Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/EDjVliAmUxF9H-Exx4dqiQ7jg6I.roa
File: EDjVliAmUxF9H-Exx4dqiQ7jg6I.roa (raw, json)
Hash identifier: KsqPAQ2aiV69qf0mFGOU6b8rgZ9HQtkS1v192MCOGFA=
Subject key identifier: 10:38:D5:96:20:26:53:11:7D:1F:E1:31:C7:87:6A:89:0E:E3:83:A2
Certificate issuer: /CN=2631166de785a3531bdc8361f1190a8369a7ed6a
Certificate serial: 018571C3035A2E78CA1FECF46C1B2A7A6B1D
Authority key identifier: 26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/EDjVliAmUxF9H-Exx4dqiQ7jg6I.roa
Signing time: Mon 02 Jan 2023 09:14:43 +0000
ROA not before: Mon 02 Jan 2023 09:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208685
IP address blocks: 89.47.1.0/24 maxlen: 24
2a00:1ca8:8a::/48 maxlen: 48
2a03:3f40:35::/48 maxlen: 48
2a03:3f40:89::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:c3:03:5a:2e:78:ca:1f:ec:f4:6c:1b:2a:7a:6b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2631166de785a3531bdc8361f1190a8369a7ed6a
Validity
Not Before: Jan 2 09:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1038d596202653117d1fe131c7876a890ee383a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:50:72:06:23:31:85:86:33:c7:8c:13:cb:1a:
fc:b2:41:35:c2:55:51:bb:f1:b4:fb:22:83:69:19:
d3:0e:0a:9d:be:49:cd:8f:d0:a2:a5:5d:0f:cc:4e:
95:27:e7:b8:99:11:15:40:55:72:f2:8a:09:22:9c:
38:57:e2:4c:5e:81:35:4a:e5:55:1c:67:76:23:7b:
64:ba:58:70:46:9c:b8:94:18:ec:33:d4:dd:65:93:
d2:15:a1:d7:49:5a:9a:5a:77:f8:76:40:4a:7a:2b:
27:e6:03:30:d0:2a:e3:9c:a5:df:2d:8f:0f:03:ac:
ec:29:e4:24:b1:4b:2d:bb:6e:d5:c0:b2:b0:d4:55:
be:a6:6f:bf:55:98:54:cc:61:9e:8e:05:dc:5b:f3:
63:b1:f8:ca:03:4e:36:6b:5f:75:ea:ca:dd:23:b2:
c8:f4:27:df:90:bf:4c:e2:28:4d:d9:23:6b:1c:2c:
b7:e6:9a:ed:62:06:64:87:34:cd:72:3d:2a:8b:17:
46:ff:fd:f3:09:91:98:2d:29:13:5c:a4:14:0a:ec:
d4:7c:27:ce:de:57:77:cd:48:64:24:2c:96:18:19:
46:11:11:fa:01:41:2e:e3:c8:d6:61:28:e6:79:5b:
17:d1:34:ae:66:ac:fa:47:92:ca:64:80:9b:f1:4e:
f9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:38:D5:96:20:26:53:11:7D:1F:E1:31:C7:87:6A:89:0E:E3:83:A2
X509v3 Authority Key Identifier:
keyid:26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/EDjVliAmUxF9H-Exx4dqiQ7jg6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.47.1.0/24
IPv6:
2a00:1ca8:8a::/48
2a03:3f40:35::/48
2a03:3f40:89::/48
Signature Algorithm: sha256WithRSAEncryption
48:7b:5f:a6:8d:7f:cb:0f:f1:df:41:9c:9d:1f:b1:76:a4:bf:
34:51:e5:12:d9:82:e6:18:80:03:0d:84:bf:be:c8:55:e4:1e:
5d:ee:07:b9:11:53:1e:c7:5d:ce:e9:c2:46:77:b9:2b:60:45:
d5:86:49:02:71:b8:6a:20:43:8a:0a:2a:09:5d:db:12:d3:17:
25:b9:be:d9:8e:2c:56:1e:9e:83:f4:d3:c4:77:fc:06:3f:54:
aa:d1:16:ff:42:39:5a:99:e6:59:c4:11:63:cf:be:08:e8:b6:
40:d5:58:5c:ce:d5:95:95:ad:bf:5b:65:57:bd:2b:f6:92:aa:
76:5d:a0:f1:9f:ba:19:2e:f0:cb:30:05:84:1e:64:83:46:90:
61:c9:11:6d:c8:06:f1:e2:44:04:bb:0c:93:fa:1f:55:8c:b2:
2b:03:a5:2a:73:7d:d8:98:54:ce:43:84:d6:6e:78:57:78:41:
d0:85:a9:34:0b:7b:6c:ec:10:61:2b:fd:49:42:de:3b:c8:e4:
f3:3c:0c:ed:24:80:b3:e9:4b:91:66:01:34:69:b7:21:d8:4e:
5a:4c:b2:73:7a:1e:c2:34:c1:ea:a3:bc:d0:a8:f0:e1:02:f8:
a8:66:81:cd:5d:35:a2:81:38:12:9b:66:6d:7d:14:ed:77:8c:
74:41:76:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:26 2024 by rpki-client on console-ams.rpki-client.org