Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/CtDWihfsd44q_hjldvRStPokkMg.roa
File: CtDWihfsd44q_hjldvRStPokkMg.roa (raw, json)
Hash identifier: LOhCvAIkpXeCbjDAA5T09+kou9Yuk/7G63N8A1bWfOU=
Subject key identifier: 0A:D0:D6:8A:17:EC:77:8E:2A:FE:18:E5:76:F4:52:B4:FA:24:90:C8
Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Certificate serial: 018AF03CE81D612A8AE5670167B9C6A11B65
Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/CtDWihfsd44q_hjldvRStPokkMg.roa
Signing time: Mon 02 Oct 2023 11:53:57 +0000
ROA not before: Mon 02 Oct 2023 11:53:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 46562
IP address blocks: 89.149.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Oct 2023 12:25:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f0:3c:e8:1d:61:2a:8a:e5:67:01:67:b9:c6:a1:1b:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Validity
Not Before: Oct 2 11:53:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ad0d68a17ec778e2afe18e576f452b4fa2490c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:50:d4:70:8b:d8:23:bc:42:37:80:83:24:6d:
09:7d:5a:f7:2b:8c:87:c7:bd:0e:3e:8a:a2:e4:a6:
78:d1:bd:14:ce:8e:dc:cd:4a:b7:24:34:46:75:8d:
d3:59:e6:f4:5e:50:66:ce:77:c2:ec:51:1b:c0:32:
3f:2d:75:f4:cb:72:83:9b:22:ea:b5:fc:2f:d2:46:
a0:aa:15:67:1f:6c:1a:b7:24:79:1b:03:f4:86:33:
4f:a9:1f:9e:32:36:79:f7:86:ac:a5:64:bd:b6:bc:
5b:e7:e5:c5:b8:6b:ee:63:9b:33:f8:ba:1c:5c:13:
d4:d3:2e:7c:e2:67:ca:5e:b7:87:c7:93:8b:04:78:
ff:d0:0b:85:d8:b8:32:67:a6:3f:3d:86:8b:03:31:
af:b9:b5:5e:4e:18:81:63:c4:3a:55:84:d5:2f:66:
09:40:0e:54:61:5e:a7:4b:b3:9f:cd:a7:dd:42:48:
eb:92:cb:d0:4a:0c:e8:33:20:f4:74:dd:42:b2:e5:
41:ec:cd:f7:9b:11:0a:1f:a5:b7:72:e1:84:af:aa:
bc:95:f8:d0:19:c9:69:9a:34:09:07:48:9f:08:cf:
e2:e8:bb:f7:a5:ce:28:97:d3:45:82:49:5c:a0:6a:
dc:9f:90:2b:d0:22:1e:1e:2c:f9:ff:57:14:e0:35:
5b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D0:D6:8A:17:EC:77:8E:2A:FE:18:E5:76:F4:52:B4:FA:24:90:C8
X509v3 Authority Key Identifier:
keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/CtDWihfsd44q_hjldvRStPokkMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.149.25.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:4d:e6:fb:44:b3:28:90:b9:7f:82:c5:1a:c2:9d:a9:67:9d:
24:a5:c6:2d:72:5c:e2:53:33:b6:0f:cc:a4:3e:8d:21:dd:20:
4c:f1:81:00:45:60:e7:b9:8a:2a:67:45:a5:5a:98:27:db:c5:
8c:34:71:f8:58:d4:9a:4c:6d:5e:33:26:a5:fd:ac:8a:59:94:
fa:cd:bc:ab:97:f6:58:d8:29:1c:3c:68:70:10:02:62:df:3a:
ea:58:94:77:54:8e:83:98:2f:0d:c0:73:20:e7:2b:70:cf:4e:
08:45:c2:ab:5c:5b:b9:36:f5:92:2a:75:9b:29:d6:b7:ad:7e:
60:b5:0a:a2:fe:e1:37:a4:ed:ff:d8:1c:ec:37:96:5f:4d:56:
62:71:76:83:58:8c:c4:e9:5c:44:b3:29:64:ee:5d:67:63:62:
94:54:88:ad:bf:20:7d:5b:73:f5:e5:d0:93:ce:ba:d4:af:6e:
30:06:41:4c:52:21:74:bf:19:b5:50:9d:b6:8a:36:33:28:96:
76:a7:6a:a1:d2:80:d8:90:1c:85:70:0e:8b:df:00:5d:63:3a:
4d:ac:06:09:6f:3d:3a:0a:65:33:98:52:57:64:8b:5a:67:25:
db:b0:9a:f6:5a:2c:04:4f:62:96:97:46:96:e1:78:45:e5:46:
f9:68:42:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:29 2024 by rpki-client on console-fra.rpki-client.org