Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/gQ64exGmnIbW5OTv3CDGez8RN7Y.roa
File: gQ64exGmnIbW5OTv3CDGez8RN7Y.roa (raw, json)
Hash identifier: 0rcFeQFrC0mWUHb7/nQjeNpG357gwt9MWlz66z1hTEg=
Subject key identifier: 81:0E:B8:7B:11:A6:9C:86:D6:E4:E4:EF:DC:20:C6:7B:3F:11:37:B6
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 01856E41E2331292D423CE6D762D67B38075
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/gQ64exGmnIbW5OTv3CDGez8RN7Y.roa
Signing time: Sun 01 Jan 2023 16:54:49 +0000
ROA not before: Sun 01 Jan 2023 16:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59856
IP address blocks: 89.40.75.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:41:e2:33:12:92:d4:23:ce:6d:76:2d:67:b3:80:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 16:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=810eb87b11a69c86d6e4e4efdc20c67b3f1137b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d1:f8:61:0a:14:2b:dc:77:fa:bb:98:8b:f8:
26:b7:28:dc:0d:ff:6d:a5:3e:53:ba:cf:17:49:ec:
5d:36:c9:6e:5c:50:d0:22:33:72:1d:09:18:28:f5:
9d:aa:54:49:74:8d:f0:ce:9a:55:00:ec:8c:de:aa:
26:eb:dc:77:e1:59:5c:6f:85:a9:cd:19:03:a6:84:
25:b9:cc:c5:f9:93:a5:81:06:9e:3d:aa:13:74:9a:
e5:23:c9:51:f6:9c:53:e3:f5:e0:02:19:5f:18:0c:
bf:7e:38:d0:6a:3b:1b:5f:de:6c:1e:df:ba:cc:69:
2f:6b:41:17:94:fb:b4:20:43:99:66:4e:8c:aa:b4:
c0:d1:68:43:f5:d6:39:c4:8e:06:b9:f1:a9:3a:2f:
b8:cd:54:ed:fe:d3:72:5f:af:77:89:d6:53:9a:9e:
0c:82:fc:24:40:97:10:49:e5:f1:af:f7:d6:c3:9c:
69:3d:fc:e5:fb:35:1a:8f:17:37:5b:d9:47:f5:fa:
02:ab:b4:5a:75:fa:66:39:6a:ca:ee:a1:fe:8b:a1:
c0:f4:3d:63:60:21:fb:a4:5b:31:c8:21:04:75:1c:
ba:2d:5a:7e:08:c1:89:cb:1b:0b:a0:b0:57:0b:f5:
8a:b6:24:e7:b5:a3:c3:b7:39:7c:5a:a9:bd:cd:e6:
c5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:0E:B8:7B:11:A6:9C:86:D6:E4:E4:EF:DC:20:C6:7B:3F:11:37:B6
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/gQ64exGmnIbW5OTv3CDGez8RN7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.75.0/24
Signature Algorithm: sha256WithRSAEncryption
59:2b:3d:10:1c:e6:b3:82:9b:69:ad:6c:e8:ab:92:12:fb:24:
8e:57:a2:b2:d9:a1:14:63:24:0e:dd:45:f2:4a:ba:32:2c:d5:
44:0d:ec:bc:43:d8:9c:a2:e7:65:37:8a:aa:7a:cc:ad:f5:70:
c2:cc:1f:57:e0:84:dd:67:9f:54:82:75:53:ca:b4:1e:49:05:
95:66:71:20:39:11:69:cc:ef:75:fd:92:e2:35:eb:38:11:d5:
ec:ca:6e:a2:a8:d8:5a:6c:7a:31:8a:ec:56:8a:3f:a6:6f:e5:
36:ee:60:a2:32:f1:af:7d:63:1e:a5:78:a2:5a:9a:4e:b8:90:
aa:29:52:ed:90:28:27:e1:3b:92:74:40:65:94:12:de:2a:40:
6a:47:51:bb:f3:67:8a:d3:dc:27:5e:cb:e2:f8:9f:59:ea:27:
ca:3d:14:82:2c:54:f0:30:12:54:fb:74:64:c3:27:88:4f:84:
ba:db:74:52:6b:45:92:9a:19:43:a7:9c:a8:e1:ad:0b:4f:f9:
b3:7e:37:d2:b1:3f:92:f3:3e:f5:cf:2d:07:be:b4:b1:8f:cf:
53:ac:02:03:c0:af:55:1b:0d:1e:47:d3:2b:b1:76:09:47:e0:
af:26:a3:b5:c5:97:e9:1d:5f:bf:65:e8:76:90:aa:b2:df:42:
b8:b3:6e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:06 2024 by rpki-client on console-fra.rpki-client.org