Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/Ic14Wz29F8Y-Wxc3TunxjX52pN0.roa
File: Ic14Wz29F8Y-Wxc3TunxjX52pN0.roa (raw, json)
Hash identifier: jVqTTB2xFPwYiZb00ND8noI29gx1UZAR3Iv4nb+HJ4M=
Subject key identifier: 21:CD:78:5B:3D:BD:17:C6:3E:5B:17:37:4E:E9:F1:8D:7E:76:A4:DD
Certificate issuer: /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Certificate serial: 01857139BCC0E4C597524BEFC739148C0E22
Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/Ic14Wz29F8Y-Wxc3TunxjX52pN0.roa
Signing time: Mon 02 Jan 2023 06:44:47 +0000
ROA not before: Mon 02 Jan 2023 06:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61033
IP address blocks: 89.46.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:bc:c0:e4:c5:97:52:4b:ef:c7:39:14:8c:0e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Validity
Not Before: Jan 2 06:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21cd785b3dbd17c63e5b17374ee9f18d7e76a4dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:fb:f4:26:15:c5:cb:42:c8:27:a2:8c:31:cc:
4d:68:14:f5:d7:57:9f:dc:ce:fc:c5:d7:ac:0c:c3:
dd:02:13:9e:9d:80:e4:54:f2:ec:bd:25:60:84:59:
69:3a:13:15:42:5e:04:6a:df:25:63:23:d9:d3:04:
80:35:e1:54:8f:81:df:59:30:3d:e5:3a:ab:d7:32:
68:c1:5c:45:75:91:4f:53:77:41:96:b5:72:29:5d:
ac:ff:97:4d:3d:b0:26:05:92:c9:f5:01:90:97:48:
31:ae:6f:98:c3:dc:db:70:82:82:88:b6:35:64:4d:
d9:98:30:b1:a8:9c:99:00:2c:b0:65:3e:d1:dc:37:
40:28:e7:47:44:77:1a:c4:b2:b3:8e:af:6e:49:9f:
49:b0:dc:d7:04:e0:4a:b2:15:3d:59:08:c4:65:74:
69:89:20:d7:75:39:d2:d8:3d:cb:68:8d:ba:45:c5:
eb:a9:e0:29:c3:82:cb:df:b4:1b:51:5b:96:de:82:
d2:72:7a:b6:a3:34:71:c3:34:32:53:72:2d:e7:4a:
96:f4:94:d9:5f:b3:65:80:09:6b:2c:87:45:a7:84:
46:12:f0:4b:f8:cb:5e:e6:ee:cc:ac:3f:a2:4c:77:
d6:50:f4:34:e3:4e:99:da:0c:e3:8f:41:e6:69:40:
fc:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:CD:78:5B:3D:BD:17:C6:3E:5B:17:37:4E:E9:F1:8D:7E:76:A4:DD
X509v3 Authority Key Identifier:
keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/Ic14Wz29F8Y-Wxc3TunxjX52pN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.120.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:84:93:48:79:47:c5:64:ba:3c:ba:45:d6:60:49:4b:3a:ec:
e7:25:4a:f7:28:29:87:7b:17:50:2a:29:b4:bd:f6:14:cf:d4:
7d:a8:d9:9b:94:0b:71:e6:2c:b6:f4:20:d3:8b:d8:69:de:2a:
ea:c6:70:9c:ce:1a:1d:b4:8c:74:24:eb:61:07:2f:b4:61:8c:
aa:96:da:0d:55:3e:60:5e:ee:6e:c1:11:f1:47:69:79:6b:d0:
3f:5c:8d:b7:64:91:58:c5:8f:45:3d:a2:35:60:03:e6:d6:6f:
27:ad:38:ef:4c:c9:1d:63:0e:5e:36:9f:63:5a:d0:f3:ff:09:
c4:39:23:04:26:dc:2d:a1:2c:c3:5e:7e:ba:e5:3d:e3:a7:99:
b9:23:3b:b4:0a:94:f2:9a:06:d6:c2:c8:96:53:c3:91:f9:da:
01:66:a6:5d:84:f3:ac:f3:2c:bf:9f:70:c6:d0:cc:4b:e1:af:
79:08:06:ba:49:5b:26:d2:f2:1e:04:e9:43:00:f8:37:ca:4c:
af:c4:c8:db:18:94:92:a1:0d:51:11:84:26:08:22:01:ea:8b:
c6:bd:63:2b:9e:46:9b:ff:11:fa:f7:f6:dd:b2:72:eb:1c:29:
36:8f:20:0f:f2:34:b1:82:c0:45:65:53:5f:fb:97:75:b8:0d:
62:42:fd:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:24:39 2024 by rpki-client on console-fra.rpki-client.org