Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/e0EFBapSphkAPc8VUqUqeFfIDzE.roa
File: e0EFBapSphkAPc8VUqUqeFfIDzE.roa (raw, json)
Hash identifier: OPUwP2JEHpkETgnb90ghR6T5er6KlReHMsmgFo3oa+4=
Subject key identifier: 7B:41:05:05:AA:52:A6:19:00:3D:CF:15:52:A5:2A:78:57:C8:0F:31
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018BF261DBFBF7A3607F3E0A9EB0A7DD8B36
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/e0EFBapSphkAPc8VUqUqeFfIDzE.roa
Signing time: Tue 21 Nov 2023 14:56:21 +0000
ROA not before: Tue 21 Nov 2023 14:56:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216362
IP address blocks: 89.213.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 Nov 2023 09:05:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f2:61:db:fb:f7:a3:60:7f:3e:0a:9e:b0:a7:dd:8b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Nov 21 14:56:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b410505aa52a619003dcf1552a52a7857c80f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ee:f4:3d:6d:64:c6:b2:eb:bc:ca:6e:15:75:
0b:14:44:fc:d6:b5:fd:cb:27:b3:a0:fa:44:4e:ef:
e1:34:cc:d3:da:21:3d:cc:23:91:b4:2c:21:d9:a2:
b7:95:50:c1:99:5d:60:ae:0b:8c:ca:ec:f1:7e:17:
ec:43:3a:07:81:29:5a:82:08:d0:af:d7:29:a4:e5:
b6:d4:cd:ed:fd:93:de:5b:b4:83:a1:6b:f2:ee:24:
f5:db:97:d9:c3:91:b9:df:e7:44:d6:34:fc:24:26:
41:50:e6:67:a9:dc:fc:f5:40:b7:92:f1:65:eb:89:
ea:7e:c5:f8:d9:2d:6e:a3:71:20:f8:08:15:f5:4e:
67:59:f8:0c:a0:67:6b:5c:af:ea:16:cc:3f:65:88:
17:39:ee:47:3e:2c:c6:c6:0e:e5:6f:b4:59:55:8d:
02:cd:74:2b:a0:89:d5:78:4d:2f:8f:3a:f6:f1:f6:
ac:c7:29:2f:63:70:1c:44:f4:2c:8d:55:21:3c:97:
dc:1c:d0:17:0c:49:72:ea:d5:b5:89:ef:fc:68:b0:
84:0f:fc:42:72:76:6b:6d:e6:9b:30:36:08:37:02:
84:82:ba:c5:69:57:70:38:1e:27:4d:55:30:86:8f:
2e:00:01:df:c8:b1:38:87:e6:4a:55:ce:c1:23:59:
74:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:41:05:05:AA:52:A6:19:00:3D:CF:15:52:A5:2A:78:57:C8:0F:31
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/e0EFBapSphkAPc8VUqUqeFfIDzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.181.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:dd:5c:58:dc:f3:21:41:34:ab:12:9f:40:cd:14:a7:5a:24:
d0:3b:a9:83:ce:6e:b5:a7:9d:7b:91:a5:06:b1:32:a8:f3:b1:
5f:b1:77:65:c4:e9:3d:7d:aa:21:22:cb:ee:bb:a2:c0:17:a2:
7f:e1:57:2a:0d:29:30:ba:29:d2:22:2f:7a:56:d7:02:69:2f:
b1:2c:d3:ea:1d:58:78:64:5a:af:ac:15:81:8d:b2:9f:9c:fe:
0c:93:1d:f0:e4:59:0e:df:e7:1c:94:8d:33:11:04:01:c5:ad:
b5:01:cf:b2:90:b2:d6:30:3c:8e:fd:e5:8e:27:1f:ec:b0:21:
74:85:f8:ca:53:d1:a1:2f:e0:07:7a:49:3c:c7:0e:52:71:39:
2b:ad:9c:a2:a4:ef:25:7b:dd:41:44:ca:32:22:75:99:1b:9b:
5e:f2:37:9c:2d:d7:96:ab:8b:0f:af:e6:8d:7f:37:30:48:56:
b6:a5:e7:94:da:45:1e:88:94:89:5a:78:3f:ab:63:f5:fe:90:
90:f7:3b:0f:b1:b7:3f:c1:b1:f2:3c:64:78:9c:ea:87:7f:2a:
cc:8d:8e:cb:17:93:c0:d2:c3:ee:3e:5e:59:99:db:05:14:54:
38:32:f2:a6:be:d5:e1:52:5c:e6:c9:49:09:79:74:37:8a:0a:
8a:29:0e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-fra.rpki-client.org