Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/6T2vY5lBskUz0ZY_UIXaEQ1eajE.roa
File: 6T2vY5lBskUz0ZY_UIXaEQ1eajE.roa (raw, json)
Hash identifier: 1AV8AxZwD+IklA1IfEoLAoSHFyTUSQVYgwVVIamHqQ8=
Subject key identifier: E9:3D:AF:63:99:41:B2:45:33:D1:96:3F:50:85:DA:11:0D:5E:6A:31
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018CC26D27FEA4408C9FF4D2D8CF8333A3E4
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/6T2vY5lBskUz0ZY_UIXaEQ1eajE.roa
Signing time: Mon 01 Jan 2024 00:29:42 +0000
ROA not before: Mon 01 Jan 2024 00:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57974
IP address blocks: 89.37.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 07:51:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:27:fe:a4:40:8c:9f:f4:d2:d8:cf:83:33:a3:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 00:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e93daf639941b24533d1963f5085da110d5e6a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9c:b2:5b:61:91:91:74:79:f2:db:d5:cf:5a:
85:93:31:05:5a:da:d6:e7:a6:ac:68:db:23:be:07:
29:39:91:19:39:fb:c4:c4:28:aa:cb:dd:d7:f0:34:
55:b5:ea:d9:39:7c:95:b0:3d:7a:ed:68:ea:8d:a8:
6e:c0:05:01:b2:7d:cd:0c:ce:a4:e8:91:14:21:7a:
a2:79:f7:b9:9f:db:f4:c9:9d:95:df:a0:aa:e1:e0:
61:cc:2e:15:3b:1e:4c:dc:0e:88:d6:e8:98:28:8e:
67:7b:ca:08:41:03:f9:f3:63:ac:58:ae:32:9d:a7:
41:a7:be:16:c1:92:8c:81:fc:42:da:43:b0:76:8a:
bd:fa:6e:c1:61:0b:51:16:cb:e7:88:34:c9:7a:84:
3f:0d:a9:9e:73:1f:f9:61:a5:49:ae:39:fd:24:f2:
77:29:6a:b8:6d:8c:92:fa:e4:40:f0:6b:37:b0:8d:
12:14:ff:84:59:7e:4d:ef:be:00:cc:e7:35:66:aa:
1c:58:18:7d:67:55:7f:d8:80:a4:b0:32:17:9a:38:
db:e2:3f:79:66:e3:fb:2d:bc:a4:2a:04:64:72:52:
82:cf:e9:3c:42:35:2d:3e:1d:11:3c:5e:7b:96:bb:
fd:ea:c9:8a:1c:26:06:65:d4:06:a3:27:69:48:21:
e4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:3D:AF:63:99:41:B2:45:33:D1:96:3F:50:85:DA:11:0D:5E:6A:31
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/6T2vY5lBskUz0ZY_UIXaEQ1eajE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.196.0/24
Signature Algorithm: sha256WithRSAEncryption
88:a3:c8:7d:c7:f5:8c:a6:f6:84:2a:80:50:d4:ca:62:64:52:
52:85:ec:64:2e:ce:55:64:4e:cc:c3:39:c2:99:66:32:4a:75:
87:87:00:99:91:56:54:08:d8:ac:ec:53:59:3a:47:15:9e:e8:
e7:d6:49:58:b2:51:be:fb:7f:53:14:c5:30:5b:79:2e:c3:8c:
94:4c:0f:d9:a6:35:fb:33:1f:09:cc:ea:85:97:47:b0:4b:58:
c8:cc:3e:fb:0d:77:cf:74:bb:85:de:70:17:90:3c:c0:30:36:
c4:8e:0a:24:69:c2:7c:08:22:81:0b:7c:84:63:b1:30:c5:d9:
34:ab:a0:98:a7:60:39:fc:28:64:78:b3:cb:5d:f2:35:a7:45:
82:f5:31:bd:73:2f:cb:3c:e0:1e:e8:05:fb:77:b1:26:53:95:
09:49:9f:08:27:b1:fc:f2:94:c8:af:c7:72:f6:40:ef:8d:2e:
1f:f4:0b:df:91:40:4d:cc:dc:2e:de:0f:07:8c:20:3d:fc:ce:
ea:84:ca:90:7e:22:46:65:24:1f:4b:8a:c0:f8:21:80:de:06:
73:fe:1a:34:c3:a5:8d:11:bf:50:b6:f7:08:35:22:f2:05:b1:
b0:d6:0e:83:a3:32:ee:b7:d6:8d:c0:9a:3f:18:80:7a:09:15:
ff:b1:19:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:49 2024 by rpki-client on console-ams.rpki-client.org