Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/gI29yxN4VsuV1KPKjXrv1dhGvSA.roa
File: gI29yxN4VsuV1KPKjXrv1dhGvSA.roa (raw, json)
Hash identifier: 42mx8v70j15VnaMzZqpXrRTKAQUEbpZvXM5NWEWQ6HY=
Subject key identifier: 80:8D:BD:CB:13:78:56:CB:95:D4:A3:CA:8D:7A:EF:D5:D8:46:BD:20
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018D119BD19E41914E694C1503DF360812AC
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/gI29yxN4VsuV1KPKjXrv1dhGvSA.roa
Signing time: Tue 16 Jan 2024 09:30:40 +0000
ROA not before: Tue 16 Jan 2024 09:30:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216276
IP address blocks: 89.213.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jan 2024 16:30:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:11:9b:d1:9e:41:91:4e:69:4c:15:03:df:36:08:12:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 16 09:30:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=808dbdcb137856cb95d4a3ca8d7aefd5d846bd20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3d:46:be:9d:21:2b:6f:89:73:e1:50:af:eb:
c4:8f:ad:f3:3f:6a:d5:f3:8c:cb:77:d2:58:a3:b6:
1a:53:e9:60:2f:44:ec:c8:92:d2:5c:7f:39:49:7b:
a9:95:22:7b:8c:b3:0d:d0:f6:3e:7d:01:a0:0b:8c:
f7:26:ac:57:95:21:8c:7b:61:21:10:24:2d:27:12:
5d:dc:b8:2f:7c:db:3f:8c:97:9e:9f:2c:4e:77:22:
76:e4:81:17:c0:1e:48:86:2b:0a:63:df:69:98:66:
34:9e:f9:13:66:0c:ca:af:26:c9:24:d1:2b:37:45:
cb:df:c0:38:8d:73:a0:69:73:64:85:1f:65:8e:ae:
76:79:1d:83:3d:32:83:28:bb:31:b5:08:e4:75:8c:
ce:06:84:23:ba:51:43:94:2a:12:7e:43:e5:08:4d:
25:7f:c0:39:ff:13:cf:c2:a5:53:f5:9d:91:d4:27:
5f:29:54:09:b9:b7:6c:ad:f6:a3:a6:87:d4:f3:db:
c4:23:5f:70:9e:03:84:b7:54:59:c3:6e:05:bd:dc:
ec:c7:44:ac:a5:52:34:db:f9:dd:d2:72:44:e7:6a:
82:d5:67:49:84:cb:0d:eb:55:bc:58:1f:e8:4d:0e:
62:0f:56:6b:14:05:f6:37:54:53:16:78:23:c3:7a:
2d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:8D:BD:CB:13:78:56:CB:95:D4:A3:CA:8D:7A:EF:D5:D8:46:BD:20
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/gI29yxN4VsuV1KPKjXrv1dhGvSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.139.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:9c:f5:4a:55:de:10:88:8d:43:3e:1b:7b:49:7c:ad:f4:e5:
38:d7:66:85:b3:62:5d:24:ad:ab:1d:92:9d:d6:bf:c0:8b:47:
48:7b:62:f2:57:6b:8e:26:2e:d2:92:a3:c8:52:b8:dd:0c:42:
e9:1b:e5:8f:99:c0:48:5d:b8:55:97:88:9b:73:f4:5d:59:da:
7c:05:1e:30:9f:91:18:33:77:df:bf:30:a2:8c:d2:49:dc:d0:
a0:03:74:f9:86:79:3a:83:36:c4:e0:72:e6:d0:b3:2a:a5:23:
9f:2d:d9:30:e2:86:b2:5e:bf:5c:72:92:30:b5:bf:a1:69:b0:
6a:59:19:30:a9:78:1f:2f:af:b7:67:97:24:79:4f:ac:36:2d:
76:f2:53:a2:33:78:ee:83:d7:0b:3a:94:8d:a5:ca:49:22:32:
6c:55:00:60:d9:24:e3:3f:20:fb:2b:f4:e0:9e:94:4e:30:6e:
cc:7d:3a:58:13:e9:d7:b6:e5:23:22:8d:28:3b:cd:b2:92:53:
ca:7b:3d:01:e9:d6:ad:6b:2a:a1:db:ee:93:8b:92:ea:8f:e9:
c0:5c:07:f7:b4:1e:28:47:5e:70:34:7a:a8:61:66:ae:d3:a9:
5a:3a:b3:36:42:85:7f:91:71:e5:37:69:a1:75:a1:bf:06:b3:
f0:4b:e0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:30 2024 by rpki-client on console-ams.rpki-client.org