Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/qUOQq7bH5zWsxdfcUOqJdQamOsk.roa
File: qUOQq7bH5zWsxdfcUOqJdQamOsk.roa (raw, json)
Hash identifier: f9QC2WoM3AuXXdGPYh4nP+RqWVf7x2IM5RCzIjNlL+s=
Subject key identifier: A9:43:90:AB:B6:C7:E7:35:AC:C5:D7:DC:50:EA:89:75:06:A6:3A:C9
Certificate issuer: /CN=d9efe9d36f5f88fdf04742c4140c7532090ab770
Certificate serial: 0189F925BF617B9EAAD10882FECDC8A82899
Authority key identifier: D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/qUOQq7bH5zWsxdfcUOqJdQamOsk.roa
Signing time: Tue 15 Aug 2023 12:22:27 +0000
ROA not before: Tue 15 Aug 2023 12:22:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31898
IP address blocks: 89.38.28.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f9:25:bf:61:7b:9e:aa:d1:08:82:fe:cd:c8:a8:28:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9efe9d36f5f88fdf04742c4140c7532090ab770
Validity
Not Before: Aug 15 12:22:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a94390abb6c7e735acc5d7dc50ea897506a63ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0d:52:9d:95:3e:db:c8:67:a9:71:d8:fa:95:
3c:60:5c:04:32:a8:3e:aa:fd:af:58:fb:21:a6:d1:
06:fc:21:40:47:ee:15:36:dd:ef:15:90:d6:cc:14:
8d:7f:dd:1e:f7:0f:5f:f6:97:c5:2a:35:76:f3:16:
3d:d7:50:6e:b8:46:25:e3:88:f3:0e:4e:d2:a6:14:
bb:25:fa:9c:f5:91:99:d5:b1:da:5f:21:f0:8a:ac:
d5:03:46:0b:33:3e:c1:e3:a5:c0:5a:d4:cf:39:14:
6d:b9:db:13:4f:93:34:40:b5:25:6a:fc:8b:97:8d:
60:3d:25:a1:c6:e0:7b:b3:4c:55:05:f7:d1:bc:8a:
82:8c:72:2c:fe:50:aa:4f:23:f3:b9:10:36:41:cb:
b9:51:9f:05:0d:af:de:22:0d:1c:1f:4a:2c:7c:e1:
d8:f0:dc:f7:5d:4c:bd:5b:0b:f8:fb:cb:a7:71:1d:
97:46:20:05:e6:f0:24:de:79:e8:d9:78:26:ed:e9:
df:1c:cf:a5:10:57:5f:92:96:e4:16:b6:0d:3b:5b:
8c:9a:db:9b:af:0e:df:2f:9f:ee:c9:87:75:95:f9:
1a:a8:ac:d4:52:ee:de:04:ef:f8:40:60:6e:f5:10:
33:da:fa:8b:62:bb:7e:8f:57:e8:f8:1c:2f:dc:21:
f3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:43:90:AB:B6:C7:E7:35:AC:C5:D7:DC:50:EA:89:75:06:A6:3A:C9
X509v3 Authority Key Identifier:
keyid:D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/qUOQq7bH5zWsxdfcUOqJdQamOsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.38.28.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:83:2b:16:54:63:91:da:12:37:d2:8b:38:dd:8a:77:2e:8b:
67:05:a7:44:a3:03:91:4a:2c:72:6f:fa:1b:81:24:dd:09:c1:
fe:00:b6:66:36:26:6d:13:a5:95:0e:66:61:05:1e:01:7f:d2:
18:cf:b8:bc:a7:1a:8d:e0:1b:05:e9:9d:86:7b:f0:1b:dd:fb:
2f:e7:1a:a8:88:d8:07:fa:c5:1d:e9:64:ec:b0:f1:ab:8a:48:
41:47:3c:c2:0f:f2:12:b6:fa:bc:04:a2:ec:50:14:e7:4a:ff:
a2:bb:ef:91:e4:b7:f8:4c:a9:e4:48:eb:3e:8d:cf:03:b7:5b:
e6:67:e1:a5:82:db:77:a1:a6:7e:44:12:c1:4a:ee:8e:06:0c:
16:6e:41:37:49:c1:7a:d8:4d:b9:cb:6d:ea:2b:ff:e9:c0:d5:
a7:2e:29:72:1d:c1:eb:4c:a9:9c:ed:fd:a0:aa:00:06:b3:24:
48:dd:ea:b7:0d:42:75:02:6c:58:41:09:d6:57:11:07:e3:1b:
db:b8:ae:9a:ef:83:00:a1:03:e0:b0:5a:ad:3b:5f:9a:d5:2a:
e3:00:08:35:31:52:4a:b6:5b:3d:86:c6:73:f9:15:f0:ad:ae:
72:01:ed:b9:d7:66:a5:4f:62:f9:12:99:30:9c:71:d9:7c:b2:
3a:a7:c4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:55 2024 by rpki-client on console-fra.rpki-client.org