Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/acB7CR5XEXNqQRosFG44nxCSwTk.roa
File: acB7CR5XEXNqQRosFG44nxCSwTk.roa (raw, json)
Hash identifier: /QibKeuLoXgE4Ke32JltFRnTwPRt0fs9kO1ctyKCXdo=
Subject key identifier: 69:C0:7B:09:1E:57:11:73:6A:41:1A:2C:14:6E:38:9F:10:92:C1:39
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018AD575E20022CAF61659F2DBD2410AF87F
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/acB7CR5XEXNqQRosFG44nxCSwTk.roa
Signing time: Wed 27 Sep 2023 07:06:27 +0000
ROA not before: Wed 27 Sep 2023 07:06:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211975
IP address blocks: 89.213.140.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Nov 2023 09:05:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d5:75:e2:00:22:ca:f6:16:59:f2:db:d2:41:0a:f8:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 27 07:06:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69c07b091e5711736a411a2c146e389f1092c139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2d:d6:3d:bc:47:b5:0e:5c:37:b5:a9:93:00:
48:d4:f3:e2:24:db:62:c6:57:0d:89:ad:3d:b5:46:
e4:a1:3f:08:b5:17:bf:8e:cb:ae:b1:97:14:1e:ff:
04:da:e4:e8:7b:04:a0:ba:2b:9d:d7:d8:d6:0a:18:
6f:af:11:1c:e3:e7:79:89:21:9a:a7:26:e2:81:31:
79:f3:c4:fe:00:d4:1a:98:cb:8f:3f:2d:62:17:f9:
ac:57:ee:8c:df:41:f6:ae:32:6e:87:df:f8:3a:c5:
3b:19:ee:70:0d:f4:6e:fa:e4:7f:1d:af:79:c6:e3:
80:b4:0d:0c:c8:ab:5c:fd:32:22:91:6a:71:c9:58:
53:3c:65:b1:b6:ef:db:5f:8c:5d:76:69:41:9c:bf:
f1:82:32:47:6f:cc:d4:d8:8b:f7:69:94:d1:85:0b:
23:6e:39:e4:12:9a:f5:b3:0a:c0:8e:4c:58:f0:43:
9d:b9:e5:65:5e:ec:4a:99:94:a0:76:a1:b7:ef:73:
de:bf:25:1e:92:dc:00:54:a4:d8:77:bd:41:33:5f:
04:9f:32:50:4c:1b:36:fb:8a:91:f0:eb:e3:ab:b1:
93:a0:32:f0:0f:cd:1d:20:78:3a:07:8d:20:ca:5e:
06:ca:ae:70:3c:b0:62:3a:10:22:36:52:4b:5d:f2:
a7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C0:7B:09:1E:57:11:73:6A:41:1A:2C:14:6E:38:9F:10:92:C1:39
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/acB7CR5XEXNqQRosFG44nxCSwTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.140.0/24
Signature Algorithm: sha256WithRSAEncryption
21:27:e3:82:02:7a:31:57:bf:ef:44:70:d2:13:6e:75:16:c6:
36:a1:1a:16:4d:1d:7a:3c:0e:92:95:97:97:5e:b9:77:ac:5b:
09:2b:23:92:6b:5a:b2:de:04:13:ac:58:b6:cd:79:af:3d:9d:
02:29:82:73:ee:64:f0:c3:d2:f3:b2:c4:37:c7:2e:96:7c:33:
10:ca:7c:42:92:33:bf:4f:be:d4:8b:ed:64:8f:cd:67:8f:b1:
cc:21:d5:dd:2c:e0:e2:fa:06:7a:3b:bf:ab:d8:3e:29:49:23:
7f:e4:e7:6f:91:32:cb:2d:26:40:a9:a1:a8:1d:a2:88:54:d4:
1b:b9:ec:8e:7c:60:86:b6:4a:b2:74:73:35:ee:df:d7:da:69:
6a:f8:73:f5:77:f5:df:c5:c1:2c:e7:14:21:e9:2b:4b:f4:02:
f8:c0:e9:3d:0e:86:c3:2d:34:58:eb:26:8a:4f:06:8e:fe:0b:
31:df:64:4f:b9:2d:8c:86:fd:3e:ac:1c:fb:e5:ea:cc:23:bb:
36:86:a2:f8:bb:c2:a4:82:da:d3:25:1e:ae:24:fc:f1:46:bc:
59:13:fa:e6:35:ad:c4:2b:38:9f:0e:28:1c:df:39:07:d8:12:
88:1b:ea:5b:ed:4f:3b:4f:d5:f1:e7:9b:07:6f:4e:18:d8:77:
19:82:6a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:16 2024 by rpki-client on console-fra.rpki-client.org