Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1-iDoFX60agBpufVYZYLsAmQRMuU.roa
File: 1-iDoFX60agBpufVYZYLsAmQRMuU.roa (raw, json)
Hash identifier: k6NFU6PhKtq/jnN2LO39KwJtM+Q6/5TxuDv69gJOF+4=
Subject key identifier: FA:20:E8:15:7E:B4:6A:00:69:B9:F5:58:65:82:EC:02:64:11:32:E5
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018AB7F984022FDEBD102159098812000013
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1-iDoFX60agBpufVYZYLsAmQRMuU.roa
Signing time: Thu 21 Sep 2023 13:41:37 +0000
ROA not before: Thu 21 Sep 2023 13:41:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 89.213.172.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sun 19 Nov 2023 14:31:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b7:f9:84:02:2f:de:bd:10:21:59:09:88:12:00:00:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 21 13:41:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa20e8157eb46a0069b9f5586582ec02641132e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b9:36:f2:f1:75:8d:b4:c9:76:21:3e:9d:b9:
c6:1d:57:66:dd:5e:66:f5:f8:53:c1:50:2d:51:4e:
24:bb:a7:55:80:a2:e2:50:88:e8:6e:8e:cf:2b:04:
0d:db:90:7d:ba:d2:06:1e:41:f8:86:4b:a5:8d:a1:
53:93:56:14:78:a7:c1:1a:94:b2:f5:5b:73:88:97:
df:e4:1e:02:d8:7f:9a:5f:5c:38:ba:b5:8a:e4:e6:
1f:56:1f:ed:c0:b0:1b:29:61:8b:31:d7:c8:76:f2:
4c:cf:e5:11:ac:37:c5:67:1b:69:7d:5d:1c:32:b3:
eb:6b:f3:3e:b7:7c:74:21:40:f8:c0:e4:22:af:c5:
0d:21:0a:94:9a:70:63:c4:cf:83:1c:87:bd:ab:99:
e4:d3:ee:19:19:a2:4c:f7:03:c6:55:48:9f:ea:39:
d0:c5:25:53:bc:7f:10:a5:5a:df:e2:43:85:6d:51:
bc:e2:8a:80:30:a1:69:08:eb:70:b7:c7:74:26:09:
44:57:a7:2a:23:50:f2:10:03:bb:09:55:2e:b6:13:
71:9b:94:6e:e5:0a:68:91:02:15:dd:e9:f8:93:d6:
f8:49:d1:c1:f9:49:96:f6:b5:00:6b:a0:47:7f:da:
07:c4:b9:ab:8a:f7:97:2f:bf:d6:c9:db:e9:ec:8f:
b3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:20:E8:15:7E:B4:6A:00:69:B9:F5:58:65:82:EC:02:64:11:32:E5
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1-iDoFX60agBpufVYZYLsAmQRMuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.172.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:a7:56:ec:25:32:a7:4d:64:8e:b2:8d:ae:12:8e:98:78:3c:
fc:7d:82:9c:a0:f2:cf:1a:38:17:2b:9f:7f:f9:68:6a:cb:40:
ea:9b:7d:1f:76:56:6b:7c:30:fe:b5:1a:02:87:34:a3:6e:62:
9e:66:85:a2:26:47:d0:02:a1:52:66:ac:84:c6:7f:fa:80:2c:
7f:95:20:32:f1:94:d5:4e:cb:f1:40:23:51:8f:76:d4:9e:8f:
dd:25:09:ae:1c:69:2d:46:b9:b9:12:3f:f9:5d:0e:49:f7:3b:
a7:d3:c8:cb:23:e9:c5:d3:56:5d:60:7b:6d:d8:75:2c:46:7c:
cd:26:41:f3:c3:35:4b:53:0e:51:bb:6c:ee:e4:70:65:b0:e9:
3f:c2:c0:03:7a:c5:27:b8:26:7f:65:c4:fa:7f:7c:16:f6:25:
0a:40:4e:56:0e:56:80:b5:3e:0f:1d:d3:b8:83:8e:27:86:5b:
0d:4c:0c:34:a7:7d:66:44:de:20:02:a1:24:9c:65:a6:54:fe:
63:a0:81:a3:4c:e4:3f:73:9e:5b:a9:52:9e:05:fb:9f:63:11:
d4:d3:ff:91:dd:19:5e:c5:ff:a7:80:1e:c2:b8:a2:23:1a:5f:
a5:2b:2f:6c:11:0b:ac:ab:fe:04:52:ef:ba:c9:f3:f4:d0:a7:
1b:81:9b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:13 2024 by rpki-client on console-fra.rpki-client.org