Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/xi37u2anXaQoCOrZTCt_hpxdoz4.roa
File: xi37u2anXaQoCOrZTCt_hpxdoz4.roa (raw, json)
Hash identifier: vdqNkcHjyMt+Qi8tmiR/gwv6UwJfK0CEPFGuofRArkM=
Subject key identifier: C6:2D:FB:BB:66:A7:5D:A4:28:08:EA:D9:4C:2B:7F:86:9C:5D:A3:3E
Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045
Certificate serial: 01884E1A9458D72BC1AE7E750E406EA421AC
Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/xi37u2anXaQoCOrZTCt_hpxdoz4.roa
Signing time: Wed 24 May 2023 14:12:24 +0000
ROA not before: Wed 24 May 2023 14:12:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48031
IP address blocks: 147.78.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Jul 2023 22:59:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4e:1a:94:58:d7:2b:c1:ae:7e:75:0e:40:6e:a4:21:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045
Validity
Not Before: May 24 14:12:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c62dfbbb66a75da42808ead94c2b7f869c5da33e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:57:a2:0b:74:49:b0:6d:db:8e:f1:cf:24:03:
44:86:16:f9:ad:f3:51:a7:80:14:c1:a6:60:7d:6d:
55:42:f4:50:7f:8d:40:04:a7:41:c6:3b:c9:42:19:
8c:d2:d5:43:ae:b8:23:d0:f0:91:cb:7d:95:eb:89:
f0:a2:78:41:85:94:7b:81:48:0e:76:68:5f:2d:29:
af:ab:dd:50:fc:8c:e9:a7:e7:28:ed:7f:37:d8:aa:
3c:3e:68:23:70:b4:08:f8:cd:6f:ba:e3:f8:9e:20:
e9:83:45:fe:57:9d:2c:7a:38:7c:37:ec:e9:05:19:
dd:1e:5e:80:e2:c7:54:a3:bb:bd:9e:c5:ff:74:66:
a0:42:c1:c9:15:f8:ba:d2:5a:1a:9e:7a:40:31:b2:
dd:9b:2e:8e:2f:f3:34:df:6e:5d:65:ca:85:25:42:
73:1d:b7:7b:95:57:b7:37:1f:f7:2d:88:0b:b2:05:
50:9a:31:cd:c8:72:4d:28:2f:bf:bd:e7:8a:a1:29:
12:ac:3f:64:ec:80:49:1f:97:9d:34:1f:ec:fa:d7:
c1:b0:36:1a:e2:62:de:54:89:31:f4:4e:fe:65:62:
fb:38:93:45:b5:8b:bc:7d:9c:46:0d:47:b7:6c:89:
32:b7:e1:cb:12:00:7a:25:0b:44:36:4b:c9:73:b2:
d0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:2D:FB:BB:66:A7:5D:A4:28:08:EA:D9:4C:2B:7F:86:9C:5D:A3:3E
X509v3 Authority Key Identifier:
keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/xi37u2anXaQoCOrZTCt_hpxdoz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.3.0/24
Signature Algorithm: sha256WithRSAEncryption
72:ba:46:a9:e8:45:98:10:02:5a:95:ee:11:e1:75:90:83:a1:
96:ca:b6:81:23:c9:8e:79:cd:ce:eb:f0:57:53:72:8b:31:12:
d9:60:04:92:bb:8f:42:af:33:84:87:15:e1:d8:1a:d4:ae:70:
5c:0a:5a:77:5c:93:d9:96:ea:99:83:91:c7:ea:9d:f6:ab:6d:
58:b4:c9:71:5f:37:70:98:3c:c0:bf:23:68:af:dd:73:30:20:
ec:be:ee:7e:be:96:64:75:4e:c5:c1:39:13:74:e7:d4:b9:5d:
7b:5a:a2:99:bf:58:b2:f9:bd:9b:67:7d:1b:a6:26:38:d9:fd:
02:30:e5:0d:3f:1d:cd:2a:08:09:66:10:5e:18:bf:b3:e4:6e:
f1:61:cc:e6:d9:4d:be:6c:5e:7c:fd:03:53:0c:d9:95:b0:93:
b7:dd:ef:b8:18:a6:3a:c9:f7:a6:31:66:6b:62:8b:c9:e3:33:
05:ae:6f:86:87:23:99:23:7c:bd:9d:74:93:1d:ee:bf:1b:f3:
74:a5:04:2d:9b:3d:6e:39:98:8f:14:39:da:26:02:cb:d4:d5:
d6:9d:72:98:01:c2:35:55:58:d1:e1:19:a4:b4:5b:95:2b:3c:
a1:c9:e6:ad:f4:a8:e3:18:09:a0:24:49:d0:f0:54:e4:51:a2:
bc:d2:da:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:51 2024 by rpki-client on console-ams.rpki-client.org