Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/g13yUEIKOZGqJPqHDKBNfL2q-Bk.roa
File: g13yUEIKOZGqJPqHDKBNfL2q-Bk.roa (raw, json)
Hash identifier: oZaJbwApokd3bF320/Yu5jKHivqojp2Hpg48UEdUkRU=
Subject key identifier: 83:5D:F2:50:42:0A:39:91:AA:24:FA:87:0C:A0:4D:7C:BD:AA:F8:19
Certificate issuer: /CN=ccbece03837767ab590c24750b5607203cfa1959
Certificate serial: 01856F0B4370E418F636F245CC61ABAFFE5F
Authority key identifier: CC:BE:CE:03:83:77:67:AB:59:0C:24:75:0B:56:07:20:3C:FA:19:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/g13yUEIKOZGqJPqHDKBNfL2q-Bk.roa
Signing time: Sun 01 Jan 2023 20:34:47 +0000
ROA not before: Sun 01 Jan 2023 20:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205015
IP address blocks: 185.189.89.0/24 maxlen: 24
185.189.88.0/24 maxlen: 24
185.189.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:43:70:e4:18:f6:36:f2:45:cc:61:ab:af:fe:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccbece03837767ab590c24750b5607203cfa1959
Validity
Not Before: Jan 1 20:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=835df250420a3991aa24fa870ca04d7cbdaaf819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:0e:74:a5:06:99:a0:9b:9e:1e:19:1b:84:09:
4a:a4:4b:df:1d:4a:49:07:f0:d1:ce:ca:d7:7e:40:
e4:36:54:4d:0b:09:8b:67:ca:5b:2c:59:b9:c1:24:
9b:9a:ec:ba:0a:2b:58:fc:84:36:b8:2d:c5:3c:46:
34:de:cb:0c:27:7a:66:01:f8:85:e5:fb:65:25:dc:
fe:7d:67:9f:8e:df:85:e7:88:97:62:93:8d:4b:96:
2c:42:aa:7e:9f:04:0a:18:b4:b1:e5:da:5b:a2:fb:
c6:cc:34:19:7d:cb:01:1b:1e:f7:3c:aa:35:31:be:
8e:78:8b:8c:aa:5e:0d:61:7c:a1:bf:ef:0b:10:23:
c2:7e:a5:a3:b4:57:1f:49:45:1b:5b:56:03:68:c8:
e4:16:71:f6:9d:fe:06:22:0e:73:7f:4f:8d:08:3d:
ee:ca:93:81:d2:c4:d6:a8:53:1e:48:c0:24:0b:db:
94:a0:a3:6d:51:d2:2d:eb:4f:85:5d:79:34:27:52:
a4:83:ab:7e:80:56:a0:31:f4:ac:7a:3a:8b:17:0b:
47:27:94:69:ae:0a:27:05:a9:30:9a:60:13:b6:33:
96:29:46:e9:32:9a:c6:32:af:a5:d2:90:47:0a:92:
0e:d7:a5:b1:79:88:69:e1:61:e3:5d:69:b9:b9:8e:
d1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:5D:F2:50:42:0A:39:91:AA:24:FA:87:0C:A0:4D:7C:BD:AA:F8:19
X509v3 Authority Key Identifier:
keyid:CC:BE:CE:03:83:77:67:AB:59:0C:24:75:0B:56:07:20:3C:FA:19:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/g13yUEIKOZGqJPqHDKBNfL2q-Bk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.88.0/23
185.189.91.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:83:25:22:47:c4:5f:8b:f4:a8:5e:8e:ad:b2:f7:70:8b:4c:
17:e7:1e:cb:5b:c0:6c:f6:d5:19:14:3e:bf:ab:6a:a7:ea:60:
06:68:79:24:d4:ed:ef:08:37:fa:16:dd:71:77:30:73:80:b3:
dd:0a:e3:27:4f:b8:e1:2c:74:04:e9:95:70:e3:36:ed:52:54:
42:c1:43:3b:7a:e1:40:ee:b6:01:3c:21:d3:1d:ea:ac:c3:d3:
44:bd:50:64:60:aa:65:72:d6:7b:09:36:b2:23:90:df:8d:96:
d1:21:ce:a1:45:b5:68:76:54:ac:e5:60:2b:b0:6e:88:3b:41:
01:e2:cf:cc:72:91:79:c4:12:6f:48:57:38:27:3b:0a:2c:53:
4f:7b:8d:2f:91:64:53:b6:37:44:f8:57:f1:9b:aa:85:53:0b:
1b:85:d6:47:45:6c:bb:6f:bd:ea:7b:c7:8c:f3:b4:1e:18:78:
c8:6d:80:fb:13:d7:7c:08:3c:0d:b6:49:34:d9:22:08:02:5c:
d2:3b:95:83:34:2f:26:a6:74:9d:e4:b7:34:ed:f0:31:ed:15:
cd:a5:b5:27:73:92:9e:e8:d2:99:86:a4:c7:86:d3:66:95:b0:
6d:e4:83:f6:91:9f:c2:ec:59:31:23:d3:a4:da:6e:52:5a:9e:
06:50:a8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:05 2024 by rpki-client on console-fra.rpki-client.org