Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5OVYYat71U0mPSC9zIm8ye09Mhk.roa
File: 5OVYYat71U0mPSC9zIm8ye09Mhk.roa (raw, json)
Hash identifier: 8PQKISDlPBqm8pOT9MS/q2wzPwwkcUybysrcRhiBqJo=
Subject key identifier: E4:E5:58:61:AB:7B:D5:4D:26:3D:20:BD:CC:89:BC:C9:ED:3D:32:19
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0189D09DA07326B3E52C49441CE4F1644C05
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5OVYYat71U0mPSC9zIm8ye09Mhk.roa
Signing time: Mon 07 Aug 2023 15:28:58 +0000
ROA not before: Mon 07 Aug 2023 15:28:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 213.152.61.0/24 maxlen: 24
109.176.209.0/24 maxlen: 24
109.176.208.0/24 maxlen: 24
89.213.46.0/24 maxlen: 24
89.213.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Aug 2023 07:14:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d0:9d:a0:73:26:b3:e5:2c:49:44:1c:e4:f1:64:4c:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 7 15:28:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4e55861ab7bd54d263d20bdcc89bcc9ed3d3219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:71:44:7b:b5:ed:6f:ee:8d:10:02:06:8c:3a:
e6:ab:57:26:bd:61:9d:9e:0f:c9:a6:1f:da:41:bf:
eb:a0:46:dc:f5:5f:91:0d:09:0f:0f:ce:3d:cb:bd:
62:02:d1:df:11:79:a1:9d:6b:ce:e9:26:ae:d9:e1:
1a:fe:fe:46:f0:a1:1d:13:67:e8:db:26:7a:98:02:
3b:23:5e:90:c5:57:45:c9:4a:71:8a:15:ca:c3:fb:
90:10:3f:2c:6a:7e:2a:a3:18:c8:64:05:19:63:11:
4d:22:9c:b7:1e:4e:b9:b1:c2:bb:f3:88:7d:64:36:
5c:77:ce:2c:ab:14:6f:05:b2:c2:bd:f2:24:c7:72:
97:df:5c:ce:7a:82:fc:75:9f:2a:67:3c:15:01:2d:
e8:38:67:f1:d2:2b:78:55:30:db:9b:54:66:06:af:
8a:3f:22:a6:19:43:5d:90:f5:fb:ab:04:11:5c:e1:
5c:a7:d7:09:d6:0d:3d:8d:65:a9:ba:44:c6:37:02:
a3:1a:92:b7:01:6c:2c:68:f4:10:1c:a5:eb:5f:12:
1d:e5:ff:2f:9e:92:76:f3:25:87:b7:85:3e:de:46:
d5:2c:18:8b:98:44:b9:67:37:42:bf:e8:ba:6f:1b:
1e:f8:d1:f5:b9:e4:64:db:f4:f7:e1:a4:c8:1b:6d:
bf:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E5:58:61:AB:7B:D5:4D:26:3D:20:BD:CC:89:BC:C9:ED:3D:32:19
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5OVYYat71U0mPSC9zIm8ye09Mhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.46.0/24
89.213.170.0/24
109.176.208.0/23
213.152.61.0/24
Signature Algorithm: sha256WithRSAEncryption
48:a5:a6:8c:77:83:0d:22:e7:c5:46:40:8d:71:30:ca:14:1b:
58:73:78:a7:0f:7f:86:c9:8f:02:96:5e:38:c1:71:38:74:42:
76:06:43:61:0a:72:c1:8f:b8:ed:57:64:0c:cc:40:3e:d4:1d:
4a:81:9e:0b:c3:cd:aa:27:b3:3f:1f:cd:d1:40:2e:8e:67:31:
a1:85:90:e9:a9:39:df:47:6d:59:be:ab:2c:4a:51:97:86:d6:
5d:32:66:e5:cb:ae:e2:21:11:dc:87:5e:7a:3d:47:05:69:84:
35:24:55:85:90:b7:8f:eb:61:f2:79:e4:ea:b8:ce:72:ef:c6:
2e:e4:5e:29:b4:00:e2:c2:5d:59:5a:d6:5f:22:bd:f7:fe:db:
a0:94:33:5e:99:82:e5:53:48:7c:a9:ea:44:dd:92:b5:bc:1b:
26:33:62:b7:86:42:ab:30:d7:d6:e6:90:60:4e:cd:d9:c9:ee:
41:cd:3e:48:61:48:66:b6:f9:1d:64:ff:bf:f2:9c:82:17:f3:
9a:41:47:a3:4e:f9:47:b9:1b:3c:02:2a:60:91:fe:bd:00:fd:
1a:f2:73:5a:36:7f:55:75:a9:c6:d1:aa:5c:84:45:f0:de:0b:
b3:8e:a6:55:70:f8:32:24:9c:e6:7e:f5:df:69:bf:42:91:a1:
f3:86:e2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:13 2024 by rpki-client on console-fra.rpki-client.org