Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/LPxhUrM4X3-rjJJI0yr2OmuBTDs.roa
File: LPxhUrM4X3-rjJJI0yr2OmuBTDs.roa (raw, json)
Hash identifier: uUd1ETMZ/2os0cUUmPvqoHe/kNOBNRxsxUFTNU5Uxgc=
Subject key identifier: 2C:FC:61:52:B3:38:5F:7F:AB:8C:92:48:D3:2A:F6:3A:6B:81:4C:3B
Certificate issuer: /CN=cb608201f88aeae9486b9fa87189d796c54027dd
Certificate serial: 019165BF02F7DAE3BD16F2DF748081E5E186
Authority key identifier: CB:60:82:01:F8:8A:EA:E9:48:6B:9F:A8:71:89:D7:96:C5:40:27:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2CCAfiK6ulIa5-ocYnXlsVAJ90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/LPxhUrM4X3-rjJJI0yr2OmuBTDs.roa
Signing time: Sun 18 Aug 2024 13:48:22 +0000
ROA not before: Sun 18 Aug 2024 13:48:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58232
IP address blocks: 89.23.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Nov 2024 11:20:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:65:bf:02:f7:da:e3:bd:16:f2:df:74:80:81:e5:e1:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb608201f88aeae9486b9fa87189d796c54027dd
Validity
Not Before: Aug 18 13:48:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2cfc6152b3385f7fab8c9248d32af63a6b814c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0d:84:42:04:b3:f1:84:d0:16:66:99:98:06:
55:e0:bd:fa:e0:a5:01:62:fb:34:2c:69:17:f0:4b:
da:75:3e:7a:ce:b2:16:b0:59:cb:f0:17:ae:e5:68:
10:b6:f3:ff:ad:d6:3a:b7:7e:2b:10:fd:4d:63:b9:
b7:a8:35:9b:93:98:3e:3a:3c:02:76:33:53:bd:1f:
dd:aa:24:47:c0:9e:07:34:55:42:97:2b:c0:83:ba:
67:75:43:8e:25:f2:c6:a0:a5:4f:2e:5c:b8:6d:5a:
79:d0:44:99:12:34:8f:2a:a4:fb:c1:42:98:5d:a7:
44:16:f2:37:0b:ff:fc:b7:97:5f:fd:77:4c:1b:df:
35:cd:57:f0:bc:2b:e2:31:76:b5:24:b0:4b:e8:ac:
68:b3:7f:0c:ee:64:2d:ce:11:25:53:16:dc:2a:b7:
cf:14:d9:3d:99:d0:40:49:bd:29:8b:1e:b2:4b:2d:
9d:f5:57:78:46:31:78:5a:1d:4b:06:12:14:b3:1d:
4f:16:e8:ae:20:59:43:7b:17:7e:8d:79:82:e9:3e:
76:84:aa:fc:4a:a5:d6:72:f9:7e:d5:44:c6:b5:67:
26:ad:27:a9:93:57:43:c8:f2:55:5a:67:20:75:d5:
b4:4d:87:e7:8f:b2:f6:3e:d0:24:11:4f:ae:8e:d9:
d2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:FC:61:52:B3:38:5F:7F:AB:8C:92:48:D3:2A:F6:3A:6B:81:4C:3B
X509v3 Authority Key Identifier:
keyid:CB:60:82:01:F8:8A:EA:E9:48:6B:9F:A8:71:89:D7:96:C5:40:27:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2CCAfiK6ulIa5-ocYnXlsVAJ90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/LPxhUrM4X3-rjJJI0yr2OmuBTDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.126.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:31:fc:4d:5a:7e:16:2a:cc:1f:16:11:a9:43:83:47:db:25:
21:7a:6f:1e:6c:54:be:c9:d3:95:b6:3e:9b:27:a8:f7:5b:e6:
eb:09:1b:14:92:27:67:95:da:71:a9:37:22:ae:c7:f2:25:2d:
e7:d7:98:d4:50:ca:c2:d6:8c:65:91:c1:37:a3:60:79:1b:92:
8a:87:fa:4a:f3:05:7a:1c:78:c7:44:13:6a:04:1f:4e:91:a0:
2c:db:79:1e:1e:b3:e5:01:36:12:55:78:5c:5e:e8:61:b3:44:
98:9b:b3:83:4e:54:01:2d:56:8b:d6:36:71:28:6e:89:42:f6:
33:af:29:c3:71:86:54:bc:f9:12:7f:6a:85:1b:a6:a1:06:bf:
fc:51:2e:4c:3d:5d:30:d6:b0:f2:94:a6:38:dd:58:18:53:1a:
1f:5c:46:27:c4:58:ec:df:fe:ec:58:58:9a:03:29:83:c5:97:
84:5c:f7:d0:46:2c:82:a6:f1:60:47:a5:86:4d:a4:69:5a:22:
ac:76:b2:23:9c:06:ad:65:32:33:fd:99:87:b5:e3:1f:8a:2e:
5a:0e:6b:1a:f9:05:e9:b4:92:a9:2b:e1:4f:9a:1c:78:4c:ec:
bc:05:f1:ab:a3:e8:db:43:51:32:af:4c:41:93:65:87:d4:3d:
4c:27:c1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 16:38:35 2024 by rpki-client on console-fra.rpki-client.org