Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/tO6abajqlV3_SyykLZa_Ow6x4tE.roa
File: tO6abajqlV3_SyykLZa_Ow6x4tE.roa (raw, json)
Hash identifier: sJqoJiGqp0/rxcyLzAXgY/NcDEgMVsgTZR6HuyBymK0=
Subject key identifier: B4:EE:9A:6D:A8:EA:95:5D:FF:4B:2C:A4:2D:96:BF:3B:0E:B1:E2:D1
Certificate issuer: /CN=7826b604f6f8c03fe9df6c98e61f39eaed7555a5
Certificate serial: 01898D086D211D7A6B87F03D6292530A9DB5
Authority key identifier: 78:26:B6:04:F6:F8:C0:3F:E9:DF:6C:98:E6:1F:39:EA:ED:75:55:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eCa2BPb4wD_p32yY5h856u11VaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/tO6abajqlV3_SyykLZa_Ow6x4tE.roa
Signing time: Tue 25 Jul 2023 12:31:26 +0000
ROA not before: Tue 25 Jul 2023 12:31:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208324
IP address blocks: 185.89.98.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:8d:08:6d:21:1d:7a:6b:87:f0:3d:62:92:53:0a:9d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7826b604f6f8c03fe9df6c98e61f39eaed7555a5
Validity
Not Before: Jul 25 12:31:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4ee9a6da8ea955dff4b2ca42d96bf3b0eb1e2d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:72:c4:95:96:74:85:c9:b6:c6:3d:c0:bc:68:
6b:84:2c:56:a1:43:f6:55:30:1a:30:79:42:40:d1:
3e:5e:f1:c8:32:c6:bf:f4:89:c3:90:03:ab:b3:7e:
6c:e9:d1:5e:5a:27:e6:bb:46:75:df:48:53:e3:45:
d3:01:47:b2:37:05:23:c2:49:8a:f0:48:41:3f:cf:
c2:f0:71:ef:6b:d0:c3:42:0a:ef:18:a0:03:43:1f:
5e:dc:74:8e:32:29:4f:f5:12:d8:04:60:33:8b:7b:
45:f3:42:4a:b0:31:0e:50:d4:65:0d:40:78:40:97:
55:8a:c8:fa:58:42:5b:95:aa:0a:36:cc:7f:90:e1:
9e:19:0c:f1:f0:3b:c6:f9:f5:e8:7a:7a:0f:93:4c:
49:87:1a:44:37:fa:7e:a0:fc:66:c8:1a:98:ba:52:
de:63:eb:56:4e:9a:62:8d:50:95:1b:ed:9b:1a:65:
f2:42:65:f1:6b:2f:f8:37:74:a2:84:ee:03:a9:cf:
c8:c3:47:cb:b1:7f:cf:d4:5a:9b:24:f7:74:2a:9d:
bf:50:e4:c1:42:ea:84:9b:78:3f:b4:0b:1c:3f:b1:
e3:99:4b:a4:c0:b5:bc:6f:fb:34:35:94:25:02:a0:
53:11:f8:32:ae:dc:d4:0d:0d:58:bb:5b:c9:90:ef:
dd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:EE:9A:6D:A8:EA:95:5D:FF:4B:2C:A4:2D:96:BF:3B:0E:B1:E2:D1
X509v3 Authority Key Identifier:
keyid:78:26:B6:04:F6:F8:C0:3F:E9:DF:6C:98:E6:1F:39:EA:ED:75:55:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eCa2BPb4wD_p32yY5h856u11VaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/tO6abajqlV3_SyykLZa_Ow6x4tE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.89.98.0/24
Signature Algorithm: sha256WithRSAEncryption
66:ae:45:eb:8a:96:49:9c:92:32:38:28:00:ff:0a:5b:5d:12:
5e:52:65:2d:03:93:fa:8c:22:99:b6:bf:a2:71:da:00:e6:23:
91:c9:aa:ab:59:f5:48:fb:08:e4:dd:8c:2c:d2:28:50:1f:d8:
59:61:32:8b:e4:a0:37:5d:3d:ba:81:85:dc:0a:fc:49:e7:f0:
75:31:b6:1d:15:b6:53:a6:00:75:93:24:b3:e7:ef:15:cc:58:
cf:4e:93:8e:61:6a:12:92:70:f4:29:cf:89:5b:d8:a5:2b:9c:
4d:2a:2b:51:9c:48:92:9f:0d:de:65:6a:71:68:99:79:05:25:
6f:7d:4a:d6:df:33:9d:5b:dd:9a:2b:a3:80:06:c2:02:d7:49:
29:1d:71:2f:40:55:82:50:da:a3:3b:93:66:cc:bf:7a:ee:66:
c0:0b:4d:fe:82:67:81:2d:d7:39:db:2e:66:2e:0b:c5:68:41:
f3:45:09:87:39:5d:de:7c:fc:94:aa:6b:49:a8:e1:3f:16:66:
22:a8:f2:19:1f:be:06:a4:f8:25:30:9e:93:b4:68:ea:1e:7c:
e1:9a:f7:03:40:8a:64:a6:a2:30:57:0f:3f:d7:a7:1a:32:40:
a6:df:01:66:fb:ff:89:73:fa:40:8b:13:3d:44:99:87:3f:2a:
60:00:de:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:29 2024 by rpki-client on console-ams.rpki-client.org