Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/tqo3cf9AcOT0az-yUfnz61YKl8k.roa
File: tqo3cf9AcOT0az-yUfnz61YKl8k.roa (raw, json)
Hash identifier: paOTKN9AmaoIwg/YQxJU2+AhBPetRMf4t6T8bRB6n6U=
Subject key identifier: B6:AA:37:71:FF:40:70:E4:F4:6B:3F:B2:51:F9:F3:EB:56:0A:97:C9
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 0185720C4473C413E9F8293DAE7C4DA979B5
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/tqo3cf9AcOT0az-yUfnz61YKl8k.roa
Signing time: Mon 02 Jan 2023 10:34:44 +0000
ROA not before: Mon 02 Jan 2023 10:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47959
IP address blocks: 89.22.192.0/22 maxlen: 24
89.22.196.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Jun 2023 08:43:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:44:73:c4:13:e9:f8:29:3d:ae:7c:4d:a9:79:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jan 2 10:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6aa3771ff4070e4f46b3fb251f9f3eb560a97c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cf:3a:eb:4d:10:57:92:60:64:2b:2e:0b:bc:
ce:18:60:23:78:eb:06:24:bc:a0:14:af:bd:a8:16:
cb:36:c0:53:cb:a6:48:fe:1b:bb:ea:fc:92:a1:06:
cd:dd:10:f0:a4:b7:e0:11:30:8b:6d:8c:7d:ca:3e:
7f:49:43:e3:93:e8:50:1d:b7:5b:4e:49:77:f4:b3:
32:29:fa:ce:4d:28:29:69:b8:0d:e6:cd:59:4e:d1:
75:92:fc:ca:43:ab:dc:17:40:66:f3:80:e2:34:c2:
d5:bc:c1:d4:e2:4f:7d:8e:f4:4a:52:93:de:00:2f:
7b:c6:a0:e7:21:fa:86:94:6c:a0:a8:4b:69:4c:b9:
1b:f0:42:51:c9:08:1b:34:81:0a:b7:5f:73:54:b0:
6e:23:a5:2c:ab:a0:6e:93:9d:9c:05:af:9d:7a:aa:
05:07:7f:5e:6c:f4:ad:6e:8c:a8:c7:4c:a9:90:87:
5d:67:28:48:8e:01:8e:79:a1:68:98:94:b8:9f:1b:
bc:9b:db:eb:ad:dc:f2:60:ba:b9:ff:d9:50:b0:3d:
56:f4:11:79:d4:5e:46:29:0c:ed:e1:79:cf:ba:69:
a1:4c:4a:9b:c2:a6:0f:54:f6:52:54:c0:35:b4:31:
24:83:6e:6b:fc:75:da:db:0a:49:c2:fc:7d:6b:12:
84:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:AA:37:71:FF:40:70:E4:F4:6B:3F:B2:51:F9:F3:EB:56:0A:97:C9
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/tqo3cf9AcOT0az-yUfnz61YKl8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.22.192.0/21
Signature Algorithm: sha256WithRSAEncryption
95:6e:0e:97:b2:79:8b:99:d8:fd:ee:92:c3:5f:00:fd:99:65:
40:2c:49:cf:fb:19:e0:87:a6:f2:50:1c:00:3d:c0:7f:e4:be:
c5:c9:88:c4:96:66:37:d4:06:c8:76:a4:43:e5:9b:bf:a2:69:
e7:29:c1:21:e5:b2:22:c6:4c:6c:10:65:fd:20:e2:f7:5f:5b:
a6:0c:70:64:38:e5:bd:00:f7:47:25:26:06:b4:f9:bc:54:a7:
cb:1b:63:ac:b2:32:d3:65:fd:a1:ad:26:07:b3:83:38:e2:4c:
6e:b9:da:54:8b:ca:ce:75:49:e8:dd:f5:11:64:de:ce:e0:b2:
d8:2b:19:5f:73:ad:26:58:c3:68:c2:62:68:a0:02:7e:e9:6f:
3d:c2:0c:b1:5a:2e:83:ce:12:b3:cf:b6:30:60:15:cb:f0:eb:
ee:83:86:0d:d8:b4:11:94:f5:74:9e:30:10:3a:d8:86:7d:0f:
35:0e:9e:b9:b5:1d:75:54:b2:2b:42:d7:f7:26:b3:f7:3c:77:
47:7f:c1:f1:06:2f:ff:39:cd:33:fa:ea:c4:6e:5b:d6:dc:14:
06:85:21:e7:28:d0:a6:2a:3f:6d:72:2d:68:cf:97:72:4e:af:
11:3d:17:13:35:0b:d9:04:87:df:9e:9f:82:53:7c:87:65:b6:
d9:b5:90:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:25 2024 by rpki-client on console-fra.rpki-client.org