Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/jF0-_1Xzlj4JDX-bK8WfuiGV-Qs.roa
File: jF0-_1Xzlj4JDX-bK8WfuiGV-Qs.roa (raw, json)
Hash identifier: PfZYpSKgYlTbEb26XsjV01TAs/dyg54v8B7KDaaS5PY=
Subject key identifier: 8C:5D:3E:FF:55:F3:96:3E:09:0D:7F:9B:2B:C5:9F:BA:21:95:F9:0B
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01856FD540838EA904BE83488103D2A51E63
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/jF0-_1Xzlj4JDX-bK8WfuiGV-Qs.roa
Signing time: Mon 02 Jan 2023 00:15:24 +0000
ROA not before: Mon 02 Jan 2023 00:15:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61050
IP address blocks: 89.44.122.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:40:83:8e:a9:04:be:83:48:81:03:d2:a5:1e:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:15:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c5d3eff55f3963e090d7f9b2bc59fba2195f90b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:47:ea:20:6d:10:57:4d:51:9e:e1:47:93:10:
4b:1d:5f:ee:6a:2b:87:84:58:10:86:57:c2:31:c3:
bd:b9:39:7b:70:23:26:47:f6:26:1e:61:51:cf:a1:
c6:13:e1:04:b6:97:1b:6a:f1:51:02:88:50:f9:c7:
2c:ce:00:ae:fb:e2:7b:4a:51:45:13:70:d2:05:31:
27:e9:ed:5a:5a:8b:ca:b3:72:2c:2c:5b:ad:b2:a6:
f9:7f:ce:b4:87:1e:0b:e4:c5:64:75:49:a6:98:73:
5f:9a:4c:df:81:37:78:bf:9a:52:16:5b:fe:19:57:
2f:fd:7c:1f:ef:04:7a:4e:0b:08:5f:3b:5f:79:61:
66:bc:7a:19:f9:e9:fb:5a:17:40:1a:98:12:b1:32:
e2:81:70:1f:6e:83:b0:ee:6a:8d:06:e9:68:98:62:
2d:e2:f0:48:d8:64:e8:2f:6f:08:8c:87:42:58:33:
29:26:a8:58:cd:66:cc:2d:09:c2:b0:a3:e5:fc:3f:
b3:e0:b5:54:a8:48:fe:ff:fc:39:3c:e7:ce:52:d8:
96:ac:b8:98:98:99:cd:a7:d1:fc:12:7b:6d:43:ea:
9c:d8:62:11:33:69:ca:3f:c5:8f:e2:28:2c:f8:41:
4d:44:05:1f:50:64:80:fd:66:a0:46:71:92:8c:27:
a3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:5D:3E:FF:55:F3:96:3E:09:0D:7F:9B:2B:C5:9F:BA:21:95:F9:0B
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/jF0-_1Xzlj4JDX-bK8WfuiGV-Qs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.122.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:b9:24:06:d2:bc:b2:68:06:02:c3:e6:78:78:fd:9f:77:d2:
b8:f4:3a:55:a6:cc:4e:68:12:94:1e:84:e6:77:43:f6:3f:f3:
72:75:0c:3c:6b:9b:7c:08:62:05:79:57:12:51:54:f0:2b:75:
8d:c1:f9:4e:53:c7:37:62:e8:d0:e1:6d:04:a9:f3:7b:b5:3b:
d1:8d:82:da:2d:be:4e:d0:e0:2b:8f:de:d7:51:1e:79:43:80:
e2:b2:94:35:0a:87:74:82:2f:2b:bf:e0:f1:48:3c:67:53:d8:
1f:69:0f:d5:31:bb:fd:c5:5b:81:ad:a9:c4:81:53:0e:82:7e:
61:a6:06:7a:64:67:4f:a2:b9:03:5a:8c:07:9d:4a:4c:1c:79:
8d:0b:dd:3f:27:f6:7c:db:98:be:32:5b:11:5b:fa:14:0f:f9:
17:04:61:92:16:04:37:18:56:39:dc:63:97:55:6f:96:3c:01:
3f:3e:d5:8f:68:da:cb:2d:4c:28:58:c4:d5:a8:60:77:94:d7:
c3:2f:0b:4a:61:ec:95:a3:0b:a3:dd:34:c4:35:db:01:a7:40:
54:7e:d5:8b:e7:86:ec:2f:5a:19:20:0a:66:34:f4:8d:c7:29:
1a:ff:a7:bf:f1:ad:f4:14:61:e0:cb:51:e8:d8:38:07:6e:b7:
55:2c:96:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:10:05 2024 by rpki-client on console-ams.rpki-client.org