Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/p9-sMXn864p0inwNQHU0Ptg82hU.roa
File: p9-sMXn864p0inwNQHU0Ptg82hU.roa (raw, json)
Hash identifier: wBgQrS50Phg9Gd5k2Wqs7TDPvmlbR/ca+H7RQydYMCw=
Subject key identifier: A7:DF:AC:31:79:FC:EB:8A:74:8A:7C:0D:40:75:34:3E:D8:3C:DA:15
Certificate issuer: /CN=dc2c2fef9c8caf8f2f08211ef02c3d0ad3474917
Certificate serial: 018CC5008CF1DA2EF404E277B1C4DAB36763
Authority key identifier: DC:2C:2F:EF:9C:8C:AF:8F:2F:08:21:1E:F0:2C:3D:0A:D3:47:49:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cwv75yMr48vCCEe8Cw9CtNHSRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/p9-sMXn864p0inwNQHU0Ptg82hU.roa
Signing time: Mon 01 Jan 2024 12:29:56 +0000
ROA not before: Mon 01 Jan 2024 12:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56496
IP address blocks: 89.19.52.0/24 maxlen: 24
89.19.52.0/22 maxlen: 24
91.224.210.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 Feb 2024 13:34:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:8c:f1:da:2e:f4:04:e2:77:b1:c4:da:b3:67:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc2c2fef9c8caf8f2f08211ef02c3d0ad3474917
Validity
Not Before: Jan 1 12:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a7dfac3179fceb8a748a7c0d4075343ed83cda15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:be:e6:7e:75:0d:91:f2:85:4b:35:41:df:b1:
fb:b2:56:26:11:87:22:a4:da:fe:20:49:61:e0:f5:
29:29:7d:7a:3f:9b:69:e1:99:7a:22:44:e8:e2:44:
91:3d:3b:f3:22:15:fa:c9:4d:c4:5b:9b:17:64:eb:
99:d7:d0:d5:be:8f:25:59:5e:17:72:96:d0:0c:52:
94:64:7b:b2:9d:e1:6f:32:d5:5a:fa:97:86:dd:74:
66:50:86:7f:8d:13:0e:2b:7f:cb:b9:b2:5b:5f:b2:
fd:27:eb:30:af:3c:2b:ad:c1:03:eb:ff:5f:9f:4a:
5b:fc:41:bc:d9:68:21:78:89:38:96:84:43:4a:1e:
1e:ee:1b:6b:b2:58:fb:3f:68:dc:c0:28:e7:70:a5:
5e:ad:fc:61:88:36:a9:72:dc:49:40:22:8e:f8:9c:
3a:36:51:a3:f2:71:45:51:ec:90:ff:aa:a8:f8:42:
27:bb:dc:a8:c0:0c:08:80:95:bb:59:90:5b:59:45:
6e:2b:51:a4:02:e7:43:0c:19:71:d1:a3:23:e5:a0:
66:fb:d3:28:b1:76:5d:d3:ea:bd:ab:06:37:42:92:
95:e9:52:d6:82:1b:a1:8d:72:aa:da:1e:03:db:68:
11:85:d7:9e:d3:97:19:10:ec:4a:df:0b:b5:50:74:
dc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:DF:AC:31:79:FC:EB:8A:74:8A:7C:0D:40:75:34:3E:D8:3C:DA:15
X509v3 Authority Key Identifier:
keyid:DC:2C:2F:EF:9C:8C:AF:8F:2F:08:21:1E:F0:2C:3D:0A:D3:47:49:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cwv75yMr48vCCEe8Cw9CtNHSRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/p9-sMXn864p0inwNQHU0Ptg82hU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.19.52.0/22
91.224.210.0/23
Signature Algorithm: sha256WithRSAEncryption
70:aa:3f:66:e4:76:d0:82:d6:d2:3d:94:f4:4b:32:e8:41:62:
26:f7:07:23:d3:fe:2b:a6:02:f1:d3:1f:62:db:77:22:29:5b:
e0:c9:57:13:e8:14:5d:45:e5:15:6e:21:60:71:0a:e0:a7:75:
6d:41:c2:67:79:22:68:41:8b:b5:58:f2:70:42:32:d8:1e:a4:
12:bc:ed:af:c0:7b:2d:99:ee:f6:2d:89:a7:39:bb:bd:59:c1:
e9:28:bf:69:5b:77:05:6b:9c:67:47:a1:b2:ee:aa:51:a8:75:
1d:53:5a:14:02:a9:83:d3:ac:91:96:59:ad:f2:2b:01:d3:83:
25:09:71:a3:dc:ed:ea:ef:7c:e6:61:05:25:1f:bd:84:06:f7:
08:1a:90:82:6a:6a:c8:51:9d:15:14:14:61:ca:cb:4f:5b:73:
f3:56:48:ff:4e:57:d1:c9:40:7b:1d:45:15:e0:eb:ad:49:35:
69:ea:31:75:3b:09:39:ee:fb:98:89:46:66:01:7d:71:e1:4a:
d4:1f:d5:0d:7b:c8:7f:8e:00:5f:99:6e:bb:23:d7:4d:6a:bb:
3b:31:27:d9:b0:80:31:39:03:ee:0b:42:17:dc:fe:d6:ed:f9:
c2:fa:8c:d4:49:05:24:6d:7a:fc:7a:fe:4a:d5:40:c3:93:f6:
92:00:42:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 1 16:11:02 2024 by rpki-client on console-fra.rpki-client.org