Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/m_RuLI-rNyqIWsDyuuS0mOf4bvs.roa
File: m_RuLI-rNyqIWsDyuuS0mOf4bvs.roa (raw, json)
Hash identifier: zH12Ba82rD3KhQA6Sl1HRTlhIF9AkHOIQ0nZVbMZEAQ=
Subject key identifier: 9B:F4:6E:2C:8F:AB:37:2A:88:5A:C0:F2:BA:E4:B4:98:E7:F8:6E:FB
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018D35FD3A52651A28F07D7BD00F8EEA9AB0
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/m_RuLI-rNyqIWsDyuuS0mOf4bvs.roa
Signing time: Tue 23 Jan 2024 11:03:24 +0000
ROA not before: Tue 23 Jan 2024 11:03:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 23470
IP address blocks: 89.213.164.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 18:50:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:35:fd:3a:52:65:1a:28:f0:7d:7b:d0:0f:8e:ea:9a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 23 11:03:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9bf46e2c8fab372a885ac0f2bae4b498e7f86efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b5:a6:ba:99:82:58:07:2d:48:5e:6b:02:97:
25:88:d7:7b:e5:83:d5:4d:26:3b:42:51:03:ac:56:
db:24:bd:b6:df:7f:02:0c:b7:55:2d:e9:4d:de:bd:
05:27:49:09:ac:e1:ae:09:35:6c:60:a0:9d:76:b6:
8e:0f:f2:d0:ba:4f:e2:50:50:a3:7a:a2:65:3d:bc:
b5:e0:fa:84:94:f2:88:dd:d7:79:23:82:cf:79:45:
fe:25:e9:9b:ad:2c:9f:14:6b:8e:81:1e:14:e1:88:
0c:93:16:60:b8:53:43:87:74:ae:37:e2:ec:ea:86:
60:f5:13:fc:52:76:1d:f8:18:d0:77:64:e3:52:b9:
8a:66:ba:9b:c5:fe:05:98:7f:bc:f5:29:64:d8:f8:
ea:80:57:9b:50:8c:56:03:4f:71:89:58:56:a1:f0:
e5:72:02:57:b6:80:df:96:9b:e9:f8:aa:18:eb:b0:
5b:81:fc:89:24:fb:9d:10:f8:48:74:03:e7:f7:13:
55:a4:6a:f4:05:2d:51:d7:64:a3:b0:e5:2e:c7:30:
9d:23:e8:9c:88:04:11:14:2d:e9:14:b5:4c:f9:50:
95:2f:89:d7:a9:0c:56:9c:2e:54:a2:4a:b6:92:ee:
3e:e3:bc:c3:17:aa:3c:92:a5:a8:f5:99:30:df:bb:
ea:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F4:6E:2C:8F:AB:37:2A:88:5A:C0:F2:BA:E4:B4:98:E7:F8:6E:FB
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/m_RuLI-rNyqIWsDyuuS0mOf4bvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.164.0/24
Signature Algorithm: sha256WithRSAEncryption
87:3a:e8:35:da:ab:7e:36:23:99:4d:22:c6:31:67:6d:6c:8c:
e5:bf:8e:5d:f2:ff:0a:23:da:af:e9:4c:5a:c2:1e:5b:f3:13:
84:e1:10:4c:20:b6:18:5a:15:8a:82:49:0b:5e:da:a9:39:d7:
36:c0:24:2e:7f:04:e7:fa:9f:be:a0:53:0c:4a:a4:81:b2:90:
d8:74:f8:c0:e2:6b:52:31:eb:74:9e:85:34:b1:8b:58:9b:3a:
cf:20:29:bd:7e:18:9b:8d:15:8d:76:ad:1f:40:f8:32:0a:a6:
1f:20:0d:90:cd:3b:a9:f7:92:9f:bb:de:e3:15:6c:45:78:d7:
10:a6:e7:c3:5e:8e:35:6b:fe:02:93:cd:fd:82:29:ff:ae:ed:
a9:fe:12:ce:ca:c1:c9:2a:79:03:f8:11:f1:28:9a:8c:4b:99:
ed:ce:1f:b4:b8:80:8a:6d:27:4a:06:ef:7d:72:f5:aa:fb:2c:
f4:fb:92:72:6e:d7:cc:7f:67:f4:4c:10:17:08:dc:75:d5:ed:
33:0e:39:96:3c:52:be:d9:7c:08:c8:02:99:6a:7f:65:b9:fa:
b1:48:46:0b:97:35:f2:a1:64:f5:a9:de:20:fe:65:fb:bd:90:
58:9c:a2:78:56:4f:1a:22:0d:b1:d5:5f:9c:a3:f7:7c:76:66:
35:6f:f4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:31 2024 by rpki-client on console-ams.rpki-client.org