Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/n9NJyy78P85YOOdUZNtScLv-V2k.roa
File: n9NJyy78P85YOOdUZNtScLv-V2k.roa (raw, json)
Hash identifier: lcovA55Zsb3yj8PTZDcwChyBLqU3IvnaG5OQbvGm61I=
Subject key identifier: 9F:D3:49:CB:2E:FC:3F:CE:58:38:E7:54:64:DB:52:70:BB:FE:57:69
Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Certificate serial: 018C583162B9C283E1D1A714D17C1F5EBC72
Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/n9NJyy78P85YOOdUZNtScLv-V2k.roa
Signing time: Mon 11 Dec 2023 09:24:40 +0000
ROA not before: Mon 11 Dec 2023 09:24:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 45671
IP address blocks: 89.42.20.0/24 maxlen: 24
89.149.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:58:31:62:b9:c2:83:e1:d1:a7:14:d1:7c:1f:5e:bc:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Validity
Not Before: Dec 11 09:24:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9fd349cb2efc3fce5838e75464db5270bbfe5769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:40:54:4b:3b:df:b6:69:b9:50:c8:68:94:2f:
12:47:da:4d:98:1d:f8:c8:32:b9:4a:c9:3b:81:84:
9d:1a:21:ec:f6:4e:20:2e:5f:29:65:7c:07:72:48:
bd:15:84:7f:a2:f5:4f:71:d1:a2:0f:51:ae:78:76:
c9:25:0d:4c:0c:33:ca:97:df:6b:23:34:ef:5e:f1:
74:ee:1d:d5:8d:1e:10:a6:2d:8f:fe:f1:95:9d:a3:
63:62:d7:6d:92:43:da:49:ff:39:64:43:c2:e9:2c:
33:86:9a:0b:b9:d5:93:c7:fe:bc:83:bd:55:e4:83:
84:27:aa:fb:3b:43:b7:11:fb:20:68:f2:8a:56:f2:
29:f0:77:67:f5:cf:23:5b:ed:91:cb:8f:61:fd:82:
1e:dc:bc:90:3d:43:09:a3:89:0e:e9:06:e9:fb:4f:
6a:2a:13:af:0a:85:5d:7d:a6:96:c1:b3:7e:ff:ed:
61:ad:f9:24:65:80:16:86:a8:bf:70:ef:d7:39:cf:
6c:e0:cc:55:47:eb:e9:6f:9d:62:32:08:16:91:b9:
49:8c:f3:f4:d7:8b:90:81:83:7f:1f:87:56:7b:9e:
53:dd:ae:7f:dc:97:84:43:f3:b6:11:6a:aa:aa:c1:
2d:ae:a8:fd:30:c1:de:07:9a:6e:49:01:c4:2d:17:
65:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D3:49:CB:2E:FC:3F:CE:58:38:E7:54:64:DB:52:70:BB:FE:57:69
X509v3 Authority Key Identifier:
keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/n9NJyy78P85YOOdUZNtScLv-V2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.20.0/24
89.149.63.0/24
Signature Algorithm: sha256WithRSAEncryption
34:f7:59:29:f3:c5:62:52:b7:d6:c7:6f:90:e2:e4:f2:6e:fc:
4b:13:58:ee:31:ce:3e:a5:31:2b:16:4f:d1:d9:24:95:de:c9:
cb:0a:6e:07:fe:6c:ef:22:78:f6:42:d8:d7:f3:97:59:02:07:
ba:f6:c9:a6:40:32:de:f0:55:3a:55:82:a2:1a:c3:9b:eb:5b:
a9:6f:2d:3d:26:fc:45:01:6c:4f:ec:29:4f:af:53:5d:4f:f4:
20:10:d3:ac:7d:83:0a:56:29:3a:85:92:4d:c9:ae:78:48:85:
3f:36:11:2e:8b:ef:86:70:b2:00:80:da:6d:ac:ba:5f:55:c1:
e2:79:52:a3:a0:c7:a7:94:37:bb:a3:cb:d6:6f:17:b9:32:90:
56:86:a9:62:80:2d:73:0b:d9:80:74:89:9c:c6:cd:53:57:e2:
6e:1f:40:99:54:e5:a2:e1:78:34:d5:5e:53:e5:c1:75:b1:cb:
53:a8:c5:91:bd:78:be:6b:71:bd:1f:7b:5f:41:82:28:c9:8a:
7b:d0:47:a8:c6:03:b6:41:fb:f1:ac:2c:e7:d5:49:c9:f0:20:
42:6c:19:d5:d0:1e:d5:45:30:5d:01:c4:46:ec:fc:e6:34:f8:
21:14:14:9c:90:1d:17:f8:41:8e:c4:fc:0a:a9:a5:cf:b1:ce:
89:a1:c2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:29 2024 by rpki-client on console-fra.rpki-client.org