Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ir1W0lMRRom9ZmpAEXf9jU0Ov_Y.roa
File: ir1W0lMRRom9ZmpAEXf9jU0Ov_Y.roa (raw, json)
Hash identifier: nRYfApX6KM4QCDFzrSiOD6Rb4aELl6D3yxJ3TFK+l5Q=
Subject key identifier: 8A:BD:56:D2:53:11:46:89:BD:66:6A:40:11:77:FD:8D:4D:0E:BF:F6
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018BF1D22194DDB5B601AC7318C0F1CC1E0E
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ir1W0lMRRom9ZmpAEXf9jU0Ov_Y.roa
Signing time: Tue 21 Nov 2023 12:19:22 +0000
ROA not before: Tue 21 Nov 2023 12:19:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142111
IP address blocks: 89.213.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f1:d2:21:94:dd:b5:b6:01:ac:73:18:c0:f1:cc:1e:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Nov 21 12:19:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8abd56d253114689bd666a401177fd8d4d0ebff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2f:df:6c:75:32:3f:c5:68:b9:11:ee:c3:d0:
79:0e:bd:c2:53:b6:a5:52:4e:24:d1:3b:49:81:64:
99:ee:67:07:37:82:58:1c:c1:99:7f:ab:6a:7f:b8:
de:83:2a:74:a8:14:b5:c3:64:8b:31:8e:8f:0a:f4:
0e:65:2a:65:ca:12:28:83:87:92:6f:b8:a6:a4:e1:
2e:1c:b6:80:76:c2:7c:5c:3c:25:81:ee:24:4f:ea:
2c:1a:9b:e9:94:31:8b:22:ec:cb:91:ca:84:f3:ad:
1f:a0:50:31:ed:52:8c:2b:b3:7f:3f:a7:b8:4e:fb:
ff:51:5e:71:6f:12:43:01:c5:e6:71:0e:c5:62:83:
a0:b8:4a:00:ae:41:11:5c:5e:39:da:60:bb:37:57:
3f:3e:9e:93:5e:c0:ca:71:48:d5:47:b3:af:e0:42:
11:84:d8:17:c2:9f:f9:56:6f:1a:f0:d1:80:a0:03:
25:b4:b0:5a:95:46:fb:48:79:80:a1:3b:82:da:69:
96:51:21:9d:ab:59:70:b5:2f:69:b5:db:88:6b:81:
b7:af:78:59:80:60:26:16:77:78:1d:0d:1c:94:42:
1a:c9:fa:d1:3e:39:83:6e:31:e6:9b:fd:d8:8b:06:
03:0b:9b:37:70:26:20:64:df:2f:d9:58:c5:10:60:
94:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:BD:56:D2:53:11:46:89:BD:66:6A:40:11:77:FD:8D:4D:0E:BF:F6
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ir1W0lMRRom9ZmpAEXf9jU0Ov_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.144.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:44:aa:a4:58:76:94:44:e2:c2:ac:12:5d:20:3b:85:69:a9:
e4:3a:05:09:1e:df:d7:e0:55:28:82:c4:7b:b3:10:15:ff:66:
04:4c:b4:97:b7:d4:90:83:ca:ec:97:2b:6c:83:92:18:18:06:
e0:93:75:0b:50:15:4c:66:0f:04:65:9e:f8:67:90:d1:1e:6a:
77:c1:d1:0b:c7:59:4e:39:dd:e0:5e:4d:ee:bf:3c:89:fe:04:
b4:2a:5c:37:07:bb:1f:c1:79:56:d3:e3:85:27:01:16:d6:2d:
8b:ac:fb:ce:4b:ec:66:4a:cf:10:e9:64:87:df:00:70:5a:0c:
f8:af:ad:e9:b3:1a:00:a6:2f:7b:67:e6:cb:22:ad:f7:7d:fe:
02:de:0b:34:e0:3f:44:ba:af:35:dd:81:43:70:c1:fe:ec:54:
78:d9:34:d4:5b:2b:a5:4f:72:62:65:9b:d6:64:3f:5f:ef:97:
78:4a:4a:bf:7f:c3:c6:aa:b2:c9:fe:48:50:2c:98:f3:4f:5d:
47:13:9a:2a:9e:23:61:66:40:b6:d2:bc:82:21:c0:3d:ba:e3:
cb:2f:89:4b:d3:e2:98:ea:4d:c0:b8:fa:cb:0f:32:f0:39:ba:
eb:49:31:c9:f0:73:bf:80:5d:98:82:25:4c:86:29:93:f9:28:
a2:28:be:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-fra.rpki-client.org