Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/9-OFlGs_RQkJ1xEjw86XCmbJQLo.roa
File: 9-OFlGs_RQkJ1xEjw86XCmbJQLo.roa (raw, json)
Hash identifier: LjDkzjEav4IQHybeUJuIDe3KMumYz/JNrhiq13R16rQ=
Subject key identifier: F7:E3:85:94:6B:3F:45:09:09:D7:11:23:C3:CE:97:0A:66:C9:40:BA
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018A8D857CDEA17E858B9C7E1F3A266A3574
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/9-OFlGs_RQkJ1xEjw86XCmbJQLo.roa
Signing time: Wed 13 Sep 2023 07:50:50 +0000
ROA not before: Wed 13 Sep 2023 07:50:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399073
IP address blocks: 89.213.176.0/22 maxlen: 24
89.213.180.0/22 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.148.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Sep 2023 12:38:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8d:85:7c:de:a1:7e:85:8b:9c:7e:1f:3a:26:6a:35:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 13 07:50:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7e385946b3f450909d71123c3ce970a66c940ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:98:0a:00:8d:2b:fe:43:04:12:7f:ce:ce:fe:
7c:fa:56:d3:9e:3e:e7:c7:69:fb:e9:7f:20:9e:c3:
33:17:09:39:e8:95:b1:18:0d:b4:8f:7e:a6:8f:bd:
9c:74:64:04:65:6c:5a:f4:42:54:32:a0:d1:e2:99:
b8:43:c1:5d:32:d4:a1:16:4b:4a:84:86:38:6b:10:
a5:80:f9:c0:82:b0:0a:c3:ca:e5:65:57:d1:fc:a7:
9c:d7:27:ec:bd:51:06:11:43:a5:93:ec:a9:93:64:
cf:b9:86:85:c4:c8:ed:89:96:c3:7f:f1:c2:00:da:
95:09:03:2c:c5:c8:50:de:dc:df:a8:0a:0c:80:fb:
9e:5d:7f:ce:29:19:a6:da:c7:1d:4b:f4:7d:85:81:
c6:76:4b:9c:fa:b6:e9:7b:14:27:ae:5e:83:e0:b8:
05:7a:03:70:5f:1d:38:ba:c1:92:83:a1:8a:b8:47:
ba:84:36:2a:e8:08:ce:53:c8:72:49:3c:ec:20:49:
f6:31:69:59:79:23:a5:8c:48:60:5e:87:ee:4c:21:
49:32:d4:42:c5:1f:2d:89:b1:b7:b6:f1:7d:8f:1d:
a4:64:09:0d:a7:3f:b7:8a:9d:ce:07:95:3f:2c:b4:
ce:b6:06:14:17:06:44:f5:75:d9:8a:e4:87:2c:e2:
a6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E3:85:94:6B:3F:45:09:09:D7:11:23:C3:CE:97:0A:66:C9:40:BA
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/9-OFlGs_RQkJ1xEjw86XCmbJQLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.148.0-89.213.159.255
89.213.176.0/21
Signature Algorithm: sha256WithRSAEncryption
47:2c:a7:8a:7a:7c:57:93:91:09:94:ea:a7:9a:c5:70:0d:b3:
e2:1f:db:e6:cc:90:32:1d:28:38:44:ff:98:85:cd:ab:f9:ec:
c9:26:13:1f:a3:50:57:36:fb:8d:18:53:d8:ef:d7:26:fa:b9:
7f:42:9a:d9:9a:d3:8e:ed:3d:c3:ba:77:5f:31:e7:d5:05:59:
33:5b:07:e4:97:c5:e4:7a:52:15:8a:fa:47:63:d9:eb:1b:94:
2c:a6:94:74:c9:01:7a:ad:3e:9e:d6:41:10:55:e5:a2:49:a1:
61:71:e5:35:bd:f1:51:b0:ab:35:14:95:43:57:32:23:a9:8e:
50:7e:f0:47:c6:87:44:06:37:80:86:d6:6a:de:77:73:50:80:
b2:e6:ab:8e:e2:ad:69:8d:08:10:21:61:30:f8:0f:35:28:e8:
12:52:6b:4e:7d:af:46:0e:77:c5:7a:53:28:e4:62:75:bc:06:
e9:ee:35:1b:87:32:60:3f:5e:88:14:af:1c:7b:17:83:e3:00:
de:84:69:3c:34:73:44:8e:6d:83:b2:9d:74:3d:cd:75:7e:11:
16:81:0c:25:0c:15:d8:f3:11:b2:c4:b4:f1:05:1e:7a:53:32:
1a:6b:26:97:0c:05:61:f3:71:22:34:f8:5e:a5:e3:1c:de:8c:
c2:2a:39:b2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:20 2024 by rpki-client on console-ams.rpki-client.org