Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/PLfWuJwjES2gRu4wq86ODQ1wWiY.roa
File: PLfWuJwjES2gRu4wq86ODQ1wWiY.roa (raw, json)
Hash identifier: 3mPkivmP6Js+vURwV0H9x3mOCI28fFYGSlQjaadpaiY=
Subject key identifier: 3C:B7:D6:B8:9C:23:11:2D:A0:46:EE:30:AB:CE:8E:0D:0D:70:5A:26
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018A5FE8E959455E3C92BE427B1007AF4341
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/PLfWuJwjES2gRu4wq86ODQ1wWiY.roa
Signing time: Mon 04 Sep 2023 11:16:54 +0000
ROA not before: Mon 04 Sep 2023 11:16:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216414
IP address blocks: 89.213.132.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5f:e8:e9:59:45:5e:3c:92:be:42:7b:10:07:af:43:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 4 11:16:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3cb7d6b89c23112da046ee30abce8e0d0d705a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b7:9b:ba:ef:94:3f:64:36:bc:91:d6:d6:d1:
cd:f1:0e:27:5a:27:40:ec:0c:89:f7:9c:14:aa:d9:
7b:c1:c2:36:5e:27:e2:a1:bf:68:c6:ff:93:6a:30:
cf:cf:85:a0:9a:cd:bf:e1:5a:9e:36:bc:47:50:d0:
b6:a1:52:97:b9:1a:5e:40:c7:fa:8b:a2:df:20:02:
8a:40:b3:9c:2d:77:de:b8:a1:e8:20:d1:af:d2:3b:
be:f2:68:d6:e3:be:c0:d6:cd:5c:24:bf:c2:c1:98:
80:92:30:ad:8f:40:50:f4:db:de:8d:f5:89:ab:02:
a8:90:d7:6e:b5:cb:56:e9:dd:56:00:51:19:73:49:
88:d4:1d:49:e7:f8:6d:2f:40:9f:79:99:39:3f:e2:
d4:ad:8f:d6:c9:7b:77:f2:07:3b:99:74:18:73:b5:
98:40:0d:30:44:4a:86:f9:50:72:1e:28:b8:e4:52:
49:17:b9:ec:ac:e3:5d:d9:2a:d4:b8:7f:36:95:35:
61:b9:23:e1:f8:60:2a:a1:0c:37:7b:16:ec:f4:af:
72:b8:cf:f3:f3:c8:ca:65:36:8d:d0:31:97:97:e9:
7c:dd:60:1d:7b:0c:88:f9:1e:f8:e1:66:18:c6:4b:
e9:5d:02:2a:7f:29:45:e2:b7:dd:12:1d:dc:e7:c8:
ca:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B7:D6:B8:9C:23:11:2D:A0:46:EE:30:AB:CE:8E:0D:0D:70:5A:26
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/PLfWuJwjES2gRu4wq86ODQ1wWiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.132.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:ab:19:95:9a:1e:25:eb:90:23:84:82:98:8c:35:0f:c9:42:
5a:f3:43:45:45:27:86:ca:81:0e:ee:8c:07:d4:ff:32:4b:ba:
b2:9d:d9:a1:c0:b5:16:12:e1:e2:3f:c4:e1:68:f8:e6:64:c1:
c3:bf:f8:13:82:17:33:c4:69:ad:ae:c9:6a:23:80:b3:ac:fb:
a9:c2:41:3e:d8:20:1e:9a:c0:1f:75:5d:89:8e:b8:06:d3:af:
16:fc:2f:eb:33:cc:1c:14:c5:b3:3f:89:50:e8:e6:1a:8b:bf:
20:0e:cc:4c:fa:59:8c:63:6f:2c:26:d1:e1:ad:5f:ad:11:01:
2b:d5:ee:fa:a4:03:31:81:92:b0:d8:a6:16:3c:32:77:39:94:
db:9e:4d:cb:8d:ab:45:e1:75:4c:82:03:ab:3f:de:e2:66:9a:
51:9f:87:bc:b8:f6:7a:28:db:d9:89:ea:ee:a6:f8:16:18:34:
4a:67:b8:63:4a:0a:a5:6f:b2:f6:98:14:de:d2:c8:05:8e:a9:
1c:6b:92:7a:39:e0:24:b9:c4:ed:db:67:20:e6:d0:b8:29:23:
f3:4f:fe:df:d8:d8:b2:65:eb:02:7b:60:67:a5:9c:28:5a:83:
f5:6a:6b:25:93:c4:e4:70:75:b8:30:7a:13:aa:2d:1e:bb:e7:
64:f5:19:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:23 2024 by rpki-client on console-ams.rpki-client.org