Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QXaSlVEMGerxzfMmaXidG5obiM4.roa
File: QXaSlVEMGerxzfMmaXidG5obiM4.roa (raw, json)
Hash identifier: lj/RqSU+P9yrxBNqACqXQIsWIVbYyhA8kd/fwmZ8V/U=
Subject key identifier: 41:76:92:95:51:0C:19:EA:F1:CD:F3:26:69:78:9D:1B:9A:1B:88:CE
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018F0B2B112A2D9A2FD65F1651842D5DE749
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QXaSlVEMGerxzfMmaXidG5obiM4.roa
Signing time: Tue 23 Apr 2024 13:35:22 +0000
ROA not before: Tue 23 Apr 2024 13:35:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209043
IP address blocks: 89.213.115.0/24 maxlen: 24
89.213.218.0/24 maxlen: 24
213.152.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 May 2024 07:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0b:2b:11:2a:2d:9a:2f:d6:5f:16:51:84:2d:5d:e7:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 23 13:35:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=41769295510c19eaf1cdf32669789d1b9a1b88ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:59:c9:88:9d:f8:ca:0d:43:35:f6:36:60:01:
57:67:28:29:9e:1b:16:61:58:9d:e9:9c:41:c1:9c:
4c:f6:1c:9b:d6:57:98:40:dd:3b:05:bc:3f:20:8d:
2b:05:e1:d4:af:07:e8:17:68:fa:79:30:20:2b:f9:
6d:22:f9:00:77:0a:19:c3:7a:e3:e1:57:68:61:a4:
41:ef:89:81:29:14:21:51:74:f5:88:73:f4:ad:2c:
54:a9:fe:d2:3b:6e:aa:40:7a:fc:70:61:29:c4:20:
e6:83:76:4a:41:9c:9d:6d:5f:76:9e:fc:9a:e0:53:
c5:07:6d:bf:82:69:20:2c:5f:66:66:cb:fe:a5:08:
bb:ad:27:79:21:b9:0d:23:18:8b:90:64:5a:3f:67:
2f:55:35:f7:28:2b:31:72:b1:dc:a4:e0:88:06:46:
18:98:b2:dd:00:1a:69:0c:cb:01:10:b2:25:ef:bb:
3e:1b:d4:64:a3:78:32:f7:6a:a6:68:70:02:74:6f:
ed:14:3f:ee:62:e1:4d:aa:48:a9:56:d5:6c:89:40:
7c:3b:cb:02:8c:96:3c:a2:e3:80:d3:f8:dd:ab:68:
64:80:67:32:07:72:11:cf:02:50:62:47:7a:2f:bb:
05:36:ed:62:63:88:25:80:2c:bf:ab:a3:b6:a4:11:
70:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:76:92:95:51:0C:19:EA:F1:CD:F3:26:69:78:9D:1B:9A:1B:88:CE
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QXaSlVEMGerxzfMmaXidG5obiM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.115.0/24
89.213.218.0/24
213.152.42.0/24
Signature Algorithm: sha256WithRSAEncryption
32:38:fe:41:4e:6e:e8:51:82:9e:c8:c1:c3:58:e6:81:45:7b:
56:c8:ac:db:77:a6:f5:84:26:59:3c:f8:d0:a5:36:5b:b1:0d:
98:6e:b7:4d:d8:8f:31:30:65:40:05:2d:58:d0:97:ef:5f:f0:
2f:f6:d6:85:f1:08:88:bc:2b:2d:aa:df:99:c1:9d:3f:ea:18:
11:f2:44:bc:73:a7:f7:b6:3b:0d:7a:2a:b8:bd:c5:ef:b2:11:
ec:1d:81:83:8f:e4:fb:25:71:81:90:44:c5:67:1b:93:73:b5:
1e:5d:37:3b:e2:64:2a:d9:4d:cc:8f:53:e7:f1:f9:ef:2c:b3:
5e:24:d9:59:a0:7b:2e:63:fd:22:65:d9:b7:7a:c2:09:1d:4c:
87:fd:8e:e1:1a:a0:a9:e8:2c:09:9d:33:f7:dc:f7:49:b2:21:
91:d2:26:96:51:3a:04:5d:2d:54:fd:90:24:19:49:0b:1f:6c:
4e:66:d2:85:3f:e3:f6:ab:38:18:79:3c:f3:09:3f:1b:fa:f6:
49:c6:c4:fc:14:36:eb:20:09:8e:0e:aa:02:8c:bc:b7:9d:00:
43:39:6f:56:61:68:ec:ba:5b:74:c5:e0:c0:9c:cc:ca:49:cb:
be:57:ad:39:ac:87:fd:86:02:d3:ac:d6:71:61:d6:0a:3f:a1:
4b:93:b7:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:23 2024 by rpki-client on console-ams.rpki-client.org