Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Dfx5RLjc-7doJCBS3VsmrdM-57I.roa
File: Dfx5RLjc-7doJCBS3VsmrdM-57I.roa (raw, json)
Hash identifier: tdolWOsH29WBNBVKduTwy3OPI6dX9wW2z71ep39Uh84=
Subject key identifier: 0D:FC:79:44:B8:DC:FB:B7:68:24:20:52:DD:5B:26:AD:D3:3E:E7:B2
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018CC349583A25CEE6CEF3CFE70A9E492ADE
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Dfx5RLjc-7doJCBS3VsmrdM-57I.roa
Signing time: Mon 01 Jan 2024 04:30:13 +0000
ROA not before: Mon 01 Jan 2024 04:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63023
IP address blocks: 89.213.144.0/24 maxlen: 24
89.213.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 03 Mar 2024 14:49:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:58:3a:25:ce:e6:ce:f3:cf:e7:0a:9e:49:2a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 04:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0dfc7944b8dcfbb768242052dd5b26add33ee7b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e2:64:b4:8a:c7:54:14:cc:67:18:48:60:ef:
a8:e2:c9:44:3c:3b:92:ae:c3:32:e9:40:21:60:a1:
20:19:63:1c:84:37:5f:27:06:59:10:7a:6e:81:ea:
b0:2e:b6:1f:1f:18:e5:14:12:cb:1f:60:38:e4:28:
6e:e6:47:2b:89:1d:49:8c:64:c8:98:c8:06:4b:f0:
8f:3e:45:36:26:28:56:b2:a5:8a:db:6d:ae:de:4f:
8f:fb:77:16:bc:00:1a:f1:f8:d6:8c:8a:e1:c3:5f:
b6:4a:67:64:bd:20:7e:e1:d1:dc:05:b0:4c:92:61:
c2:13:8b:63:49:d9:46:34:5c:d3:01:7b:fd:7d:30:
99:e9:40:2a:60:2f:93:aa:9b:62:d2:01:7c:2c:74:
84:32:77:9d:65:fc:f0:c3:d6:1e:66:28:72:05:86:
05:d8:a9:7a:48:9f:13:0c:71:b7:4d:6c:f6:c5:ff:
de:08:53:b5:1d:65:fa:67:4e:4a:3b:cc:f4:c7:7d:
07:80:87:cf:47:aa:32:dd:59:39:00:4f:91:64:a4:
17:68:4e:d3:64:a0:9d:38:f8:54:29:7d:e1:19:cb:
28:c9:fc:e4:73:86:fa:79:25:fe:0a:a7:11:29:e5:
cf:a1:3c:eb:f5:0f:25:06:c3:7f:b2:37:19:d1:e0:
3b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:FC:79:44:B8:DC:FB:B7:68:24:20:52:DD:5B:26:AD:D3:3E:E7:B2
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Dfx5RLjc-7doJCBS3VsmrdM-57I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.144.0/24
89.213.150.0/24
Signature Algorithm: sha256WithRSAEncryption
65:5b:7b:1d:42:50:a2:f2:a0:d7:a8:5c:a5:c6:22:92:ff:c5:
36:b7:c2:0a:9a:25:55:d2:a6:cd:e0:a6:54:eb:a1:3d:46:5e:
cd:f4:54:2d:09:f5:1f:a6:a9:3d:ac:8d:79:eb:27:5c:17:b6:
f4:37:a2:6e:57:ed:8d:16:aa:6d:df:72:c2:32:38:a5:9c:61:
cb:95:8c:6c:27:52:17:89:e4:b2:1d:06:d0:d3:6a:37:03:32:
b0:c7:fb:7d:11:a4:28:c1:d3:c8:bd:df:5b:87:08:7e:5f:b3:
1b:73:67:c7:97:14:97:0d:9f:ef:04:be:81:f4:4c:26:f8:fd:
01:e0:81:ed:6c:00:25:da:d0:58:65:38:2e:36:0f:90:51:a1:
ca:56:4f:b5:0e:0b:96:1b:c3:75:8f:f3:79:d9:2a:ca:01:6b:
34:06:97:6a:2e:dc:a6:45:59:b8:3e:9e:af:b5:e6:2e:40:64:
55:df:76:14:67:2f:4c:81:15:bf:10:7f:43:bd:0f:c3:d2:4d:
3b:c5:72:92:b3:c5:52:26:6e:7d:ea:56:0c:8e:db:70:ae:8e:
82:80:3b:b4:76:a0:92:ef:82:a9:8d:d1:ce:c8:d0:42:06:65:
2f:e3:3e:69:1d:0a:d5:1f:7e:19:08:4e:fd:99:58:9b:8d:20:
b5:0f:9c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:21 2024 by rpki-client on console-ams.rpki-client.org