Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/xc2M8x0Uj11oFhDI2Idz8eca20U.roa
File: xc2M8x0Uj11oFhDI2Idz8eca20U.roa (raw, json)
Hash identifier: tmAdlsLICas3x64ZTrjjZQzmxXguypia8MTB09xenOM=
Subject key identifier: C5:CD:8C:F3:1D:14:8F:5D:68:16:10:C8:D8:87:73:F1:E7:1A:DB:45
Certificate issuer: /CN=74896c544b461d8b062eff9e3d2c29cd3cc960ec
Certificate serial: 018A4A5FC337BBADD60733BEC5F76D1512BF
Authority key identifier: 74:89:6C:54:4B:46:1D:8B:06:2E:FF:9E:3D:2C:29:CD:3C:C9:60:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIlsVEtGHYsGLv-ePSwpzTzJYOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/xc2M8x0Uj11oFhDI2Idz8eca20U.roa
Signing time: Thu 31 Aug 2023 06:55:04 +0000
ROA not before: Thu 31 Aug 2023 06:55:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34740
IP address blocks: 89.38.48.0/24 maxlen: 24
89.38.49.0/24 maxlen: 24
89.38.50.0/24 maxlen: 24
89.38.51.0/24 maxlen: 24
188.215.144.0/20 maxlen: 20
2a03:32e0::/32 maxlen: 48
2a03:32e0::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4a:5f:c3:37:bb:ad:d6:07:33:be:c5:f7:6d:15:12:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74896c544b461d8b062eff9e3d2c29cd3cc960ec
Validity
Not Before: Aug 31 06:55:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5cd8cf31d148f5d681610c8d88773f1e71adb45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2d:25:2f:df:2f:a3:d6:d4:f9:69:d8:d4:59:
a8:4c:5a:4f:ba:99:1f:f6:e6:79:8b:dc:ea:95:5a:
6e:70:45:bd:2c:f8:f7:c8:cd:b0:6e:40:39:81:3b:
ae:f1:3f:ee:33:d2:df:26:cf:59:e9:b0:42:15:eb:
e8:5e:09:40:dc:23:5e:88:ba:43:1f:06:c0:bd:62:
09:14:c7:89:cf:33:61:4d:e3:45:ac:67:2b:c4:02:
2b:82:13:68:eb:17:a6:51:46:c4:39:94:15:29:f5:
95:c6:16:d6:f7:1e:ca:5b:2c:cb:bd:85:0f:3d:0f:
33:e0:4c:bc:43:85:9c:c2:cc:ac:de:eb:1e:c0:50:
fc:dd:fa:7a:58:2b:de:4a:26:69:28:5c:a4:87:50:
92:da:d6:20:b3:6d:cc:ef:3f:68:5f:63:f3:52:4b:
07:1d:cd:3b:83:b7:40:bc:ba:13:85:b0:c3:d7:b0:
2e:86:43:2c:de:32:e8:e3:1c:71:fb:86:c4:c3:50:
38:8f:f5:cf:c1:04:3a:49:fa:c0:42:ad:75:37:35:
b1:94:7b:6d:c9:76:9a:98:81:17:dc:2d:b1:96:0b:
98:3e:18:d4:02:b6:a2:ca:c6:8b:fe:b7:14:cc:1a:
6d:be:ea:77:2d:4b:b7:3f:e2:16:90:c7:42:3e:9c:
64:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:CD:8C:F3:1D:14:8F:5D:68:16:10:C8:D8:87:73:F1:E7:1A:DB:45
X509v3 Authority Key Identifier:
keyid:74:89:6C:54:4B:46:1D:8B:06:2E:FF:9E:3D:2C:29:CD:3C:C9:60:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIlsVEtGHYsGLv-ePSwpzTzJYOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/xc2M8x0Uj11oFhDI2Idz8eca20U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.38.48.0/22
188.215.144.0/20
IPv6:
2a03:32e0::/32
Signature Algorithm: sha256WithRSAEncryption
9f:61:c9:11:af:cd:98:41:65:8c:8f:1a:57:22:c8:36:32:07:
2a:c4:5b:7e:69:47:bf:18:98:6f:15:28:88:6c:06:0a:9b:c3:
08:34:da:ac:5f:43:c8:eb:4a:00:63:08:20:1e:51:c6:b6:80:
94:9b:b6:88:98:4f:f9:9a:92:56:0b:57:b9:45:00:c9:d2:3e:
db:2a:50:26:09:d6:5c:c3:dc:a5:7d:1f:92:f4:12:1f:90:b6:
ba:c4:c8:a5:2e:de:30:96:0e:dd:8b:78:b7:78:36:1e:2c:5a:
a6:33:19:b3:7a:72:26:64:25:bb:fc:23:23:96:4d:55:5e:9b:
15:8b:f2:37:a3:18:bc:0c:02:a1:6c:36:82:da:7e:f7:1a:70:
ce:a0:8f:d4:8a:f5:6e:75:c7:31:42:85:41:3c:f3:32:ac:8d:
f1:68:51:7f:58:5d:e5:be:e1:6c:85:6a:05:2b:f1:90:02:2a:
e1:af:7a:63:b3:cc:f5:de:1a:c8:c6:41:15:d5:61:54:8f:bc:
c1:e6:6b:78:17:92:26:ea:d6:9e:48:a0:13:03:d2:ff:4b:78:
b9:d0:d3:5e:f0:de:fb:de:67:cb:55:ee:9c:de:95:e4:da:3f:
ec:f8:7c:6b:27:25:41:96:8b:ea:24:67:10:31:77:61:4d:77:
f1:fe:2e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:49 2024 by rpki-client on console-ams.rpki-client.org