Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Si56CeXHZFeIAYAhzXZNI_OXDT8.roa
File: Si56CeXHZFeIAYAhzXZNI_OXDT8.roa (raw, json)
Hash identifier: qUi2CoqyOdYyIEeqXwfkASacrlMRaOUpvaZI11YcSOo=
Subject key identifier: 4A:2E:7A:09:E5:C7:64:57:88:01:80:21:CD:76:4D:23:F3:97:0D:3F
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0187173823140B9D37DD752BE78FA30502E4
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Si56CeXHZFeIAYAhzXZNI_OXDT8.roa
Signing time: Sat 25 Mar 2023 05:22:47 +0000
ROA not before: Sat 25 Mar 2023 05:22:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59432
IP address blocks: 89.43.212.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:17:38:23:14:0b:9d:37:dd:75:2b:e7:8f:a3:05:02:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Mar 25 05:22:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a2e7a09e5c7645788018021cd764d23f3970d3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:40:07:3b:85:9c:0c:9d:83:9c:4c:05:06:43:
0c:ff:e1:60:ca:7b:b8:ad:80:32:01:4a:c1:a4:c4:
f3:68:69:1e:a5:0b:e6:57:11:90:86:30:67:4d:fd:
f0:25:89:bf:89:4b:90:7b:ec:0f:98:71:9a:70:62:
a1:d4:4b:ac:93:98:3d:f1:a0:46:88:40:74:ac:3e:
8d:3f:7a:6c:24:47:81:ca:50:09:52:63:f9:be:cc:
1d:60:2d:48:50:89:28:3e:b8:43:24:9f:7f:88:31:
1e:f8:fe:04:6c:46:20:1b:9e:11:0b:cb:9c:58:3a:
e9:b6:c5:dd:f3:9d:a9:4b:db:ea:65:7e:63:62:cd:
ff:2b:77:85:a7:3b:bd:07:f6:bf:0f:bb:82:d9:29:
1f:ee:41:a9:07:39:7b:b0:7c:4f:39:06:ae:43:cd:
91:61:82:45:b3:6f:a6:5f:c8:ae:f0:2b:ad:7f:5d:
1f:d1:3b:ef:be:7f:d3:15:8f:fb:95:fa:3a:62:cd:
1a:9f:01:24:b0:b1:fd:2b:40:eb:2d:c6:91:79:67:
7b:6b:b3:dd:47:c2:f1:9c:c9:34:33:b5:8e:74:a2:
f6:a4:6b:69:84:ba:60:11:c6:b7:4c:02:2e:76:51:
ed:fe:1c:9e:b4:e2:7f:7c:7f:11:c5:4c:37:29:fb:
7f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:2E:7A:09:E5:C7:64:57:88:01:80:21:CD:76:4D:23:F3:97:0D:3F
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Si56CeXHZFeIAYAhzXZNI_OXDT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.43.212.0/22
Signature Algorithm: sha256WithRSAEncryption
84:95:99:94:fa:87:e8:c2:5a:25:8f:e4:ef:9a:70:67:ce:09:
42:67:b5:63:68:a9:34:e2:14:0b:82:a1:02:80:0a:95:c1:01:
d5:45:d4:e7:1a:96:bb:79:3e:35:71:8c:38:1d:f3:c4:08:bf:
f8:69:aa:f6:b5:bb:6a:6d:fc:57:01:48:5b:d5:c5:93:40:1f:
35:7f:b2:24:90:66:40:d7:28:5d:3f:dc:88:8a:4e:67:d3:f1:
f5:89:1b:76:4a:34:cd:33:53:76:d4:de:54:1f:44:36:b1:24:
aa:c4:63:09:ec:bf:08:8a:98:1b:e9:b1:e4:59:85:75:94:76:
e9:1a:c5:5f:3d:24:98:79:a2:84:ee:3a:ef:77:7a:00:75:ab:
74:fb:82:51:92:01:6a:f9:02:23:79:8a:7a:45:6c:37:c9:27:
fe:d1:17:ff:3e:c0:be:84:92:15:ad:69:8b:dd:ba:41:ed:b3:
16:17:1a:eb:12:91:d3:d4:5a:20:01:5e:17:65:9a:9c:71:a6:
38:ec:f9:2a:51:e6:d7:1e:30:34:59:2e:31:9f:d0:c9:91:71:
1c:34:00:22:a5:d7:36:76:31:f5:76:50:97:34:02:6b:b0:31:
ca:81:d9:77:99:47:67:a7:59:66:1e:19:fc:54:2a:f9:0e:7b:
5c:c2:dd:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 23 12:30:31 2023 by rpki-client on console-fra.rpki-client.org