Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/H5fPf42ntpwzBcnkXgaRwJyZmOs.roa
File: H5fPf42ntpwzBcnkXgaRwJyZmOs.roa (raw, json)
Hash identifier: 9mEPdv+FZkZfAynsboKMCQu3WA1ZgauPCx3bpwp4ijA=
Subject key identifier: 1F:97:CF:7F:8D:A7:B6:9C:33:05:C9:E4:5E:06:91:C0:9C:99:98:EB
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 01875A87334FB320599D8C39EC2A052E1507
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/H5fPf42ntpwzBcnkXgaRwJyZmOs.roa
Signing time: Fri 07 Apr 2023 07:03:42 +0000
ROA not before: Fri 07 Apr 2023 07:03:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199219
IP address blocks: 89.174.75.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5a:87:33:4f:b3:20:59:9d:8c:39:ec:2a:05:2e:15:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Apr 7 07:03:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f97cf7f8da7b69c3305c9e45e0691c09c9998eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6a:5a:30:2b:8f:ca:e5:5b:ee:4a:42:07:d6:
2a:e4:d0:6d:1c:97:62:a0:32:4f:dd:00:3d:e2:bf:
3b:04:27:68:99:74:0b:c7:46:2e:11:5c:fc:4a:a6:
62:f9:31:4a:7a:13:3a:23:d6:10:e8:f9:56:81:4f:
fd:70:af:ab:95:a4:ac:71:49:0b:54:5f:1c:82:b6:
3f:a4:5c:94:79:95:c7:0d:b0:7d:6f:7b:0a:26:95:
7c:d2:f0:1e:5f:47:7a:34:ef:10:4d:eb:d2:68:60:
7a:89:06:33:ae:30:da:eb:3c:0f:b7:fc:f5:9f:d8:
92:89:99:96:2a:34:d7:c4:80:61:04:c4:d1:c8:86:
5e:21:6f:5b:08:f5:65:c1:6a:e0:af:9f:2f:f2:e2:
52:c0:f1:e4:fc:69:a2:a5:00:f1:d7:47:46:3f:e2:
a0:6e:b4:7a:3c:24:52:38:7c:dd:4a:b9:b8:a3:61:
ac:5b:8e:ef:41:d2:cf:9f:f4:bb:1c:d3:54:fe:b4:
b7:d5:6b:cb:51:4b:2b:8e:eb:78:5e:64:cd:3e:6c:
73:00:e6:38:55:03:2d:37:e4:fa:65:c0:77:5f:1f:
fd:f5:59:fe:38:42:2d:d0:84:c6:90:9e:74:6d:9f:
c7:0d:d6:0d:da:07:2e:43:73:a3:3c:cb:7e:19:bd:
f1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:97:CF:7F:8D:A7:B6:9C:33:05:C9:E4:5E:06:91:C0:9C:99:98:EB
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/H5fPf42ntpwzBcnkXgaRwJyZmOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.174.75.0/24
Signature Algorithm: sha256WithRSAEncryption
34:54:ae:98:ca:93:d2:ca:30:c1:5b:7e:f7:f9:e5:a9:56:db:
dd:84:0a:be:96:0d:3b:c3:51:6c:9c:f2:08:42:e9:4f:8e:6f:
62:a3:f8:70:0a:22:74:dc:64:87:35:fd:22:29:a9:44:ee:b0:
33:8a:1a:6b:8a:8b:77:94:7b:f3:e6:3b:7d:66:e6:92:ee:ab:
ca:07:30:b6:22:6a:79:06:25:c5:9d:15:e9:eb:bc:61:4f:87:
40:ce:d2:41:11:db:a4:4b:57:2d:9f:49:86:a0:50:c0:65:dc:
e9:e6:3d:74:01:8b:38:68:a9:69:7a:e6:01:17:9e:b7:fe:2a:
c8:45:65:bc:f5:47:ed:75:a2:2e:40:21:c6:0b:d2:7c:69:7f:
44:c7:18:14:e1:d6:83:a0:4b:09:d1:45:17:75:3d:f4:8c:87:
bf:ce:2d:2d:12:a4:b5:3f:46:4a:69:06:b4:9d:fc:93:df:f5:
37:36:ac:ae:66:d4:82:cb:1d:83:2c:b7:b5:8c:6c:70:7f:ea:
03:de:7e:e8:b2:b0:53:58:e8:4c:e5:c5:42:7d:26:b8:16:f3:
7b:45:f7:73:da:2d:da:b3:47:28:06:11:c6:cb:67:26:9c:76:
79:b4:c3:d7:84:e2:64:69:b2:1a:f2:27:87:f8:1e:8f:eb:74:
3d:5e:21:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 28 11:30:05 2023 by rpki-client on console-fra.rpki-client.org