Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/lUP5ndcyk1qrGQr71W3s4E_Hmkw.roa
File: lUP5ndcyk1qrGQr71W3s4E_Hmkw.roa (raw, json)
Hash identifier: JbsiIc0qiqtRi5A5vGXxiAOKneuvjvll7e4ZX3Fs9uo=
Subject key identifier: 95:43:F9:9D:D7:32:93:5A:AB:19:0A:FB:D5:6D:EC:E0:4F:C7:9A:4C
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01856FD53CC4BEC0EC1283119138EF861E58
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/lUP5ndcyk1qrGQr71W3s4E_Hmkw.roa
Signing time: Mon 02 Jan 2023 00:15:23 +0000
ROA not before: Mon 02 Jan 2023 00:15:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60118
IP address blocks: 89.42.26.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:3c:c4:be:c0:ec:12:83:11:91:38:ef:86:1e:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:15:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9543f99dd732935aab190afbd56dece04fc79a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9f:f5:66:90:ca:27:ce:59:24:2a:a6:ee:6d:
a9:48:d0:37:c0:8e:21:39:35:d7:77:cc:36:d1:6f:
04:e2:e4:d7:95:59:7f:3d:73:51:49:5c:c8:34:b2:
8e:8d:ce:71:a2:50:1b:25:9a:fe:13:75:7a:b0:d4:
c8:22:46:8c:26:41:f9:0d:aa:c7:69:b1:dc:8b:51:
2c:c9:35:9d:ca:46:07:66:c5:42:07:e0:c5:12:84:
cd:ac:d2:97:d8:d3:e5:1f:98:e2:d7:8b:66:f6:1c:
be:b7:8b:e9:68:f0:8f:61:5a:1b:ce:c2:20:6b:05:
36:12:d9:f5:bf:7d:4b:3c:59:c6:af:d4:f7:d8:54:
c8:5a:b1:95:07:38:ca:31:6b:9d:bc:01:6f:3a:68:
7f:ba:ab:83:ba:74:0c:c4:57:cd:77:78:50:b3:42:
4d:1e:65:d7:7d:46:2a:03:1c:15:df:d2:7a:61:e2:
c4:92:98:42:01:fc:70:1c:53:fb:cf:18:37:bf:6a:
e5:49:0b:f4:4e:f5:99:7a:40:8d:2c:84:0b:2b:37:
fe:7d:ee:e7:f2:67:d8:a9:ef:3c:49:8b:ea:cb:6c:
42:61:86:bb:6f:4d:e5:59:7d:05:e0:7b:81:66:b4:
6b:9d:85:9d:7a:fc:4b:dc:ed:fd:cf:6f:49:73:48:
c0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:43:F9:9D:D7:32:93:5A:AB:19:0A:FB:D5:6D:EC:E0:4F:C7:9A:4C
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/lUP5ndcyk1qrGQr71W3s4E_Hmkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.26.0/24
Signature Algorithm: sha256WithRSAEncryption
65:4c:de:2a:74:a5:03:29:d2:60:16:5f:21:0d:3c:cd:f7:69:
01:11:03:1b:dd:91:fe:52:59:4d:2a:d4:d4:3e:ae:22:23:2a:
ac:57:93:e0:0e:53:ab:59:5a:d5:22:cc:ee:49:23:61:85:1f:
22:5f:45:6a:07:c7:fa:82:88:71:98:20:a8:83:02:3d:d4:55:
53:80:92:e1:d7:fa:fd:af:e1:bc:95:2d:e0:49:4b:d5:1f:49:
6a:b5:f7:ce:b5:7f:ce:d3:3c:1e:cf:24:c6:16:d3:1a:fb:19:
d0:44:a6:86:20:ad:65:aa:2e:08:37:e1:9c:07:1e:bb:d5:05:
bf:e5:77:65:13:80:05:94:0e:cb:9a:b9:52:5a:eb:7b:24:68:
3a:5a:dc:da:59:bb:27:15:47:a0:1c:a4:40:f0:0f:bd:9a:8d:
cf:c1:6b:90:91:7b:e6:9a:86:87:4c:e6:0e:a7:7c:a1:06:ee:
9b:fb:38:0b:34:ba:b4:27:90:66:f6:dc:dc:32:22:13:38:49:
39:59:3f:f1:0d:95:8f:2d:2a:4e:42:d6:2d:41:39:7b:8b:72:
38:bd:bd:8a:5b:0b:bc:7f:c0:1c:9b:d9:5b:01:5e:fa:23:00:
9f:4b:6f:0d:e0:2b:3b:c4:a9:4c:d6:59:7a:56:44:e7:d9:d8:
94:ac:18:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:10:05 2024 by rpki-client on console-ams.rpki-client.org