Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/PXOXzVIyM0cY2Tm_E9gVWDPD_6M.roa
File: PXOXzVIyM0cY2Tm_E9gVWDPD_6M.roa (raw, json)
Hash identifier: BXMvKWQ6nsA3h6bOnCmhuDrj87X5ce78huDahzMJr+0=
Subject key identifier: 3D:73:97:CD:52:32:33:47:18:D9:39:BF:13:D8:15:58:33:C3:FF:A3
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01856FD520DD738715321439DE269735E3C5
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/PXOXzVIyM0cY2Tm_E9gVWDPD_6M.roa
Signing time: Mon 02 Jan 2023 00:15:16 +0000
ROA not before: Mon 02 Jan 2023 00:15:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42616
IP address blocks: 89.33.105.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:20:dd:73:87:15:32:14:39:de:26:97:35:e3:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:15:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d7397cd5232334718d939bf13d8155833c3ffa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:57:ac:94:29:32:c8:d5:5b:75:30:80:a6:ca:
44:f7:da:e2:bd:0b:8e:b0:8d:71:9e:30:7e:a5:57:
0b:d0:41:04:49:49:96:ae:23:59:ea:11:66:f5:ba:
48:6c:27:b4:3c:43:c1:09:5e:3d:10:8e:5f:43:52:
4f:e6:7e:b0:79:bd:eb:86:8a:18:61:07:9e:9e:3f:
c3:38:e9:8f:1a:a6:77:19:fa:32:5b:8b:47:a4:78:
cb:5d:cc:c9:42:d3:f0:fd:e7:95:64:54:4f:78:e2:
a9:bb:f8:da:98:aa:26:6f:6f:7f:ac:66:eb:3d:de:
80:26:f6:dc:a7:7f:b3:60:ed:bc:cc:50:05:a6:eb:
02:9e:ab:c4:67:e2:d8:a2:d2:56:f5:ec:2a:8c:8b:
e1:0f:b0:53:6d:87:83:9b:96:da:1f:c6:4d:90:21:
e3:d0:8c:9d:c6:56:33:55:78:3f:6b:61:e9:0d:7e:
e1:7d:86:9d:2b:69:f4:8f:29:d4:d4:66:f2:37:02:
0a:36:6a:f5:41:e9:7f:a7:d3:3f:6a:fa:81:02:1c:
40:02:c0:5e:21:91:29:ac:1d:bd:77:83:fb:9e:ab:
e4:54:a5:5c:6a:89:ee:de:8c:73:98:f4:b8:8f:c1:
ec:5c:d3:33:4a:d0:07:d7:93:3c:53:d1:42:53:29:
be:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:73:97:CD:52:32:33:47:18:D9:39:BF:13:D8:15:58:33:C3:FF:A3
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/PXOXzVIyM0cY2Tm_E9gVWDPD_6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.105.0/24
Signature Algorithm: sha256WithRSAEncryption
32:23:d0:d6:44:89:90:28:45:3c:db:1c:93:c1:42:a8:8b:08:
fe:ac:96:0b:52:0b:48:c2:52:3a:d0:92:d3:f1:32:79:6b:6a:
38:6b:99:d3:4a:1d:9c:14:29:a1:d9:f1:22:e4:da:7c:0e:2e:
42:a4:15:62:7d:ec:b3:89:04:f8:31:74:62:be:f1:c8:ac:f9:
e1:ef:4c:8c:18:77:e4:58:36:36:87:ad:85:24:c5:00:89:d7:
5e:71:cd:7a:ee:26:f5:c2:f4:f8:61:f3:94:a8:71:0d:97:e7:
b7:da:a0:4d:e4:27:6a:83:da:ec:31:92:01:d9:aa:38:f3:fb:
26:75:01:5b:9c:f9:fb:de:46:6d:03:38:bb:1c:0c:cf:b7:ef:
4c:03:4e:12:fb:46:ea:3e:7b:b5:6c:1f:19:b1:57:45:f2:8f:
19:f8:8d:5f:e4:69:f7:db:e6:af:da:18:8e:1d:90:35:ec:dd:
e1:e1:1d:55:02:a6:fb:51:fa:8b:d8:62:08:50:54:4e:e0:bb:
fe:91:25:d2:1f:d2:e0:a5:dd:bf:cc:8a:6b:14:46:50:35:9e:
2c:d1:ba:54:10:25:ed:cc:5c:8a:71:b3:b6:ee:c1:86:17:c7:
32:bf:b1:13:4e:ae:5b:30:6f:c2:15:02:25:cf:2d:1c:fd:f9:
bf:f5:af:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:10:05 2024 by rpki-client on console-ams.rpki-client.org