Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/lFWt38RqBX_Xf0xD8UO2ClLWnw4.roa
File: lFWt38RqBX_Xf0xD8UO2ClLWnw4.roa (raw, json)
Hash identifier: BV4sfGiStMx+RjUkkOEfCEfxeI1Skebz0rexsKf2eDU=
Subject key identifier: 94:55:AD:DF:C4:6A:05:7F:D7:7F:4C:43:F1:43:B6:0A:52:D6:9F:0E
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018BD70B350391435FF782E09DF39CCF96DC
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/lFWt38RqBX_Xf0xD8UO2ClLWnw4.roa
Signing time: Thu 16 Nov 2023 07:31:57 +0000
ROA not before: Thu 16 Nov 2023 07:31:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397630
IP address blocks: 89.213.162.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d7:0b:35:03:91:43:5f:f7:82:e0:9d:f3:9c:cf:96:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Nov 16 07:31:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9455addfc46a057fd77f4c43f143b60a52d69f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6f:c9:fb:a5:a5:13:19:f7:05:42:52:d5:0b:
fe:cc:1c:4a:d3:c2:29:d3:fe:a8:5a:96:b1:fe:03:
c9:09:54:f6:c0:6f:57:b3:c3:ae:13:05:16:34:28:
6a:2c:e7:b8:d8:7c:0f:7d:22:cb:1d:8a:db:06:b4:
00:c8:03:1d:57:cc:3e:cd:25:0f:b9:d4:2b:9b:58:
00:4c:3a:37:10:7b:5d:1b:7b:c4:4d:0a:3e:ba:fd:
74:4f:c0:4d:34:ca:be:7e:66:63:c7:ab:54:51:04:
30:f5:02:f9:e7:d3:cc:7c:56:b4:a4:ad:59:d3:d7:
94:91:81:9a:99:46:42:41:e1:53:0d:1b:ae:4e:f1:
43:b2:04:4d:2b:14:e5:57:65:39:b4:6b:c1:34:03:
40:45:31:cf:0f:e2:83:48:43:e1:30:73:80:5e:65:
b2:08:27:cc:2f:ff:29:58:8d:04:f1:bc:e3:92:dc:
cd:0f:e3:f3:29:38:fc:20:4a:8b:73:c3:b7:7b:fa:
e7:01:0f:f1:93:e1:13:4f:56:2e:6f:47:f6:db:d2:
ab:21:69:71:b9:15:a3:ec:ea:81:dd:75:21:20:8a:
8b:de:fd:f5:44:11:e4:71:18:c1:b9:b4:df:38:de:
32:b9:ef:8e:d9:fa:88:06:38:ad:dc:10:f7:1d:a2:
be:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:55:AD:DF:C4:6A:05:7F:D7:7F:4C:43:F1:43:B6:0A:52:D6:9F:0E
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/lFWt38RqBX_Xf0xD8UO2ClLWnw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.162.0/24
Signature Algorithm: sha256WithRSAEncryption
95:a3:d7:11:7d:ca:a6:af:49:44:fd:cb:36:dc:f9:64:02:35:
0c:a7:9e:a3:50:22:46:ee:96:3a:9c:f4:30:bb:b3:75:8e:08:
a3:cd:3e:46:50:27:74:b5:a8:5a:99:a8:a2:c6:b6:a7:14:a8:
6d:f7:08:46:e6:76:3d:28:a3:f4:14:d4:7d:81:cb:2a:2b:90:
19:ca:55:38:85:fc:89:9e:93:c3:1e:ae:93:ae:2e:14:5c:34:
de:4a:09:05:7f:31:6b:74:ae:62:f3:31:59:48:ae:9a:8f:98:
1a:f0:ad:ba:fb:4c:75:19:78:a1:ef:aa:f2:f3:5d:29:5d:75:
72:d2:40:00:67:10:3c:13:77:44:2a:14:29:76:e3:cc:3d:d1:
b4:e8:dd:4a:8d:f4:0d:c2:7b:51:08:21:99:cf:77:51:13:c6:
8a:61:23:21:c6:82:84:f5:a4:eb:bf:08:3b:cd:9c:d6:51:e1:
b4:18:b5:7a:18:86:c5:b6:f0:0f:55:59:78:c8:e2:32:f2:62:
d6:0a:d4:85:bd:d2:38:bd:85:6c:87:88:d5:49:78:0b:d9:29:
68:31:ae:42:08:fc:8c:86:ae:a2:7c:f8:66:89:d4:90:94:71:
10:31:99:ae:0c:17:4c:bd:6d:b7:c4:4b:b3:6b:57:95:37:a3:
b3:94:03:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:30 2024 by rpki-client on console-ams.rpki-client.org