Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/xIa0CMpcTTaBILR1e5lkeXl-ZQE.roa
File: xIa0CMpcTTaBILR1e5lkeXl-ZQE.roa (raw, json)
Hash identifier: 7eSP+pPtlzVIFPcSEyX9t8b0lJIYZDx6vxjqjDc1K1Q=
Subject key identifier: C4:86:B4:08:CA:5C:4D:36:81:20:B4:75:7B:99:64:79:79:7E:65:01
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0191230A530261A1C6E39CFD5242D1AD49C4
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/xIa0CMpcTTaBILR1e5lkeXl-ZQE.roa
Signing time: Mon 05 Aug 2024 14:56:04 +0000
ROA not before: Mon 05 Aug 2024 14:56:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215362
IP address blocks: 89.47.114.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Sep 2024 10:46:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:23:0a:53:02:61:a1:c6:e3:9c:fd:52:42:d1:ad:49:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Aug 5 14:56:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c486b408ca5c4d368120b4757b996479797e6501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9e:19:6e:6e:70:25:69:0f:a2:c8:1e:25:a0:
82:9c:1f:e4:09:21:6c:cf:f7:06:2d:ad:d2:1b:e2:
7b:75:85:17:ba:b2:40:f3:64:f3:30:f4:fb:a4:42:
a8:29:f7:7e:a4:1c:d2:70:59:f4:21:02:26:ab:d9:
39:d0:ef:ae:ea:05:04:e3:50:e6:1a:59:48:60:c8:
40:b2:30:bd:dc:f1:b3:f5:b7:da:ea:0b:bb:b9:72:
18:d2:b6:bf:ca:f6:89:3f:ef:35:2b:6c:80:cc:2a:
d7:c5:2b:7c:50:82:be:d3:e4:51:9b:3c:f2:72:24:
bd:3d:21:ea:98:54:55:d9:31:1b:10:41:b2:96:3a:
b8:f2:8b:2d:ee:84:46:a1:32:dd:91:8c:e3:6d:56:
fe:3f:df:9e:31:3c:ae:03:5c:4c:05:1c:72:3a:db:
a3:71:80:31:d6:e7:50:d0:ca:ec:44:22:6d:b8:ae:
a6:5d:1a:85:f6:7e:41:3a:9d:33:3e:bd:88:04:27:
07:c7:88:64:9a:8a:31:e4:fb:fd:34:7e:b5:d2:ce:
2f:66:31:70:98:9a:78:08:c5:a9:8f:53:fb:f2:66:
07:12:15:81:9a:15:48:33:b8:ed:02:8f:0b:3f:04:
ce:70:51:b3:9b:2a:49:7c:4e:6b:d9:c7:8c:a0:f8:
65:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:86:B4:08:CA:5C:4D:36:81:20:B4:75:7B:99:64:79:79:7E:65:01
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/xIa0CMpcTTaBILR1e5lkeXl-ZQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.47.114.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:3b:2c:13:2a:c2:59:ca:9a:9d:d6:c6:c1:d5:73:4c:f9:45:
cf:af:12:26:4f:5a:8c:fc:a2:eb:0b:f0:85:4e:ae:0d:ab:01:
4d:e6:f6:99:d6:93:2e:b6:37:5f:f9:00:d4:21:42:4c:38:4c:
cb:23:30:7f:fc:a2:96:ad:c3:12:41:b8:e1:df:d1:92:20:dd:
5a:26:33:95:d5:86:d4:d5:b8:62:42:a8:d6:77:c2:15:aa:3e:
84:53:7d:5a:ee:f3:4d:22:a8:4c:52:47:f7:75:66:ef:73:30:
a4:66:fd:7d:ec:89:7b:c6:c0:d5:21:80:b7:47:b5:15:59:6f:
eb:d7:7e:eb:a6:19:f2:b4:5b:f4:cc:e2:98:f1:72:4d:c8:dd:
9b:40:47:d7:aa:33:bd:c5:2d:cd:29:42:dc:20:b8:07:aa:48:
ba:73:4f:65:20:9c:19:e3:60:ec:14:0f:9b:4d:1e:8f:4f:1f:
df:0a:f0:47:28:0a:3f:3e:4d:65:02:1a:e4:3a:e1:f2:d8:76:
d1:c2:28:f8:a2:8e:ca:8a:4a:29:eb:4c:b0:b9:70:09:f6:71:
87:cd:cc:50:57:d3:29:52:15:5f:5c:85:82:f2:78:d5:6e:58:
62:c0:70:9a:89:8d:fc:bb:92:3c:fd:aa:aa:94:36:d8:78:cb:
32:71:cb:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 3 13:04:13 2024 by rpki-client on console-fra.rpki-client.org