Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/_PuKSyuIQCnH5HkTlPXrZvs28ak.roa
File: _PuKSyuIQCnH5HkTlPXrZvs28ak.roa (raw, json)
Hash identifier: pfkulP8GSYrwVt/OIgIV/Q65ctKQxWfe4VWpcCHi00U=
Subject key identifier: FC:FB:8A:4B:2B:88:40:29:C7:E4:79:13:94:F5:EB:66:FB:36:F1:A9
Certificate issuer: /CN=85d0e763f935c171694f172056eb44209db2e2cd
Certificate serial: 018B18BA78D8B17831837DDF59E56B190701
Authority key identifier: 85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/_PuKSyuIQCnH5HkTlPXrZvs28ak.roa
Signing time: Tue 10 Oct 2023 08:35:55 +0000
ROA not before: Tue 10 Oct 2023 08:35:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198404
IP address blocks: 89.39.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:18:ba:78:d8:b1:78:31:83:7d:df:59:e5:6b:19:07:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85d0e763f935c171694f172056eb44209db2e2cd
Validity
Not Before: Oct 10 08:35:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fcfb8a4b2b884029c7e4791394f5eb66fb36f1a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:14:7c:80:05:e5:a3:99:e2:2e:1d:03:c3:68:
ac:e7:27:4f:dd:40:bc:ff:dd:d3:2b:3b:35:0b:ce:
46:d1:29:cb:6e:f9:a5:4e:0a:1d:c6:b0:60:39:98:
2f:81:b1:20:22:65:c6:58:f1:bf:b1:c0:5b:ad:14:
98:2b:6c:86:6b:72:43:72:2a:aa:a3:7e:fc:65:8a:
db:63:60:bb:3e:79:46:53:a9:81:12:75:63:77:9b:
b3:28:d7:7e:db:ce:67:70:c9:51:d0:f3:12:95:fb:
5f:e4:6b:b3:ba:77:0e:50:b0:7c:24:7e:ab:2d:6c:
f9:b5:5b:b3:74:1d:f8:3b:2c:5b:15:b5:86:52:f7:
31:28:b9:80:ee:ea:d8:a7:20:56:61:e5:7d:1d:ba:
28:80:4a:79:61:ec:71:ef:75:77:b1:99:48:96:31:
bb:16:7f:62:9f:69:2a:0d:d9:4f:33:a1:4e:e1:88:
45:13:04:ff:88:04:c7:4e:79:2e:a4:d8:f0:c4:f3:
64:9c:53:50:6f:77:9c:c2:b2:dd:26:4c:e1:57:8e:
24:87:23:37:15:97:d3:ef:05:f6:f3:a7:6a:f6:da:
2d:03:1a:bc:c0:7e:e7:b9:cf:de:4f:8e:26:7d:4f:
58:7d:f8:89:04:ec:cb:f9:96:4c:e6:5e:ff:a6:ac:
7e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:FB:8A:4B:2B:88:40:29:C7:E4:79:13:94:F5:EB:66:FB:36:F1:A9
X509v3 Authority Key Identifier:
keyid:85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/_PuKSyuIQCnH5HkTlPXrZvs28ak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.32.0/24
Signature Algorithm: sha256WithRSAEncryption
93:a6:7d:ec:6c:dd:28:e7:ec:fe:c4:05:17:ac:78:56:02:b3:
68:d1:4e:16:08:27:a8:56:ba:3f:54:7e:0d:dd:99:07:38:4e:
ef:3b:79:9f:0a:5d:98:01:c1:86:f5:d1:ab:86:3f:07:b6:1c:
a5:b6:aa:6b:8e:0b:71:77:a9:88:3d:fe:da:bd:c4:10:e0:d6:
5d:e2:48:2c:8d:32:9f:f9:44:a4:e1:ca:f8:c0:32:35:40:84:
ec:0e:12:98:44:38:de:83:4a:3d:b9:83:9d:5a:c4:2d:cc:27:
12:6e:de:88:b7:93:56:04:3c:20:3d:ef:68:35:97:bc:36:47:
d4:3b:91:be:ed:03:fa:0f:3e:d4:2a:83:f6:0e:41:56:e4:2b:
3a:b9:17:56:68:95:fd:6e:d0:2c:6d:c1:b6:1a:7c:f7:ca:36:
e8:8d:28:cc:5a:df:10:ce:40:44:0c:79:56:fe:00:29:80:46:
a8:13:6a:fe:8f:8e:e8:58:78:48:ee:d5:d2:93:e8:06:47:9e:
be:19:63:57:09:f1:9b:bf:c0:9a:e6:91:99:75:2b:1e:bf:8f:
31:86:de:6f:45:e0:15:02:e4:f2:f5:bc:c1:26:e7:0e:18:d2:
6f:6c:d8:94:e9:82:fb:98:b9:eb:27:41:25:c8:45:b5:33:be:
a4:77:15:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:48 2024 by rpki-client on console-ams.rpki-client.org