Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/N8jXpbWbXnSNNx6_kV9Z5BKuwl0.roa
File: N8jXpbWbXnSNNx6_kV9Z5BKuwl0.roa (raw, json)
Hash identifier: POydtdboF7NZ/6FPZPE1q55jCPWsOmL45f+khlVO3Jo=
Subject key identifier: 37:C8:D7:A5:B5:9B:5E:74:8D:37:1E:BF:91:5F:59:E4:12:AE:C2:5D
Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Certificate serial: 01856FD536B939F2CF27D2B29EDB6D457D1E
Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/N8jXpbWbXnSNNx6_kV9Z5BKuwl0.roa
Signing time: Mon 02 Jan 2023 00:15:22 +0000
ROA not before: Mon 02 Jan 2023 00:15:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212014
IP address blocks: 89.35.226.0/24 maxlen: 24
2a0a:d6c0:226::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:36:b9:39:f2:cf:27:d2:b2:9e:db:6d:45:7d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Validity
Not Before: Jan 2 00:15:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37c8d7a5b59b5e748d371ebf915f59e412aec25d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:df:42:94:05:e4:25:8e:9f:7d:12:d3:e6:ed:
f3:3f:df:d4:73:2a:6e:13:d8:bf:df:bc:b4:eb:3b:
79:8f:49:5a:7d:21:77:fe:1d:a8:8e:bf:6e:ba:69:
ee:ed:17:fb:ca:62:55:c2:5c:02:71:ef:00:6f:78:
94:dc:31:52:e2:b2:57:43:41:63:9f:b2:ac:ba:b2:
8e:2d:a2:67:b3:20:78:ea:34:ac:c8:30:f9:ea:57:
69:1b:85:9a:02:8a:ad:6f:07:b8:a6:ed:c5:46:58:
c3:25:fc:74:a7:74:e8:53:84:6b:9a:2c:aa:a0:13:
de:e1:d7:0b:fa:a6:fd:84:10:4b:21:87:e7:56:74:
bb:c8:25:b4:18:57:94:03:c9:ea:6d:27:7f:99:d5:
46:56:33:07:66:3f:d0:fa:06:d6:72:35:fb:6e:65:
41:87:9d:f1:8b:1e:ca:a6:84:ef:b3:0e:03:e7:bf:
e0:17:70:24:3d:b9:5f:a3:76:be:7c:ab:b5:75:9f:
52:b8:68:61:bf:4e:27:de:b8:b2:47:0d:67:be:18:
a6:5e:74:07:05:ad:b4:a6:fd:30:9b:0d:5f:55:6f:
8c:c8:f6:79:fc:7d:e5:d6:d5:0d:a6:bb:22:41:d8:
07:0b:4f:d6:35:ee:d3:6d:03:77:f5:15:08:ec:1e:
df:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C8:D7:A5:B5:9B:5E:74:8D:37:1E:BF:91:5F:59:E4:12:AE:C2:5D
X509v3 Authority Key Identifier:
keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/N8jXpbWbXnSNNx6_kV9Z5BKuwl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.226.0/24
IPv6:
2a0a:d6c0:226::/48
Signature Algorithm: sha256WithRSAEncryption
09:6a:98:de:f4:bf:25:e2:22:82:87:2d:77:92:54:26:c2:b3:
65:be:27:6c:d5:ab:3d:79:b5:3c:1d:f8:15:d9:ea:e4:c8:62:
01:68:a9:fc:20:94:23:fe:1c:58:f1:db:40:98:94:86:4c:21:
59:a1:e4:d9:cf:ee:81:88:5a:de:81:e5:ad:23:70:cc:ce:05:
3b:9d:7b:fb:b6:fe:3f:db:6e:95:24:34:35:79:1e:91:4b:1b:
91:9e:96:2a:99:e3:8a:43:a9:db:f7:77:b9:38:cf:77:c8:c7:
3b:0e:a9:97:8c:b3:18:f4:8c:4a:56:fe:f4:06:c1:b8:22:07:
00:92:7e:d4:71:3b:25:b0:28:8d:74:ab:f6:fe:b6:10:dd:8a:
c6:36:7a:d5:1d:58:c9:56:ad:05:8d:d5:2a:13:a8:b7:d3:c2:
b6:84:47:f6:2c:a7:6a:63:06:d1:41:7c:e1:19:52:1d:e1:84:
9d:92:e2:ba:e7:28:94:83:92:53:7f:ff:3f:b0:ea:de:38:82:
bc:d2:83:06:67:ae:8b:be:96:49:3b:72:6b:61:ff:be:13:09:
1a:5b:6c:47:ea:0d:79:38:1e:7c:ab:0e:25:d6:7d:6a:0f:e7:
32:14:b3:e7:d9:72:57:72:da:c8:ec:e5:7c:cf:65:15:be:f5:
ad:87:bb:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:53 2024 by rpki-client on console-ams.rpki-client.org