Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/9AMrJBkjR-vRnLTyOR-7im0vXt0.roa
File: 9AMrJBkjR-vRnLTyOR-7im0vXt0.roa (raw, json)
Hash identifier: npdJxap7UKiWGvTI8W3VWL3UlkD9CVxWvQ72Lr9dbg0=
Subject key identifier: F4:03:2B:24:19:23:47:EB:D1:9C:B4:F2:39:1F:BB:8A:6D:2F:5E:DD
Certificate issuer: /CN=4c6319fe7859c342f7cd9f711306f56590828d60
Certificate serial: 018CC8DE6CD83EFE8759CF6F5CAFB75D2003
Authority key identifier: 4C:63:19:FE:78:59:C3:42:F7:CD:9F:71:13:06:F5:65:90:82:8D:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/9AMrJBkjR-vRnLTyOR-7im0vXt0.roa
Signing time: Tue 02 Jan 2024 06:31:09 +0000
ROA not before: Tue 02 Jan 2024 06:31:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202666
IP address blocks: 89.40.168.0/23 maxlen: 23
89.40.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Mar 2024 19:37:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:6c:d8:3e:fe:87:59:cf:6f:5c:af:b7:5d:20:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c6319fe7859c342f7cd9f711306f56590828d60
Validity
Not Before: Jan 2 06:31:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f4032b24192347ebd19cb4f2391fbb8a6d2f5edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1f:39:87:50:d9:a2:3f:4b:86:e0:c0:e2:8d:
4f:c8:71:06:cb:e8:c3:6f:56:3b:02:e5:41:16:9e:
eb:e1:2d:94:08:37:6c:d5:68:ac:42:32:1f:ce:31:
2b:57:4c:8f:1e:26:08:56:d1:66:18:da:64:6d:22:
9e:4e:10:d4:aa:15:b3:be:97:a0:a1:75:19:3b:da:
c5:0a:46:0f:87:75:ed:a2:e8:5c:cd:fc:c7:3b:09:
d4:4a:fb:36:0f:3b:a9:b6:c0:5e:bc:8d:40:b3:c6:
08:5b:f2:cc:64:d9:63:f1:6e:bf:37:04:e0:61:32:
fe:a0:54:e5:1a:81:27:91:b2:90:cd:ac:ca:2f:4d:
3b:18:e9:22:a5:eb:56:4e:da:be:e0:df:45:6f:42:
21:12:f5:ce:d2:cb:06:38:84:ea:32:43:f5:43:51:
6c:f0:03:a1:55:e7:b3:45:5c:ca:e6:52:b6:cc:33:
03:1a:d0:f8:6f:e5:50:5b:3b:26:dc:9e:73:4d:b6:
f5:ef:11:dd:02:bd:e2:01:dc:04:77:64:fd:49:52:
b9:a4:fa:79:6b:77:b3:15:b4:1e:05:a5:5d:05:43:
92:99:0c:f7:5c:b6:1f:97:bd:e7:2e:38:bd:67:2e:
2a:aa:42:28:d9:6a:27:07:a7:60:99:0d:c4:83:d8:
c5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:03:2B:24:19:23:47:EB:D1:9C:B4:F2:39:1F:BB:8A:6D:2F:5E:DD
X509v3 Authority Key Identifier:
keyid:4C:63:19:FE:78:59:C3:42:F7:CD:9F:71:13:06:F5:65:90:82:8D:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/9AMrJBkjR-vRnLTyOR-7im0vXt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.168.0/23
Signature Algorithm: sha256WithRSAEncryption
43:7a:29:e1:ef:ad:81:34:c3:74:c7:6d:52:4b:e8:27:3a:06:
a4:af:63:5a:94:04:d5:df:c4:0a:7b:fa:d8:cc:78:69:6f:a5:
2f:35:cb:1d:15:ef:71:41:5d:33:6f:34:83:b5:4e:2e:8b:09:
d8:64:ed:ba:de:23:d2:93:9b:6b:00:c4:e9:2d:bd:98:36:88:
7e:1f:19:df:54:61:3f:14:5e:f0:1e:cb:c6:27:10:0a:bc:b7:
0c:9f:2a:f7:49:d6:99:84:70:93:f3:0f:4d:1d:47:f4:ff:93:
fd:4d:47:12:29:0d:a3:3d:23:4d:6e:d4:9c:b4:a7:e1:ac:13:
30:98:e2:d3:13:99:8b:66:d0:d3:0c:ce:f9:1d:e2:0e:d8:d3:
e4:32:f4:a8:b9:63:2d:63:6a:aa:71:c8:08:8d:44:c6:cb:08:
11:20:ee:c5:dc:ea:0e:59:27:ca:a5:88:91:28:ec:9d:ac:8c:
c6:07:99:08:72:05:78:82:96:c3:9b:66:e3:45:be:bc:d0:8c:
fb:c3:98:3d:24:61:d0:ce:49:d5:31:b8:3d:77:ed:df:b1:4a:
19:b2:9c:30:ec:0d:32:97:16:e0:cb:53:4e:44:0e:83:47:09:
a9:d2:f0:bd:70:5b:20:f7:dd:60:e1:ce:fa:51:cb:99:ec:d4:
0a:1e:71:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-fra.rpki-client.org