Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/Myj0LQWICjaeLtTjtFd6ShgLIlw.roa
File: Myj0LQWICjaeLtTjtFd6ShgLIlw.roa (raw, json)
Hash identifier: pZdNfh1FLC0H4c0RXRdUB1wYoL3TDZvYLKx4B3vMEDk=
Subject key identifier: 33:28:F4:2D:05:88:0A:36:9E:2E:D4:E3:B4:57:7A:4A:18:0B:22:5C
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 01856E41E49823044D4D5D0449EDA120F74B
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/Myj0LQWICjaeLtTjtFd6ShgLIlw.roa
Signing time: Sun 01 Jan 2023 16:54:50 +0000
ROA not before: Sun 01 Jan 2023 16:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206382
IP address blocks: 89.36.192.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:41:e4:98:23:04:4d:4d:5d:04:49:ed:a1:20:f7:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 16:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3328f42d05880a369e2ed4e3b4577a4a180b225c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e5:5a:17:34:6d:e5:e0:6f:73:13:90:9d:d9:
a0:3e:fb:2f:82:33:fc:3e:b2:25:94:e1:9f:27:fa:
30:52:5b:cf:f5:b8:a4:e5:94:08:f8:64:32:94:02:
1a:ad:9f:d9:04:0f:f0:55:19:46:50:5c:ed:73:96:
f6:f9:46:77:53:8b:a3:c0:fc:68:7f:7b:da:a2:ac:
12:db:78:c2:08:38:0f:33:d1:37:94:9b:73:aa:5f:
20:b2:74:fd:74:0c:08:99:50:80:14:4a:fc:cb:93:
15:1a:70:a6:9c:48:01:e1:74:e7:b5:93:7d:91:96:
c3:09:9a:a8:0e:5a:3b:77:2b:44:42:51:e1:2d:c0:
0b:8d:dc:b1:7b:40:1c:bb:61:eb:6b:6c:34:b4:48:
0b:e9:e2:9c:eb:8f:f9:ac:69:f4:4a:4e:75:ae:66:
ee:6b:27:7c:31:74:22:35:4c:15:89:ae:5c:b8:0c:
11:ef:6d:ad:eb:6c:0c:a9:6e:a6:62:b0:c5:05:2e:
f1:09:d7:e6:4f:f1:7c:53:a9:30:99:a7:63:ff:93:
07:20:db:b8:e9:77:46:df:64:4c:d0:3b:4a:67:b7:
c7:5f:28:57:30:5e:d9:b8:63:c8:4c:0e:b6:70:31:
d2:c5:41:c8:4e:ff:89:a6:3e:37:11:8e:bb:90:35:
30:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:28:F4:2D:05:88:0A:36:9E:2E:D4:E3:B4:57:7A:4A:18:0B:22:5C
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/Myj0LQWICjaeLtTjtFd6ShgLIlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.36.192.0/24
Signature Algorithm: sha256WithRSAEncryption
69:36:a0:6b:e0:e9:1b:74:a8:21:2d:eb:be:af:19:0e:aa:e1:
a1:83:ae:82:ed:c2:46:c4:fd:cb:74:f8:2e:c6:d2:40:c3:5d:
92:4d:16:68:7c:e0:87:f7:78:04:01:a4:78:2a:af:19:05:44:
91:b1:fe:c8:b1:ba:82:71:40:01:aa:98:49:9f:e5:56:eb:3c:
b3:1e:4a:2a:70:c6:5c:f6:92:60:eb:83:ac:d3:11:35:87:cf:
85:ba:ab:f5:59:b3:d9:24:85:8e:1e:be:86:a5:99:3c:cf:b9:
bb:c4:f5:1c:fd:97:a0:fa:31:b7:96:e8:26:7c:d1:a2:26:9a:
06:d0:37:c7:5f:d2:04:43:ea:a3:f7:f2:c3:10:c4:f7:fe:6b:
f5:99:3e:51:05:56:a9:e8:16:41:f5:47:9c:65:fb:bb:cf:59:
f7:12:5b:f2:f1:58:0e:5a:78:03:c3:2e:a7:66:1f:ac:b9:22:
fb:0c:fa:da:77:2e:da:21:ba:bb:3a:19:9b:14:e5:60:e3:fb:
de:ca:df:92:e9:55:0d:3c:5b:7a:da:74:c5:fe:6e:fb:2f:0f:
21:aa:7f:04:f2:16:23:1c:fb:0a:f4:8c:78:df:ca:35:47:1d:
aa:8b:f8:e9:fb:64:00:b6:06:f0:7d:24:af:98:68:19:e3:31:
a2:a3:61:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:41 2024 by rpki-client on console-ams.rpki-client.org