Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/BI8Ox24IK5Qhto4tQSdasP92ZXs.roa
File: BI8Ox24IK5Qhto4tQSdasP92ZXs.roa (raw, json)
Hash identifier: DpdOQyFLyZIcoNPawzgl0w/NtfgeZksuAdQSALRAf1M=
Subject key identifier: 04:8F:0E:C7:6E:08:2B:94:21:B6:8E:2D:41:27:5A:B0:FF:76:65:7B
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01890616B32DA40A17CEC326E1E54318A558
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/BI8Ox24IK5Qhto4tQSdasP92ZXs.roa
Signing time: Thu 29 Jun 2023 07:38:18 +0000
ROA not before: Thu 29 Jun 2023 07:38:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210542
IP address blocks: 89.213.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:06:16:b3:2d:a4:0a:17:ce:c3:26:e1:e5:43:18:a5:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 29 07:38:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=048f0ec76e082b9421b68e2d41275ab0ff76657b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:61:27:ea:88:51:aa:b5:70:d7:90:bd:cc:c1:
37:e3:bd:55:d8:7d:d9:83:34:bf:9b:fa:10:4c:42:
3b:02:35:83:24:8d:eb:e9:12:5d:44:d9:db:74:a7:
9d:e6:04:44:2e:f1:89:ff:db:a9:4c:48:44:06:70:
43:5f:54:be:a1:f7:ad:c1:38:0a:62:88:a7:a6:14:
a8:8e:51:b9:86:1a:aa:3f:b8:40:21:15:21:8c:24:
6c:35:84:16:ce:63:d1:13:4d:36:95:ae:2c:2d:e7:
ad:a6:6d:8b:7f:1d:b0:94:a7:e0:e7:29:77:4a:ac:
5d:d5:f6:cf:38:da:e4:1b:b0:44:79:7b:08:f8:45:
ee:fa:58:85:a9:7f:26:53:82:5e:45:42:51:02:04:
38:4c:8b:0c:08:37:04:ed:24:d8:4b:9b:f7:0f:44:
e8:89:89:2d:46:4b:a4:11:52:ef:3c:d8:c1:52:fa:
12:e3:f6:a9:d4:4a:11:75:da:a5:b4:28:06:be:97:
bb:0b:47:39:c9:5b:5b:fa:9d:d0:85:db:23:f0:d1:
b9:e2:f8:aa:f6:3f:1b:5a:7b:4a:c0:c5:0a:27:dc:
61:ff:77:7e:0f:16:82:61:d9:24:9b:d4:c0:74:71:
c5:9e:03:1a:d0:c8:c0:d8:05:f2:fb:55:83:e2:93:
73:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:8F:0E:C7:6E:08:2B:94:21:B6:8E:2D:41:27:5A:B0:FF:76:65:7B
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/BI8Ox24IK5Qhto4tQSdasP92ZXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.129.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:69:bd:56:50:51:c8:d2:84:ce:8d:39:1b:d4:65:e5:7b:71:
1f:94:b2:0a:b5:fd:36:ab:7e:f1:f4:46:bc:8a:6c:e7:37:ac:
0f:92:6a:45:84:8c:7c:0a:22:14:e0:dd:45:1c:ad:48:ef:ca:
8b:f1:a6:1d:6d:08:c3:f6:aa:5e:00:2c:45:46:4f:36:fa:85:
45:ca:6a:46:45:31:9f:d8:6e:38:c3:bb:4d:b9:e4:5a:71:5d:
92:08:7e:3e:97:29:a2:21:c1:f4:70:9b:8a:9a:3a:81:be:bb:
fe:1c:da:95:f5:bd:ac:ac:ae:71:9e:e4:57:42:f6:ff:0e:c2:
65:77:5d:78:1d:af:39:45:69:1c:ac:44:67:33:f7:16:67:8d:
a5:c6:d4:95:f2:e3:0c:b8:1d:1d:7d:de:3f:01:80:c6:b4:ef:
34:99:02:a4:2b:f2:18:2a:ef:f9:cf:ce:a0:8b:61:9b:8a:66:
3d:62:99:f9:f6:72:dc:60:c9:85:80:65:82:77:5e:6c:84:27:
58:5a:6d:fc:c1:bd:e7:14:c7:51:e2:5f:57:02:9a:61:98:ca:
9a:a8:8e:22:c9:18:2f:77:57:11:99:ce:d7:50:59:c8:bd:c5:
d0:6d:39:ae:17:1f:c2:db:12:b7:12:0a:03:b4:44:c2:bd:c9:
9b:d8:19:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:14 2024 by rpki-client on console-fra.rpki-client.org