Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/OPweC6JkYEr2stPAZHz7GhqorRE.roa
File: OPweC6JkYEr2stPAZHz7GhqorRE.roa (raw, json)
Hash identifier: zn3nESV6pASJjG6XjI9C7/HBfWaoaU/VWmrfbtDK7Ac=
Subject key identifier: 38:FC:1E:0B:A2:64:60:4A:F6:B2:D3:C0:64:7C:FB:1A:1A:A8:AD:11
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01891C82080A7A3D301403E6B0EBAA60B52E
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/OPweC6JkYEr2stPAZHz7GhqorRE.roa
Signing time: Mon 03 Jul 2023 16:07:11 +0000
ROA not before: Mon 03 Jul 2023 16:07:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198883
IP address blocks: 89.213.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 Nov 2023 08:12:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1c:82:08:0a:7a:3d:30:14:03:e6:b0:eb:aa:60:b5:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 3 16:07:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38fc1e0ba264604af6b2d3c0647cfb1a1aa8ad11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a7:93:35:8e:ee:d2:8f:39:e1:31:e9:ac:f2:
c1:c9:f2:c2:6d:02:f5:43:42:9f:75:0b:7a:b9:c5:
7f:df:98:b2:2a:fd:a8:81:fc:00:ac:67:f8:8d:15:
1f:8d:15:a8:af:97:df:26:9c:70:b2:e2:b2:79:e0:
33:ca:e6:c8:de:7c:37:24:62:b2:38:03:28:99:22:
44:f5:ad:03:7d:bb:8b:05:31:a5:0d:2e:d3:a0:a5:
1b:dd:b5:ab:0e:d4:26:ba:19:8a:65:a0:c3:1d:68:
86:6f:da:26:5e:26:e5:3a:1b:98:a5:da:ca:87:8a:
d1:86:44:c1:da:10:c1:9a:05:b1:30:83:9c:4f:17:
d2:c6:20:cb:a5:a8:13:b7:27:46:00:36:90:4b:37:
80:84:fb:72:9e:cd:45:16:39:e8:17:bd:7b:b2:2d:
64:20:57:8a:e9:16:a4:bd:7a:a8:3d:ac:1b:8c:e9:
87:78:a7:ca:4f:02:13:18:38:74:da:e6:da:c5:49:
6f:73:c1:a0:a2:60:ec:be:51:a7:2d:2a:3e:81:4f:
d3:2f:89:d8:de:c3:9f:3c:da:4c:1a:6d:ea:79:2a:
db:34:0d:fc:a8:be:c4:22:7d:a6:c3:d1:59:01:3b:
e8:b9:3f:cc:5f:3b:39:03:29:ca:ed:a1:95:80:5e:
3c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:FC:1E:0B:A2:64:60:4A:F6:B2:D3:C0:64:7C:FB:1A:1A:A8:AD:11
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/OPweC6JkYEr2stPAZHz7GhqorRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.147.0/24
Signature Algorithm: sha256WithRSAEncryption
08:7e:04:ca:b6:d6:34:0a:7f:03:42:0c:28:e6:1f:62:c9:f9:
bc:94:eb:6e:97:79:4f:3e:89:78:9d:02:5d:90:06:20:92:9c:
05:3c:8f:57:89:e4:dc:15:b6:b6:9d:cb:eb:c0:dd:41:33:53:
2b:29:77:ed:12:37:c8:08:b0:27:6e:a4:45:e5:ac:8f:a8:6d:
ed:93:eb:43:81:e0:78:85:75:60:48:8e:98:1a:da:7b:e0:89:
ea:01:4d:63:d4:19:6a:d6:36:41:2a:56:8e:d4:de:22:ec:8b:
4c:f5:e5:05:ad:81:ff:a7:74:3d:27:4c:10:31:9e:1d:69:99:
00:68:85:24:49:e4:8d:41:7b:b3:66:ff:04:7e:5f:5a:05:1c:
89:35:32:68:3a:f1:1f:6e:49:59:9f:b9:33:d7:72:48:40:f7:
73:bc:4e:83:1c:56:e3:bc:82:55:e2:dd:62:90:a8:de:94:50:
1e:24:fe:ce:97:5c:14:05:97:5c:86:02:23:e4:fa:a3:2e:ea:
04:e6:42:7f:76:cf:18:ee:36:db:ba:33:8e:c8:cd:1c:8e:f9:
12:4c:45:06:1e:c4:24:1d:b9:3a:72:9a:6e:05:1c:89:01:49:
5a:e5:e3:ea:93:f8:0f:cf:58:0d:f8:07:52:cc:92:20:03:6d:
84:66:3d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:15 2024 by rpki-client on console-fra.rpki-client.org