Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/XkQmbVBCmH3O6gxkrYk3AyitvPE.roa
File: XkQmbVBCmH3O6gxkrYk3AyitvPE.roa (raw, json)
Hash identifier: qjdDma3Zzz/ZVKWv076EUkAO6wh9yCEtUpcuIUJ2exI=
Subject key identifier: 5E:44:26:6D:50:42:98:7D:CE:EA:0C:64:AD:89:37:03:28:AD:BC:F1
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018E04CAE1387CF87ACBA9BB53D8C19A416A
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/XkQmbVBCmH3O6gxkrYk3AyitvPE.roa
Signing time: Sun 03 Mar 2024 14:49:48 +0000
ROA not before: Sun 03 Mar 2024 14:49:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63023
IP address blocks: 89.213.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Mar 2024 10:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:04:ca:e1:38:7c:f8:7a:cb:a9:bb:53:d8:c1:9a:41:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 3 14:49:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e44266d5042987dceea0c64ad89370328adbcf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:36:69:79:2d:14:2a:f0:96:a5:e2:25:00:af:
62:e3:92:a5:b9:74:77:ea:de:ce:40:4d:7f:0e:2c:
e9:6f:ab:71:ac:0e:53:07:47:73:29:f8:f4:ff:0e:
1c:da:9e:8a:68:e2:19:ce:ef:e4:df:26:7a:df:a9:
1e:40:9e:03:b3:fe:fb:f2:bb:8e:35:8d:32:94:39:
da:3c:1b:39:b3:56:ba:d9:15:d8:cc:fc:ab:df:8e:
d1:2c:7b:54:a4:2b:a1:fc:04:0c:fc:fb:83:80:ff:
a4:04:b3:79:88:fd:50:6f:87:83:aa:f2:48:d9:c0:
c4:6b:a0:f4:09:6e:d7:96:6e:d2:69:26:a6:cb:2b:
ac:86:c7:ba:e7:61:a1:2c:d4:8b:56:17:3d:95:71:
c4:63:a4:1a:84:19:5a:66:da:0c:1e:9c:38:3e:a4:
99:55:cd:d4:80:84:c9:a6:08:6c:44:39:e6:2f:91:
51:b8:89:30:c8:97:83:ff:6b:32:0d:a0:40:b2:3c:
0d:cb:87:10:8d:6c:6b:1a:d6:0c:fd:bc:e8:2d:35:
f7:15:4b:e4:3c:57:52:be:18:c2:98:90:ec:c4:fc:
db:53:9f:f3:5d:d5:53:66:27:05:53:d1:6b:4c:bc:
73:70:93:e4:9a:93:e6:66:35:d3:23:e4:a8:d2:6e:
42:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:44:26:6D:50:42:98:7D:CE:EA:0C:64:AD:89:37:03:28:AD:BC:F1
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/XkQmbVBCmH3O6gxkrYk3AyitvPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.150.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:11:14:83:a9:cd:9e:a1:ef:55:bf:94:c4:bf:ca:34:b3:63:
3f:89:d3:19:17:00:7b:ff:9b:aa:c2:65:02:02:27:a3:06:d8:
48:6b:15:67:d6:19:73:c7:08:a4:7a:30:9c:f8:89:8a:54:1e:
82:3d:f9:39:03:16:bd:de:6e:21:ed:4a:a5:9b:1a:6f:4a:3d:
46:89:94:11:51:e7:a7:7a:6c:08:54:13:2a:3d:fc:81:e8:07:
ef:b5:a4:c9:5f:35:98:c8:94:1e:bd:e4:2b:5a:d6:75:ea:cd:
c2:89:53:c8:a6:39:f2:1d:e9:63:5f:ef:57:f4:98:56:05:e6:
38:4c:71:93:60:39:5d:b1:10:1b:8b:7c:2f:f7:6b:27:56:47:
78:6c:48:83:78:5e:f8:45:ad:d9:d7:cf:a8:63:8b:22:40:b8:
b2:13:95:d0:c2:d5:47:1c:25:6a:29:a4:6a:bd:ca:d0:56:24:
51:73:16:5f:d9:8c:5c:4d:73:5c:6a:ae:d8:5e:eb:80:df:ef:
ce:b3:d4:cc:de:6d:0e:98:94:25:7a:b2:14:70:47:2b:e9:28:
c7:77:9e:7c:bb:63:aa:d5:ab:33:da:f2:f5:fe:a1:47:32:a2:
ca:9f:07:dd:b8:bf:db:67:9a:e1:e1:f6:22:19:91:63:36:f2:
6a:6b:0e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:16 2024 by rpki-client on console-fra.rpki-client.org