Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d2141-ecb8-4289-9669-fd55c58edaf7/1/pLiUBy_fXDtfZWDbO2o0o-03t6E.roa
File: pLiUBy_fXDtfZWDbO2o0o-03t6E.roa (raw, json)
Hash identifier: A2LJHHbyukVKCqEtYgmU5WkEaZkACSGRZ2HE9hiN33I=
Subject key identifier: A4:B8:94:07:2F:DF:5C:3B:5F:65:60:DB:3B:6A:34:A3:ED:37:B7:A1
Certificate issuer: /CN=87d38ba12f4629c2131fc60e8950d6c303be7d22
Certificate serial: 018A0EAE3E6E38607F4BEAF2264DB752E50B
Authority key identifier: 87:D3:8B:A1:2F:46:29:C2:13:1F:C6:0E:89:50:D6:C3:03:BE:7D:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9OLoS9GKcITH8YOiVDWwwO-fSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d2141-ecb8-4289-9669-fd55c58edaf7/1/pLiUBy_fXDtfZWDbO2o0o-03t6E.roa
Signing time: Sat 19 Aug 2023 16:43:34 +0000
ROA not before: Sat 19 Aug 2023 16:43:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212544
IP address blocks: 89.41.184.0/22 maxlen: 22
89.38.212.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:0e:ae:3e:6e:38:60:7f:4b:ea:f2:26:4d:b7:52:e5:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87d38ba12f4629c2131fc60e8950d6c303be7d22
Validity
Not Before: Aug 19 16:43:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4b894072fdf5c3b5f6560db3b6a34a3ed37b7a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:95:1b:b8:4f:ee:88:1b:f1:80:f0:e9:ba:82:
92:9f:e3:0f:5f:db:91:3d:40:28:92:c2:17:2b:9a:
7b:6a:18:64:88:7b:fc:e0:00:86:68:2e:16:fe:10:
78:b8:50:7f:0b:f8:72:0f:a9:e9:43:e8:9b:10:97:
7e:dc:bc:9c:2e:72:0b:42:ab:33:f9:88:c3:ae:8f:
ea:c5:b1:68:0e:48:3d:fb:11:30:5c:4e:c1:5c:51:
f7:7c:ad:47:1b:b8:b5:2f:d2:5a:9c:99:eb:6a:0f:
e4:2c:b7:72:df:a6:db:c2:5a:a7:6e:98:af:ca:28:
a7:35:e8:f3:44:3a:43:ff:18:a4:a0:06:e9:5a:74:
88:f5:b7:e0:97:e5:06:1e:15:8e:9b:76:89:6f:12:
16:f2:5c:6e:23:74:31:36:b4:e1:9f:19:31:71:e8:
7a:bc:58:d5:36:80:19:dc:ca:5e:bb:69:1b:71:14:
da:51:d2:2e:fc:b4:83:d9:22:85:83:0c:62:09:4c:
78:12:f7:92:2b:c9:93:3b:f2:4e:60:9b:35:ba:f9:
9e:62:03:44:e1:28:16:d5:fa:09:e1:01:7b:d3:40:
ea:5f:c9:02:db:b5:e9:3a:83:ec:75:6c:57:57:3f:
83:a8:27:bf:d9:ed:e1:f6:bf:3b:04:bb:90:af:df:
4b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B8:94:07:2F:DF:5C:3B:5F:65:60:DB:3B:6A:34:A3:ED:37:B7:A1
X509v3 Authority Key Identifier:
keyid:87:D3:8B:A1:2F:46:29:C2:13:1F:C6:0E:89:50:D6:C3:03:BE:7D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9OLoS9GKcITH8YOiVDWwwO-fSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d2141-ecb8-4289-9669-fd55c58edaf7/1/pLiUBy_fXDtfZWDbO2o0o-03t6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d2141-ecb8-4289-9669-fd55c58edaf7/1/h9OLoS9GKcITH8YOiVDWwwO-fSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.38.212.0/22
89.41.184.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:68:01:68:31:fa:16:43:1b:59:8a:f1:b6:51:88:fe:ea:a1:
9f:37:38:39:eb:6c:32:90:c0:9a:74:7f:53:ae:d0:0f:46:f5:
63:48:81:1a:66:fe:a9:34:7f:2b:7b:72:53:80:26:e4:d4:f6:
6f:7b:b1:a2:78:e8:9f:1d:2f:b4:44:61:91:9b:3d:73:bf:ff:
c4:e3:93:6a:ad:3f:cc:3e:b9:fc:d1:71:0d:9c:0a:37:ea:10:
f9:8e:af:75:0e:7e:76:b0:69:56:6d:cf:59:e6:9a:43:6e:8c:
e6:44:fe:33:13:48:81:81:06:2b:9b:50:40:98:2f:e1:3d:86:
3b:d6:3c:72:d0:f6:db:13:66:85:17:f3:bb:46:fd:0e:86:c2:
8c:ae:ce:f3:47:8e:6d:d1:8a:6d:f7:ee:7f:a5:a8:25:bf:df:
df:ab:bc:c2:6a:65:c2:1b:74:f3:b4:c3:21:2f:51:22:3b:37:
1a:d5:67:df:5f:2d:08:28:c4:7b:d7:22:59:ee:80:f1:25:6a:
9b:e2:ac:88:04:fe:a9:80:d3:c0:c2:d1:88:70:a4:fb:9c:27:
98:c6:90:0f:18:11:e7:c5:2a:b5:17:06:c7:1b:26:81:f1:5d:
ef:b2:06:a8:e7:d6:2a:cd:75:dd:c5:d0:e1:d6:c5:3a:92:fe:
f4:64:00:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:09:59 2024 by rpki-client on console-fra.rpki-client.org