
ca:97:f5:f3:d5:8e:66:0c:bb:30:ed:f2:c1:cd:66:21:a4:6d:
89:fb:6a:f0:5e:93:48:c3:26:b8:25:e4:e3:c5:8f:80:f2:c0:
79:e9:5d:84:53:33:da:fc:31:17:9f:81:42:7b:c3:e0:11:0c:
ef:9d:4b:7d:6e:7a:fc:d9:1a:2f:0e:0d:cd:8b:bf:32:6d:76:
64:08:45:f0:df:0d:82:9e:b2:15:d8:03:96:9e:ac:58:83:34:
a3:24:8d:13:20:81:8f:64:24:32:36:50:83:1b:20:84:c8:fd:
3f:f8:e3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:52 2024 by rpki-client on console-fra.rpki-client.org