Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/7eaaBpC0-uCsnGcMvAEgKenYz_Y.roa
File: 7eaaBpC0-uCsnGcMvAEgKenYz_Y.roa (raw, json)
Hash identifier: 4q925W6wJyLmvmJBKL1TSGTqLJXrbDyq7noY7qHgckY=
Subject key identifier: ED:E6:9A:06:90:B4:FA:E0:AC:9C:67:0C:BC:01:20:29:E9:D8:CF:F6
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018E6007C38620348DB93764E855691BBEE0
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/7eaaBpC0-uCsnGcMvAEgKenYz_Y.roa
Signing time: Thu 21 Mar 2024 08:01:45 +0000
ROA not before: Thu 21 Mar 2024 08:01:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212335
IP address blocks: 89.213.216.0/24 maxlen: 24
89.213.221.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Mar 2024 11:47:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:60:07:c3:86:20:34:8d:b9:37:64:e8:55:69:1b:be:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 21 08:01:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ede69a0690b4fae0ac9c670cbc012029e9d8cff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c9:49:85:5c:33:bb:44:35:c0:3d:06:e3:2e:
b1:fb:a2:76:91:5d:6b:78:9b:f0:c4:1a:69:da:b8:
3f:2a:32:dd:3c:b9:e4:b9:4e:cf:bc:74:35:09:af:
7f:02:1a:b9:43:83:e2:42:4c:14:90:f1:5f:48:6a:
73:f0:02:43:65:29:b5:17:88:9c:92:18:46:37:75:
cf:aa:8b:fe:dd:f3:c3:69:da:a8:24:d2:34:a0:61:
00:dc:44:52:b2:88:8a:f5:8f:c4:ca:b4:f4:52:65:
f5:ba:22:87:10:6e:6a:3a:51:e5:c3:01:73:47:e8:
31:92:94:5d:ef:c9:35:0f:f1:8b:8f:6f:eb:60:12:
02:f0:3a:25:3a:d7:8f:4a:2f:67:57:30:27:93:03:
8a:e3:70:a9:f3:ea:4f:47:fe:f6:8d:77:3d:f8:c6:
21:c3:9b:f4:f1:f0:38:7e:00:f0:c8:f5:45:b6:8f:
25:b1:89:36:80:d3:1c:4d:ea:b2:30:05:90:3b:21:
6d:13:0c:47:95:2a:bc:53:63:9e:bc:ed:63:8b:26:
61:dd:93:c9:ac:ad:3d:25:62:17:84:fb:ed:52:d5:
b8:8f:44:49:2b:a0:7a:75:d5:d2:e8:ff:f5:86:d2:
6c:aa:14:8b:75:e4:4d:9e:fd:31:53:58:5f:46:4b:
c1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E6:9A:06:90:B4:FA:E0:AC:9C:67:0C:BC:01:20:29:E9:D8:CF:F6
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/7eaaBpC0-uCsnGcMvAEgKenYz_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.216.0/24
89.213.221.0/24
Signature Algorithm: sha256WithRSAEncryption
03:26:7b:9d:de:5b:bb:e4:53:ec:42:7c:be:2e:9e:89:e6:80:
80:c3:36:98:98:d6:f7:88:d8:a3:15:22:0e:95:1d:01:fc:dc:
37:60:e0:6d:ac:41:05:67:7b:7c:aa:76:ff:6e:e8:40:a1:75:
a7:70:22:9e:00:7e:9e:06:d7:46:04:6e:4f:e7:40:30:58:e4:
02:17:4a:5a:26:67:be:1b:e7:f5:b8:1c:18:2f:15:92:1c:82:
2d:c4:e7:80:13:6e:32:3e:bb:33:1e:3e:76:c8:cf:91:52:50:
81:73:d0:7a:15:50:e9:b7:8f:a5:d6:81:29:ce:87:c5:ae:f0:
02:5b:b2:1d:d8:34:b0:e2:c8:45:2f:65:07:8c:59:18:f1:29:
07:d7:e6:e1:80:2a:c6:1c:7e:da:0d:29:20:0e:15:0b:61:c3:
78:c7:1e:e3:88:f5:22:6c:2d:0e:d4:bc:bd:39:43:7f:42:26:
f1:b8:98:ad:4e:a6:91:8d:d3:e0:b6:85:a9:fe:72:f9:f7:56:
1b:3f:2e:f5:46:36:30:e0:c4:6b:15:76:0b:70:c2:6c:24:93:
5e:58:22:40:f0:d3:b3:e5:86:a8:d9:92:07:37:c1:65:9f:b6:
b2:5b:d5:df:c3:fe:cf:f6:d7:83:3f:34:62:4f:c9:eb:d0:5e:
7b:61:2a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:14 2024 by rpki-client on console-fra.rpki-client.org