Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/gtW6Sq6OUNq-NOnak4Fk6o89yvA.roa
File: gtW6Sq6OUNq-NOnak4Fk6o89yvA.roa (raw, json)
Hash identifier: 09lDHO2RD+qZ3Q8IivbFCXIZOTVzztqvBL88fsjVTyQ=
Subject key identifier: 82:D5:BA:4A:AE:8E:50:DA:BE:34:E9:DA:93:81:64:EA:8F:3D:CA:F0
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018D1C71C98AB075A85DDE65A19B009C3A6A
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/gtW6Sq6OUNq-NOnak4Fk6o89yvA.roa
Signing time: Thu 18 Jan 2024 12:00:35 +0000
ROA not before: Thu 18 Jan 2024 12:00:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 979
IP address blocks: 89.213.182.0/24 maxlen: 24
89.213.184.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jan 2024 10:57:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:1c:71:c9:8a:b0:75:a8:5d:de:65:a1:9b:00:9c:3a:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 18 12:00:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82d5ba4aae8e50dabe34e9da938164ea8f3dcaf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a0:34:11:b7:60:94:42:f1:cd:15:73:ae:59:
5a:52:75:0f:4c:fe:f2:a1:e8:ae:db:b4:81:34:22:
f0:02:48:eb:41:9c:14:22:79:9d:6c:61:6d:03:b9:
a5:cf:01:5e:b3:7b:86:7e:0f:b5:9c:fb:10:7b:c7:
f6:33:7e:bd:fd:49:0a:0b:df:dc:76:74:13:49:9a:
0b:33:a9:41:c7:37:98:81:c1:4a:1d:01:bd:ff:85:
77:af:a4:f0:0f:b4:bf:7f:89:c4:e9:0c:96:46:d6:
79:f6:ae:cb:1f:1d:e7:75:56:05:0d:84:f4:7d:a4:
5d:23:6e:c0:6c:3f:a0:9e:69:f4:68:cd:ab:27:bd:
f7:64:cc:f3:48:bc:5a:f2:08:33:5c:bd:47:a6:d5:
9c:ed:bb:02:b4:54:fa:4e:9f:07:b2:9e:77:1d:7c:
7d:30:70:99:c4:2c:5f:32:1a:dc:ee:ce:d5:b5:ab:
54:28:4a:ec:d8:2a:7e:b5:1d:cf:65:e8:32:bd:93:
30:e7:2a:98:62:a8:02:40:30:4e:97:dd:6a:87:55:
4e:61:5f:ae:43:98:e1:22:06:cb:6e:bf:bb:4a:83:
0f:8e:7f:5c:0d:62:03:1e:2d:ad:50:6a:1d:2b:06:
15:46:82:28:51:44:2d:55:7b:c7:b7:fd:96:9a:f2:
2f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D5:BA:4A:AE:8E:50:DA:BE:34:E9:DA:93:81:64:EA:8F:3D:CA:F0
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/gtW6Sq6OUNq-NOnak4Fk6o89yvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.182.0/24
89.213.184.0/24
Signature Algorithm: sha256WithRSAEncryption
16:93:3b:ab:13:f1:1e:62:f5:ee:04:23:50:12:17:14:3b:5f:
5d:4e:17:3f:d3:f9:60:74:0f:ab:82:bb:14:00:4d:d4:bb:80:
b7:61:d9:8f:38:df:73:cc:9f:e7:7c:13:4e:7d:d6:69:08:f5:
1c:42:88:dd:e7:81:7b:37:7e:21:4f:9b:b8:89:6d:16:c8:21:
e9:0b:93:9b:3b:25:70:62:0b:9f:6d:ae:19:42:5f:87:4d:61:
bb:b4:81:c1:7d:5c:6f:a2:4c:f9:c7:60:ae:d9:cb:2a:0e:3b:
b1:5e:20:88:d0:bc:07:f9:99:79:62:d5:9d:09:d6:d6:f1:17:
1c:38:e6:f7:ab:00:c4:67:88:46:82:af:1c:90:2b:13:e3:29:
a6:dc:6a:51:52:69:30:98:cd:15:54:5b:25:94:af:d7:bd:2f:
16:7b:96:7e:3c:22:d2:51:1e:74:bc:95:34:fa:61:e4:05:72:
4f:a1:ba:27:11:e2:20:47:e9:32:51:1a:27:df:48:c6:bb:3e:
de:00:11:4d:3e:a4:b3:b6:91:2b:d0:67:a6:0a:f6:8d:f0:ff:
f0:ea:e4:f8:72:fb:69:61:8e:ce:77:01:b1:40:b3:bf:f5:15:
14:4f:41:f5:00:7c:20:0a:65:19:bf:27:fe:c1:6b:40:4e:ea:
bc:28:47:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-fra.rpki-client.org