Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/DvYZm_iFhZZVfFnTUga9Zci4Jo4.roa
File: DvYZm_iFhZZVfFnTUga9Zci4Jo4.roa (raw, json)
Hash identifier: V18eqEGaZdlAt5NlDsJSw4kCjU/EssBpRmuE5L8FS2A=
Subject key identifier: 0E:F6:19:9B:F8:85:85:96:55:7C:59:D3:52:06:BD:65:C8:B8:26:8E
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018AD0F192C13E4E9859B5A2A849DD8E89F8
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/DvYZm_iFhZZVfFnTUga9Zci4Jo4.roa
Signing time: Tue 26 Sep 2023 10:03:27 +0000
ROA not before: Tue 26 Sep 2023 10:03:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62390
IP address blocks: 89.213.40.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d0:f1:92:c1:3e:4e:98:59:b5:a2:a8:49:dd:8e:89:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 26 10:03:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ef6199bf8858596557c59d35206bd65c8b8268e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a3:73:6f:00:a5:02:e9:f3:c3:18:96:f9:3e:
2b:2a:18:d7:e4:66:49:fe:a3:d3:eb:e2:97:fa:9f:
b8:e7:3c:30:c0:a1:a8:34:49:4c:56:3e:40:f7:96:
67:f9:68:37:df:d7:85:a8:c2:b1:5e:15:34:f7:c7:
b2:18:a0:f8:32:60:5a:95:28:6f:93:96:db:79:1d:
a3:55:11:79:4e:4c:26:28:f4:a7:31:08:30:bf:fe:
6e:a8:23:6c:42:95:6e:4b:83:2b:4f:d6:41:1c:b4:
ac:89:70:e0:94:5d:ac:a6:c4:19:3d:08:8c:65:28:
f4:1d:f8:b8:49:34:2f:bf:f2:05:67:0b:8f:67:1a:
5e:72:ed:b0:bb:9e:e6:9f:ba:74:8e:ab:ff:78:83:
f6:e7:22:40:d5:44:21:ef:89:dd:c0:02:48:5e:79:
06:3d:01:aa:51:8e:d7:37:29:31:8e:ea:65:de:0e:
5c:96:bf:20:cc:6d:2e:7d:5c:e4:e3:83:e0:08:25:
cf:47:0c:dd:de:d5:5a:2d:9b:55:13:02:49:30:6e:
fb:5b:dd:4f:9b:17:70:c0:26:b2:87:5d:95:e8:b4:
67:79:c6:a4:9b:0c:ce:0a:2c:d6:30:e9:56:4b:5c:
19:bf:f8:8c:6f:46:0c:0b:76:1e:84:57:59:b9:e8:
f6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F6:19:9B:F8:85:85:96:55:7C:59:D3:52:06:BD:65:C8:B8:26:8E
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/DvYZm_iFhZZVfFnTUga9Zci4Jo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.40.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:f3:d3:04:a7:8f:8d:8d:00:b3:45:25:83:28:c9:06:9d:66:
64:7b:74:ac:79:8d:d3:b6:97:91:2f:56:d8:b4:d2:f9:e2:90:
e8:44:2c:d2:d4:78:09:4e:fe:72:a4:5d:65:d7:31:79:7b:cd:
e1:b6:92:3e:25:ee:00:5e:c4:9b:36:7c:6f:80:2c:21:2e:1a:
c0:cf:5f:81:9e:b5:d2:43:61:1b:f7:b4:f9:89:95:b5:2a:2e:
97:62:69:47:85:d2:48:f8:d0:50:5e:15:31:c2:d7:1d:53:4f:
d9:12:c6:54:3e:b7:84:62:d6:8a:90:36:91:6a:fc:25:7f:95:
89:50:2d:0b:92:c2:88:6d:35:2a:e4:09:83:6a:f6:33:83:d2:
24:dc:31:ce:cb:c0:a6:d6:2e:ce:2a:22:86:e0:5c:91:0b:df:
b2:ea:7f:bb:13:f3:2e:c0:1f:f0:ba:d6:43:ad:b7:87:53:db:
ba:0e:15:a5:fc:a2:4d:08:63:dd:96:22:ad:63:75:c6:23:07:
63:b8:8c:b6:1a:a9:9a:88:2b:ca:ca:0a:a9:ee:4a:d1:52:22:
34:f9:63:86:7f:da:e6:9f:98:1e:a3:e1:6a:3b:61:63:da:7b:
7b:99:5f:f9:d2:56:3a:1c:de:ce:a4:b1:3a:fc:e0:8f:51:44:
91:33:13:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:14 2024 by rpki-client on console-fra.rpki-client.org