Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/EAdyiKSzxiXN5JRT-_v1CC0wmno.roa
File: EAdyiKSzxiXN5JRT-_v1CC0wmno.roa (raw, json)
Hash identifier: fN5qKpy9mMzyrVEH4AXsPi9bTS7ZJ3zYVkBEqIAWAcc=
Subject key identifier: 10:07:72:88:A4:B3:C6:25:CD:E4:94:53:FB:FB:F5:08:2D:30:9A:7A
Certificate issuer: /CN=b541558181f7863119bf4a1554c75dab1f6c5292
Certificate serial: 019198B5465F2FF714FC1AC9954750DD4B9A
Authority key identifier: B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/EAdyiKSzxiXN5JRT-_v1CC0wmno.roa
Signing time: Wed 28 Aug 2024 11:18:22 +0000
ROA not before: Wed 28 Aug 2024 11:18:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 100
IP address blocks: 89.169.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Sep 2024 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:98:b5:46:5f:2f:f7:14:fc:1a:c9:95:47:50:dd:4b:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b541558181f7863119bf4a1554c75dab1f6c5292
Validity
Not Before: Aug 28 11:18:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=10077288a4b3c625cde49453fbfbf5082d309a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:b8:37:df:5a:d1:53:5a:08:32:89:4f:81:5c:
2d:9a:c4:c6:e4:60:db:c9:1a:3c:cd:1e:ee:d9:c5:
7e:f5:35:79:05:d3:57:5c:d8:98:57:17:3f:ed:e2:
38:2c:af:d4:5d:2b:85:83:86:73:63:50:4e:1c:e1:
18:d6:e0:7e:3a:59:65:81:f3:81:f5:49:17:98:24:
e1:f7:6a:bf:4c:21:3f:8d:73:bb:35:7d:41:fc:1e:
9a:ae:b5:d2:93:e2:5f:9d:ca:7e:06:ba:80:a3:e6:
df:c3:41:c1:62:e4:e9:73:46:1a:b0:64:bb:be:92:
a9:55:88:7e:1a:97:da:b7:77:b0:bf:2a:bd:3b:a9:
06:1b:44:56:97:94:9d:e1:70:3d:4c:b6:ff:ac:68:
c5:dc:03:76:85:76:3f:72:ab:83:ab:19:aa:2d:cd:
38:82:32:2d:fc:d3:81:15:c2:97:ed:b0:84:b5:04:
04:fb:fb:5c:db:ca:bd:a1:dc:65:e0:2c:db:1f:61:
dd:6c:88:b7:03:0b:03:4e:20:bc:f9:03:03:db:27:
5b:ce:55:d0:e2:c2:91:86:88:17:5e:99:a8:2f:12:
8d:db:51:c2:2f:f4:d8:19:cb:e9:d8:af:c1:e5:dd:
e6:4a:9f:bf:3d:87:b9:31:09:d7:de:a8:3e:a7:a0:
9f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:07:72:88:A4:B3:C6:25:CD:E4:94:53:FB:FB:F5:08:2D:30:9A:7A
X509v3 Authority Key Identifier:
keyid:B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/EAdyiKSzxiXN5JRT-_v1CC0wmno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.169.15.0/24
Signature Algorithm: sha256WithRSAEncryption
95:2d:95:ac:db:7e:64:fd:e5:8b:32:60:ed:a3:56:f4:88:88:
65:6c:c6:7d:6e:8c:30:6e:83:71:ff:09:cf:f1:ac:7c:b6:b2:
9b:e9:96:e5:6d:05:cc:c6:aa:e9:a8:3c:ac:05:31:5c:1d:5f:
eb:d8:63:4c:2e:ce:b3:20:44:66:62:d9:a3:56:08:49:97:43:
37:9b:8d:89:6b:fe:e0:7b:0d:47:6a:ba:03:64:e5:c0:60:db:
bf:81:cb:56:2b:c3:e7:a3:6f:2a:54:09:9a:41:5c:a7:04:0b:
89:c3:ad:ee:05:62:53:64:0e:6f:40:11:3b:e3:55:f2:9b:d0:
f0:8b:ce:05:c9:79:d1:a2:13:9b:24:bb:b3:b6:8a:a9:64:bd:
81:7b:ee:44:1a:e4:55:08:69:25:b1:d1:b5:8d:bb:ab:9e:34:
f7:37:4a:04:93:1f:06:8c:98:8d:d2:5c:d7:3e:fe:31:5e:89:
9d:29:51:a0:af:b6:52:16:a5:4e:4e:1e:44:38:93:dd:97:1e:
4a:73:9d:3b:2d:7f:3f:a1:d8:6e:cf:8d:3d:6e:4c:e7:34:d1:
87:fc:73:80:db:eb:6f:06:8c:23:76:a8:0d:6b:42:cd:56:32:
46:b7:eb:70:b4:86:04:73:43:cf:20:d3:54:de:09:a2:37:2a:
35:6d:b1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 19:21:40 2024 by rpki-client on console-fra.rpki-client.org