Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/x_mTburOAzwtR-sCtbXctfanwgQ.roa
File: x_mTburOAzwtR-sCtbXctfanwgQ.roa (raw, json)
Hash identifier: +MzZWHYHkMvSUXGQfeFWK2K3oO08xXBVeUwK7gxpWpU=
Subject key identifier: C7:F9:93:6E:EA:CE:03:3C:2D:47:EB:02:B5:B5:DC:B5:F6:A7:C2:04
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018BF12B8222AE51C4D05CC023CDD9B73FFA
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/x_mTburOAzwtR-sCtbXctfanwgQ.roa
Signing time: Tue 21 Nov 2023 09:17:22 +0000
ROA not before: Tue 21 Nov 2023 09:17:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201364
IP address blocks: 89.40.76.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f1:2b:82:22:ae:51:c4:d0:5c:c0:23:cd:d9:b7:3f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Nov 21 09:17:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7f9936eeace033c2d47eb02b5b5dcb5f6a7c204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6b:8f:dd:02:03:e5:98:56:14:39:51:58:79:
fd:1d:48:bd:78:e3:40:54:7e:cc:24:ce:bf:61:87:
1c:83:b4:86:c9:0b:34:7e:5b:be:dc:1a:b5:bd:df:
d5:8c:50:12:b5:0f:af:03:1e:f9:4c:28:08:ec:0b:
4d:ca:50:8f:5e:fe:88:67:71:86:01:6d:86:73:ad:
09:d9:9e:ff:fa:41:67:a7:6e:32:0d:77:c2:0b:b7:
56:a3:2e:92:2a:b5:bd:56:b4:b6:f5:50:d0:fb:8a:
76:58:18:97:01:af:17:ff:27:70:a1:55:18:85:ea:
f4:5c:8d:d7:2b:65:76:52:93:48:51:16:71:bc:f5:
24:a4:35:ba:4b:b9:f8:8b:36:fc:5a:e2:43:00:4f:
d5:f1:5e:84:d0:06:42:13:69:7d:7d:b4:1b:8d:96:
5c:18:f2:f4:dc:f4:56:a2:ce:32:0c:a6:3f:f5:ff:
de:2e:c3:ba:f2:6f:dd:d0:65:28:fa:8c:22:91:b9:
b2:3c:33:d8:d5:b8:98:6b:52:0d:e6:06:c5:36:6c:
b5:7b:3b:6a:f5:13:44:f3:cb:2e:f1:f5:73:54:7d:
1f:0d:d1:b2:1b:ff:e6:c6:21:97:91:43:95:48:33:
45:7b:97:95:1f:a8:9c:27:64:ca:98:1a:45:9c:8c:
98:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F9:93:6E:EA:CE:03:3C:2D:47:EB:02:B5:B5:DC:B5:F6:A7:C2:04
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/x_mTburOAzwtR-sCtbXctfanwgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.76.0/24
Signature Algorithm: sha256WithRSAEncryption
19:4f:8c:62:a0:6d:07:11:4b:ab:eb:06:13:87:78:17:66:70:
ee:b1:bb:00:54:d0:a8:d0:d2:57:b8:4d:5d:76:df:23:bd:8c:
e5:f8:f7:f9:16:04:4a:b6:dd:4b:07:08:0d:66:c7:19:cf:bb:
f2:83:24:e8:13:0d:11:d5:e4:ae:d3:4f:60:f6:52:81:23:26:
04:b0:cf:fc:e8:a8:8a:de:52:88:85:6e:03:ec:44:f5:2f:38:
6e:79:f4:05:77:f2:bc:c1:da:04:84:08:26:54:ae:33:1d:6b:
30:84:98:a3:9b:37:08:0e:60:4c:9e:dd:b2:40:39:cc:89:5e:
7a:e0:9c:15:f9:96:db:f2:5c:82:77:b3:33:75:7a:24:ba:2c:
1a:02:d3:d9:6b:c3:68:5d:d8:03:70:02:57:97:66:2d:4f:8c:
b7:e3:02:84:87:ba:79:9c:4b:e2:54:f2:45:d1:63:f1:c0:db:
fe:1e:1d:73:2b:0b:88:37:6e:3b:4a:fb:39:7e:c6:f2:8b:f0:
4c:95:0c:5c:24:1b:e0:dc:6d:b5:51:d3:f6:9e:01:51:24:9c:
70:11:a5:75:ad:79:b0:c4:8f:b1:08:16:c0:4c:71:00:90:b4:
ce:b8:e3:b3:6b:60:bc:5a:14:08:e1:dd:57:be:9f:e6:03:32:
c3:c5:c2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:49 2024 by rpki-client on console-fra.rpki-client.org