Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/KUiBofYZ8uRcVxlgkQzR7EVJVB0.roa
File: KUiBofYZ8uRcVxlgkQzR7EVJVB0.roa (raw, json)
Hash identifier: nmZjM0Pmcuen2TTOh+VPdWiJNAdylI6wFFuMh+1DHgI=
Subject key identifier: 29:48:81:A1:F6:19:F2:E4:5C:57:19:60:91:0C:D1:EC:45:49:54:1D
Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Certificate serial: 01857454534DAD294184BAF8EEEA2EE07D55
Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/KUiBofYZ8uRcVxlgkQzR7EVJVB0.roa
Signing time: Mon 02 Jan 2023 21:12:41 +0000
ROA not before: Mon 02 Jan 2023 21:12:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9050
IP address blocks: 89.39.1.0/24 maxlen: 24
89.39.2.0/24 maxlen: 24
89.39.0.0/24 maxlen: 24
89.39.4.0/24 maxlen: 24
89.39.3.0/24 maxlen: 24
89.39.5.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:74:54:53:4d:ad:29:41:84:ba:f8:ee:ea:2e:e0:7d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Validity
Not Before: Jan 2 21:12:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=294881a1f619f2e45c571960910cd1ec4549541d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f0:72:60:4c:20:73:e5:7e:1f:ec:33:1b:6e:
bf:7c:f1:35:c7:97:d3:f5:ac:3f:4e:e4:82:f7:5a:
3a:4e:1e:ce:a3:b3:0c:4c:a7:41:52:e9:64:35:1d:
b6:20:0e:0f:01:60:3c:29:59:fe:9e:4f:5f:19:fd:
d8:05:09:7a:0c:14:35:9a:08:2e:8a:e6:25:5c:1d:
77:e8:4c:17:79:c5:f6:9a:37:0d:cc:03:1d:95:08:
2b:f8:a8:01:1c:55:ef:ff:8e:d1:6f:26:2a:bd:96:
de:d5:a6:78:f2:3e:61:ef:40:a0:a6:ae:0b:5b:5b:
95:69:17:d8:48:43:76:de:6e:fa:cc:68:2c:f2:9f:
0a:5a:18:46:c1:d3:5d:74:ee:3a:d6:4e:fa:63:05:
98:f0:a7:f1:53:70:2e:ba:98:14:05:df:b5:0b:02:
70:f1:58:d0:b8:a0:56:98:0b:12:96:be:02:da:dc:
8c:7d:3b:0d:ac:9d:14:51:04:c5:cc:76:c6:c9:5a:
50:70:c1:37:96:75:ee:80:21:61:66:cd:1c:96:35:
03:78:3e:39:a4:bb:b8:7c:a3:64:a9:b2:d7:a8:fa:
f0:b2:19:ab:be:a9:65:07:d0:28:3d:55:43:d0:4c:
8b:c7:de:f7:63:87:43:38:27:23:0d:ca:73:53:ba:
3d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:48:81:A1:F6:19:F2:E4:5C:57:19:60:91:0C:D1:EC:45:49:54:1D
X509v3 Authority Key Identifier:
keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/KUiBofYZ8uRcVxlgkQzR7EVJVB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.0.0-89.39.5.255
Signature Algorithm: sha256WithRSAEncryption
76:16:4d:04:5d:c4:01:67:42:ff:dd:e8:78:6a:a6:d4:21:5e:
ba:c9:2f:fd:ab:0b:37:f2:80:7e:ee:6a:41:8a:f6:ec:64:73:
42:cd:f3:c5:b6:c7:3a:97:75:64:06:ee:70:44:c3:51:b3:76:
38:b6:52:88:3e:96:ef:73:51:4b:a0:2e:5e:46:3c:4a:82:14:
8e:8d:3a:d3:38:c5:7a:85:f1:af:f8:df:26:bd:03:a5:33:7b:
b1:3c:04:f3:3a:ef:4b:5a:4b:51:3a:cd:70:6a:e5:58:42:9d:
0b:c0:35:43:cb:56:44:72:9d:ef:1c:b3:ae:c4:0d:11:98:8a:
8d:06:ae:3f:52:8f:6e:77:38:ae:79:83:62:38:03:64:ad:89:
c3:fb:5f:7b:f1:3f:5f:a3:20:11:52:84:37:53:9d:58:e5:d8:
d5:ad:0b:03:0d:c4:03:6c:15:f5:86:0e:67:79:1e:9d:6d:0e:
42:77:46:1a:91:24:51:cb:6f:4e:9c:23:aa:01:74:15:c8:81:
0e:ac:4e:9f:0f:f7:21:bf:14:2a:da:ce:d1:83:25:a5:49:69:
8c:36:85:20:e4:18:93:67:86:94:66:72:52:f7:86:58:fe:5e:
df:44:4e:e9:8e:0b:28:e1:b2:28:38:a2:5e:2e:20:4a:1b:25:
e0:c8:b9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:52:28 2024 by rpki-client on console-fra.rpki-client.org