Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/hNKnEfSZwc75t2rjTUECBMvmghs.roa
File: hNKnEfSZwc75t2rjTUECBMvmghs.roa (raw, json)
Hash identifier: LjEWV4bNpJ7i8GT82UG3JVlOumNFLOuLyTUl3aWA2NM=
Subject key identifier: 84:D2:A7:11:F4:99:C1:CE:F9:B7:6A:E3:4D:41:02:04:CB:E6:82:1B
Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial: 01857315FF1320D0EDDB9FF56DCB9C2B3A7F
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/hNKnEfSZwc75t2rjTUECBMvmghs.roa
Signing time: Mon 02 Jan 2023 15:24:59 +0000
ROA not before: Mon 02 Jan 2023 15:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201215
IP address blocks: 89.252.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:15:ff:13:20:d0:ed:db:9f:f5:6d:cb:9c:2b:3a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Validity
Not Before: Jan 2 15:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=84d2a711f499c1cef9b76ae34d410204cbe6821b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:23:12:68:c9:a2:09:bc:36:42:fc:ae:70:09:
3f:11:aa:94:7f:35:79:8e:23:53:7e:bf:b3:4d:31:
19:37:bc:2d:59:3e:37:a2:36:ac:7a:54:49:1c:8a:
e1:aa:00:7e:d8:9e:81:4c:a3:50:cf:92:3e:06:5e:
c0:b5:67:3b:6f:31:7b:c7:be:f3:55:f0:79:d5:86:
51:27:e8:55:19:b1:c1:c3:a7:3f:b2:f3:62:2c:01:
31:8e:08:b1:7e:8e:14:a8:20:6b:4b:a5:ab:f0:47:
c6:e3:b4:5d:db:95:61:8c:5a:9c:35:0a:42:28:d3:
c7:eb:82:57:b6:82:7a:5c:3c:91:1a:cb:79:30:0d:
17:d4:84:7b:e5:64:f4:73:bf:49:3f:6a:64:ee:95:
40:c3:da:27:04:b2:f9:d0:f3:03:62:55:d1:5f:30:
77:6b:20:b1:2d:54:b8:fe:ed:20:2d:5c:c1:cf:44:
bd:1e:67:c5:f4:61:15:b7:b2:b4:98:39:95:20:08:
41:3f:ee:d8:bf:46:1d:50:0a:84:76:4a:05:6e:13:
8c:b5:0a:a8:1e:28:51:c3:ba:ab:dd:80:76:db:e3:
29:ae:4e:9d:f3:5d:bc:5b:16:b4:5c:c8:85:84:22:
51:27:80:f2:2c:39:18:9f:ad:bc:a5:f5:56:2b:fe:
01:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D2:A7:11:F4:99:C1:CE:F9:B7:6A:E3:4D:41:02:04:CB:E6:82:1B
X509v3 Authority Key Identifier:
keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/hNKnEfSZwc75t2rjTUECBMvmghs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.252.202.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:a7:12:cb:18:c7:df:48:ba:7a:31:8d:14:ae:38:1a:29:05:
cb:bc:b6:97:52:43:a0:df:64:c7:44:6f:76:70:d5:2a:2e:9a:
ad:04:52:26:64:ed:88:5a:6d:88:bf:81:4c:ba:a2:4c:14:d0:
a7:b9:cb:ad:63:a8:e9:e1:95:e8:e4:56:58:d8:f7:bf:13:b8:
cd:b8:ca:e0:aa:b2:b6:58:34:ef:1e:6f:b6:35:6b:ec:6f:7e:
13:4b:b9:70:fc:71:9d:a6:57:36:c5:33:c6:e9:3b:3e:c4:18:
5a:e6:15:f3:eb:80:d8:68:b4:b3:bf:76:0f:a8:6c:57:ae:79:
4d:a4:ce:51:ef:6d:16:51:a3:07:f6:0c:5c:0b:eb:03:b0:7e:
74:b9:bb:5d:e6:6d:dd:04:75:26:43:e8:29:39:4d:49:56:74:
6b:19:14:e6:52:b9:b5:6e:c5:a4:2a:6e:38:9c:ff:ba:95:ff:
b3:7d:6f:1f:0b:0f:cb:ce:1f:8e:dc:51:c4:cb:f9:15:ff:7c:
d5:13:42:37:c0:bb:45:37:e2:89:fe:20:f7:e0:b4:6a:ce:7d:
f1:39:6a:89:5c:d8:ca:e0:20:fd:6a:f4:20:f9:5b:e9:35:86:
79:55:77:cc:67:e2:05:6f:e5:0f:75:59:c3:c2:f3:75:c5:dc:
0f:d9:82:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:56 2024 by rpki-client on console-fra.rpki-client.org