Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/g_Iks9EjlkX11PT0K3PsTQpY1z4.roa
File: g_Iks9EjlkX11PT0K3PsTQpY1z4.roa (raw, json)
Hash identifier: SmhrLATYCHXnkBtAtxk+5sxs4sp7zOaauXXFcnBpNHo=
Subject key identifier: 83:F2:24:B3:D1:23:96:45:F5:D4:F4:F4:2B:73:EC:4D:0A:58:D7:3E
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018CC79558ACA8BD8BF350B91F97CCA26F47
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/g_Iks9EjlkX11PT0K3PsTQpY1z4.roa
Signing time: Tue 02 Jan 2024 00:31:42 +0000
ROA not before: Tue 02 Jan 2024 00:31:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57009
IP address blocks: 89.43.55.0/24 maxlen: 24
94.176.97.0/24 maxlen: 24
93.115.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Feb 2024 05:57:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:58:ac:a8:bd:8b:f3:50:b9:1f:97:cc:a2:6f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:31:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83f224b3d1239645f5d4f4f42b73ec4d0a58d73e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1f:9f:92:3e:5f:2a:e4:fa:ef:06:3e:dd:f5:
d1:f4:01:9d:ef:14:5f:fc:70:0f:6d:a0:3d:6a:79:
9a:c5:11:0e:bd:33:7c:3c:38:e2:59:a2:c8:aa:26:
2a:4c:1e:ef:49:07:87:cf:65:ce:ce:a6:d4:47:fb:
f8:8a:1c:61:c1:5b:ab:ea:5a:11:80:8a:a5:ea:b2:
e0:c0:6e:87:16:db:94:59:7f:9e:4f:48:8e:fb:af:
8f:e3:f4:88:a1:e9:c5:2b:f7:cd:c8:9a:08:5f:d2:
6c:8f:2d:ae:4f:a0:d2:0a:41:4e:23:c1:24:8f:65:
a4:d0:df:0a:1f:ba:e1:40:0e:1b:fa:4d:ad:9e:6b:
82:68:ec:f0:3e:e1:78:1e:8f:76:48:bb:b4:77:25:
ac:7b:66:c4:0e:20:b5:58:2e:97:ca:d0:00:96:81:
9c:55:6b:54:be:5a:13:14:75:86:4c:62:64:70:c6:
c2:f3:4d:71:8c:ee:07:2d:af:9d:4c:90:0c:de:e9:
1d:36:2a:b6:66:9f:81:33:b6:ea:a1:08:03:72:17:
e6:cf:5d:b1:37:89:a0:14:97:db:ae:b6:c3:ac:0f:
2a:68:56:95:80:1a:50:e8:a0:e8:86:35:34:28:f9:
ec:ba:b8:61:24:3f:98:31:fe:57:60:03:4f:a3:82:
dd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F2:24:B3:D1:23:96:45:F5:D4:F4:F4:2B:73:EC:4D:0A:58:D7:3E
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/g_Iks9EjlkX11PT0K3PsTQpY1z4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.43.55.0/24
93.115.9.0/24
94.176.97.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:48:bc:96:f5:3d:1c:8c:a9:04:82:18:a5:5f:b7:fe:32:ac:
93:8a:46:20:7e:49:77:3e:53:0e:ce:a5:b3:31:7c:9d:2e:c2:
a3:99:60:05:53:24:43:d4:ec:d1:80:2c:a5:2d:cf:bd:51:54:
bf:4e:98:9f:af:fe:29:73:5d:36:53:1e:e3:56:44:72:80:7e:
96:86:6a:3d:ad:20:ce:1a:95:09:41:9f:19:56:e8:93:0d:f6:
35:47:3d:e7:73:2e:5f:3a:46:08:d3:32:ef:15:d0:0f:f1:24:
53:de:0e:20:4a:aa:2e:d1:b3:2e:be:fe:be:24:cc:90:30:13:
71:99:c4:cf:93:19:de:e5:99:5c:59:ba:0d:4d:d7:86:e3:58:
d3:63:b1:1d:63:a3:aa:87:81:bf:0e:6e:1d:cc:c1:7c:10:cc:
56:ac:09:e2:c8:36:4b:14:9a:91:2f:5e:b1:d6:a2:84:02:48:
15:54:86:58:3f:55:95:57:db:dc:86:47:1c:62:89:95:be:03:
b3:c0:35:3f:5e:5a:df:98:4e:d1:5f:d7:48:a1:60:df:6c:8c:
f3:bd:8a:93:9a:9e:67:38:6e:9b:78:83:cc:dd:82:42:60:aa:
7c:78:e8:07:37:48:22:6c:37:75:f3:36:8f:d8:24:ba:77:20:
7d:2b:ac:41
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Feb 1 10:43:26 2024 by rpki-client on console-fra.rpki-client.org