Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/rQzUn3IKCcXCMobccps94wk_0ls.roa
File: rQzUn3IKCcXCMobccps94wk_0ls.roa (raw, json)
Hash identifier: wo4Lb2LMKZonesHo1hrcGUhbyCBrPCKRFp/jj1bsu4U=
Subject key identifier: AD:0C:D4:9F:72:0A:09:C5:C2:32:86:DC:72:9B:3D:E3:09:3F:D2:5B
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0185C9B952AE332667573AD97CE540416F1F
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/rQzUn3IKCcXCMobccps94wk_0ls.roa
Signing time: Thu 19 Jan 2023 11:10:43 +0000
ROA not before: Thu 19 Jan 2023 11:10:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58022
IP address blocks: 89.37.112.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c9:b9:52:ae:33:26:67:57:3a:d9:7c:e5:40:41:6f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 19 11:10:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad0cd49f720a09c5c23286dc729b3de3093fd25b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:96:92:e3:f6:c5:8e:e2:dd:fd:77:45:80:e0:
6d:e5:31:00:7e:8a:2b:96:1a:c1:67:a7:10:30:bf:
4b:bc:62:0b:bd:3d:08:80:f8:d8:0f:2d:de:d8:06:
04:03:d4:05:01:83:14:99:32:09:7f:82:6f:65:4f:
b6:4e:fe:59:72:2d:3b:c0:30:11:0c:eb:32:14:d3:
8d:ab:55:fe:1f:5d:eb:ef:17:7d:19:28:ad:e8:c1:
c1:68:bb:a8:1f:40:39:1c:80:a1:3c:5c:28:e2:80:
6f:6e:a2:9c:60:4f:c8:5f:f8:e4:53:88:71:ca:aa:
ad:ee:d1:71:3d:d8:96:21:25:d5:00:3d:4d:46:b5:
df:da:24:8d:9f:88:ed:20:93:94:9a:c5:4e:7a:42:
d8:5c:98:d3:c4:1d:e4:b8:bb:3f:d4:d8:82:28:c1:
47:fa:85:3c:7f:70:ed:52:39:76:2f:01:54:95:00:
b0:03:17:9d:22:ef:13:e0:1d:5e:c0:cf:dc:22:bc:
d5:94:0b:87:fc:07:04:40:58:e8:14:4e:3f:3f:70:
27:d7:01:63:3b:21:68:ba:d0:99:60:5b:9e:62:09:
94:a6:d2:d7:58:68:38:af:8f:1a:5b:fc:73:32:b1:
36:71:f1:cf:32:a1:e0:aa:f8:6a:90:81:89:0a:b2:
fc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:0C:D4:9F:72:0A:09:C5:C2:32:86:DC:72:9B:3D:E3:09:3F:D2:5B
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/rQzUn3IKCcXCMobccps94wk_0ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.112.0/22
Signature Algorithm: sha256WithRSAEncryption
07:b3:33:03:41:eb:d7:59:be:c4:41:37:11:cb:e2:88:06:df:
3e:c3:b3:a7:51:09:64:52:bb:9b:c0:d6:d2:fc:1c:c2:dd:bc:
69:3e:9c:1c:d5:63:a5:1c:5c:db:5a:58:c2:ff:40:a2:61:bc:
21:69:1d:28:15:bd:27:1e:6c:87:3d:ff:76:c3:9c:17:3b:9d:
76:d3:48:ca:e6:98:e1:8a:80:ea:ec:9a:c8:31:49:ad:47:ed:
ad:aa:44:a0:b4:cb:0e:dc:e0:58:9c:bd:b5:4b:01:c4:22:3c:
8a:1a:34:a1:3f:88:68:13:db:98:d5:58:c5:de:ff:1a:19:c3:
b0:76:96:f5:ec:e6:78:93:5d:4b:8c:93:2e:17:87:27:1d:69:
5f:6e:5c:b7:64:0b:d0:65:dc:b0:c6:e4:10:f4:26:e3:89:48:
78:1a:74:35:7a:fd:46:23:e2:b5:37:32:8a:17:c6:4c:01:41:
2a:f0:aa:cb:70:f8:ca:11:e8:75:1b:9a:83:69:d1:71:7b:cb:
59:e0:a3:b7:3e:4c:f6:93:6b:ef:6f:9d:8e:5e:bf:be:4a:34:
15:28:b7:ad:d9:93:c9:fb:ef:d8:27:f7:c6:2b:81:50:d2:0c:
37:3c:51:24:71:02:a0:e5:e6:fb:9d:c2:78:87:fe:73:31:9e:
a6:f3:9c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:19 2024 by rpki-client on console-fra.rpki-client.org