Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/fCzuaysnplonBFbAtjKf-88grug.roa
File: fCzuaysnplonBFbAtjKf-88grug.roa (raw, json)
Hash identifier: iBYZBRPVSbjoTXsRCcQ5aM147HChSCeg8rP0AkggzPs=
Subject key identifier: 7C:2C:EE:6B:2B:27:A6:5A:27:04:56:C0:B6:32:9F:FB:CF:20:AE:E8
Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045
Certificate serial: 018571D7CCC6A5395777D4277F6CA48DD04C
Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/fCzuaysnplonBFbAtjKf-88grug.roa
Signing time: Mon 02 Jan 2023 09:37:26 +0000
ROA not before: Mon 02 Jan 2023 09:37:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48031
IP address blocks: 147.78.3.0/24 maxlen: 24
2a11:840:25::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 24 May 2023 14:12:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:cc:c6:a5:39:57:77:d4:27:7f:6c:a4:8d:d0:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045
Validity
Not Before: Jan 2 09:37:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c2cee6b2b27a65a270456c0b6329ffbcf20aee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:31:96:3b:5a:5b:fa:f8:16:a5:8f:4f:28:0e:
f3:6d:61:bf:55:be:0a:27:d6:47:c1:a3:b1:b9:d6:
c8:c2:a5:df:a6:65:36:8a:22:9c:cf:8e:e8:6f:4b:
43:c4:70:1f:e8:dd:14:0b:26:46:81:ae:72:83:5d:
85:15:18:7d:84:43:84:ad:a3:fd:0e:95:07:1f:10:
c3:87:3f:cc:11:34:1e:79:b2:07:e0:74:6e:65:4f:
75:51:33:bc:8c:3c:92:94:88:59:22:4e:ee:c6:3d:
36:d5:ff:59:e0:f7:35:a2:67:cd:59:74:9f:55:40:
ba:30:81:8a:2d:c0:db:74:fa:7a:b2:70:06:25:3f:
d0:59:f5:60:67:b6:20:5c:b9:ba:1d:5a:58:0d:58:
a0:15:c2:61:be:5e:a6:c2:c7:79:8b:c0:78:2a:a7:
8f:f2:ba:e5:6f:c5:13:f6:35:a1:f5:00:13:01:68:
ca:1e:57:59:02:f8:5a:d5:f9:c6:f8:12:b7:b8:2d:
50:ec:96:04:d8:cb:d5:4a:59:4b:ec:ce:fe:d5:9a:
46:81:0a:29:ff:35:a8:c4:7e:09:d5:b7:2e:a1:8f:
c3:a1:3d:b5:ed:3e:dd:1b:2f:ef:4c:e3:3f:cd:5a:
e2:72:25:0e:26:f7:eb:4d:f4:c5:46:f9:af:a7:41:
e2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:2C:EE:6B:2B:27:A6:5A:27:04:56:C0:B6:32:9F:FB:CF:20:AE:E8
X509v3 Authority Key Identifier:
keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/fCzuaysnplonBFbAtjKf-88grug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.3.0/24
IPv6:
2a11:840:25::/48
Signature Algorithm: sha256WithRSAEncryption
93:99:c4:04:98:73:4c:91:fd:69:83:0d:c1:ae:9d:f4:ea:c2:
50:de:2d:ed:c5:2c:7d:21:a4:92:7b:05:93:17:87:d5:01:ef:
57:bf:b8:83:60:41:33:e4:56:68:9a:00:4e:2f:bf:1c:9f:58:
2e:54:8c:d3:38:32:73:f4:a6:3e:9c:81:c3:2d:84:01:ce:58:
2a:6f:54:3d:57:4f:5b:4c:47:1d:c7:20:35:78:43:65:20:00:
30:d7:39:31:9e:21:fb:1d:49:1d:a8:0b:d2:f8:14:8a:ef:0e:
c0:4d:0e:18:bd:70:12:26:64:68:07:ac:6b:92:75:62:4f:ec:
03:2c:21:8a:e8:6f:75:97:c1:75:25:76:ab:36:c9:b1:ad:28:
0f:96:d9:f8:e7:4b:a7:3e:85:41:fc:0e:c0:5c:92:a4:97:74:
92:e9:3e:24:dc:91:f3:cf:78:ab:b2:b9:be:e0:c3:3d:3d:b8:
96:f4:92:36:ea:b5:e1:8a:dd:39:e4:e3:ef:06:6e:99:61:d1:
62:c0:79:92:ea:e6:f3:80:7c:27:ab:a2:b6:b2:e0:4b:f8:5d:
f8:21:5f:14:21:b4:96:28:81:53:4d:6f:5f:5f:f4:a7:5c:e0:
59:60:9b:f7:00:4c:22:25:cc:70:6b:99:d9:58:24:9e:f1:2f:
83:c5:4a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:51 2024 by rpki-client on console-ams.rpki-client.org