Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/9O9J7U4opdLcDscDZWxbNs2fgTk.roa
File: 9O9J7U4opdLcDscDZWxbNs2fgTk.roa (raw, json)
Hash identifier: amSSdDPPd0eFNtaKN+jVDaZxhnsqPnBjW1lUAwO2Bb0=
Subject key identifier: F4:EF:49:ED:4E:28:A5:D2:DC:0E:C7:03:65:6C:5B:36:CD:9F:81:39
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018921B8DDCF6CCA1431F364E7BC388CAF1B
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/9O9J7U4opdLcDscDZWxbNs2fgTk.roa
Signing time: Tue 04 Jul 2023 16:25:10 +0000
ROA not before: Tue 04 Jul 2023 16:25:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60504
IP address blocks: 89.213.0.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:21:b8:dd:cf:6c:ca:14:31:f3:64:e7:bc:38:8c:af:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 4 16:25:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4ef49ed4e28a5d2dc0ec703656c5b36cd9f8139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:93:e4:eb:5d:d1:7d:7d:30:24:be:c5:24:b8:
bd:2a:f5:59:58:84:a6:a8:eb:ef:c1:99:2f:47:1b:
6f:46:92:98:c8:94:9f:9a:7a:13:dd:03:70:ce:18:
d9:3e:59:c4:b1:a4:91:98:d8:3d:06:a3:bb:d3:1c:
90:19:4b:83:42:16:66:69:a3:ea:92:8c:ed:c9:13:
23:75:43:54:35:aa:69:32:9d:c9:a4:00:52:b6:00:
70:e5:37:97:4a:2c:03:6f:50:af:9b:4a:0a:60:5c:
d5:f2:4c:1c:55:a9:95:12:02:f1:bf:5e:ce:b6:80:
0b:e1:4b:49:8c:d9:e0:22:48:20:ff:92:d1:bc:51:
a3:c3:6d:00:48:49:7c:e3:16:0b:db:40:60:d2:45:
ea:68:19:f2:ce:6c:aa:c9:92:a0:5e:0b:88:16:9b:
b3:24:a2:33:d1:ec:7f:55:7d:e9:02:ea:63:51:e7:
33:63:04:8c:38:da:57:aa:1d:da:a6:f9:01:13:f7:
60:2a:93:82:6c:10:55:23:86:8c:ec:e7:ef:56:a7:
4b:5b:12:27:9c:4a:91:2f:ba:da:d9:1a:de:01:25:
c2:f5:f5:3d:86:7d:42:8d:11:e9:5c:9e:a2:e5:85:
68:89:68:bf:d3:4a:25:7a:57:82:d6:52:86:24:2d:
35:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:EF:49:ED:4E:28:A5:D2:DC:0E:C7:03:65:6C:5B:36:CD:9F:81:39
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/9O9J7U4opdLcDscDZWxbNs2fgTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.0.0/22
Signature Algorithm: sha256WithRSAEncryption
09:f5:ab:dc:ab:ab:ab:96:a6:59:2d:e9:d4:f3:18:f6:93:36:
85:5e:b2:03:bb:61:1e:a7:64:aa:d5:ea:96:da:ad:92:6d:7e:
d2:37:78:df:7a:1f:89:8b:2e:bb:73:9d:e3:5c:ed:54:aa:e8:
ca:a7:8c:7a:b3:54:81:02:d4:39:14:7c:c2:2b:5d:5f:39:b2:
e7:63:96:01:62:81:8c:b4:13:55:12:46:0e:2d:b3:ba:ba:b6:
20:1e:0d:ff:2a:07:f7:ca:46:24:b6:47:ba:9d:f4:78:dd:44:
41:ef:41:7e:f6:34:23:9a:b0:7b:f7:27:17:d5:e5:d3:68:f8:
35:f6:a5:fe:64:1b:32:02:98:11:db:7f:b4:2f:f5:1c:02:77:
fc:a7:67:36:bd:6d:2d:98:ff:50:f1:5d:9c:eb:63:d3:52:f6:
28:4a:0e:c9:bc:38:de:b4:4c:0f:d2:16:1f:05:8b:a3:f6:90:
c2:e2:5b:21:64:db:55:b4:fe:21:b2:45:be:1a:26:3e:42:be:
7a:3b:98:3e:aa:30:2b:85:c0:d9:77:e7:db:29:f7:8a:11:76:
49:8f:2b:e5:b3:f2:36:5c:aa:08:c7:06:f0:2c:ea:b1:45:b3:
ca:51:4f:64:45:3f:19:a7:7e:99:ee:27:c8:11:bc:99:fc:29:
e4:89:9e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:14 2024 by rpki-client on console-fra.rpki-client.org