Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/c-Pl-CaxQTPf6mnI7vcMseikz9s.roa
File: c-Pl-CaxQTPf6mnI7vcMseikz9s.roa (raw, json)
Hash identifier: +I1p9lbWFtYLO8gnpS4jlnB+NuTVKlNFleZJLHZZG6w=
Subject key identifier: 73:E3:E5:F8:26:B1:41:33:DF:EA:69:C8:EE:F7:0C:B1:E8:A4:CF:DB
Certificate issuer: /CN=c1b050211219d18e996e086cb7f6309178804860
Certificate serial: 01856F3021D05BE32A617ADEBAFB61A2CFC9
Authority key identifier: C1:B0:50:21:12:19:D1:8E:99:6E:08:6C:B7:F6:30:91:78:80:48:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/c-Pl-CaxQTPf6mnI7vcMseikz9s.roa
Signing time: Sun 01 Jan 2023 21:15:03 +0000
ROA not before: Sun 01 Jan 2023 21:15:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62144
IP address blocks: 89.108.136.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:30:21:d0:5b:e3:2a:61:7a:de:ba:fb:61:a2:cf:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1b050211219d18e996e086cb7f6309178804860
Validity
Not Before: Jan 1 21:15:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73e3e5f826b14133dfea69c8eef70cb1e8a4cfdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ee:06:dd:8d:7b:10:d2:2a:1b:0c:4b:41:3c:
32:b8:11:00:27:37:19:40:79:18:9f:05:0f:50:e2:
ab:a0:e9:34:2b:4d:14:36:1b:c3:40:51:18:44:11:
0a:3a:b5:8c:85:fd:02:46:80:4d:ac:56:5a:fe:fa:
c8:d2:35:c9:0e:d0:b3:be:ce:ee:51:41:e5:ec:d2:
55:c1:e2:4b:8f:88:4c:a8:bf:62:63:52:03:f3:53:
40:b4:bd:82:11:2d:19:ae:4e:69:a8:7c:20:02:8e:
93:7d:b6:8d:10:8f:23:8a:40:29:a8:57:06:c4:4c:
e4:7c:fa:00:4d:4c:d6:cf:62:d8:88:e4:eb:f4:45:
18:6e:bb:d2:aa:6a:de:e1:36:31:3c:e5:53:b3:e2:
02:72:35:1e:f4:71:cd:21:05:68:4f:ac:5b:41:1c:
62:8b:df:5d:d0:84:29:c7:26:be:28:6f:f2:8b:66:
2c:2f:27:cc:44:22:10:c4:83:43:6a:94:85:b8:25:
97:47:83:c1:ce:ca:ac:14:92:34:71:6c:fa:9d:2c:
ba:04:22:d5:ec:ec:02:78:d0:5f:b7:5b:db:42:8b:
72:4b:7e:2e:b3:9d:54:41:85:b8:6b:8c:84:e8:53:
b2:0f:f7:f5:3e:c0:81:22:01:e8:99:0c:46:98:56:
e2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E3:E5:F8:26:B1:41:33:DF:EA:69:C8:EE:F7:0C:B1:E8:A4:CF:DB
X509v3 Authority Key Identifier:
keyid:C1:B0:50:21:12:19:D1:8E:99:6E:08:6C:B7:F6:30:91:78:80:48:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/c-Pl-CaxQTPf6mnI7vcMseikz9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.108.136.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:a3:6d:66:82:7a:6f:99:ff:99:c9:9d:fc:f4:33:34:84:40:
d3:d5:72:41:f8:a7:84:1b:16:92:96:3a:c3:a9:db:c6:47:43:
5c:6a:9b:94:33:cc:62:8d:dd:23:6d:e9:05:d3:bf:b6:0a:cb:
ef:ee:81:35:14:a3:1b:e4:8c:ef:d3:3f:0d:78:8b:98:8f:7c:
04:3f:e0:b3:c5:1c:48:64:6b:fd:28:46:ad:72:bb:7c:f2:38:
27:42:3a:4a:5b:79:f0:d1:22:68:42:ca:4a:bf:3a:47:cb:89:
6a:19:77:4a:b3:ee:3a:78:7a:f0:dd:bc:a4:56:3f:a3:4b:d5:
89:f3:23:e5:ab:f4:3c:e4:ab:18:90:43:20:68:27:8a:4a:67:
f4:f2:44:e6:61:53:f7:0a:5f:41:c4:c7:4a:ef:f8:8e:1d:5b:
8f:d2:e6:03:ec:51:b6:35:53:f2:d6:52:7d:71:07:07:d5:b8:
a6:9a:da:63:15:47:79:d3:53:36:ac:b4:37:ca:40:24:69:bd:
aa:35:37:e6:c0:ae:db:d8:5d:05:05:1b:fb:3d:86:35:c1:6f:
b6:07:75:37:e8:ed:ed:d7:47:65:d8:0b:90:50:ac:95:c6:7a:
98:4c:01:db:07:d1:e3:9a:37:5f:96:d5:db:75:44:c4:15:ec:
bd:46:08:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:44 2024 by rpki-client on console-ams.rpki-client.org