Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/L3G5GIpU0Y0v0dO0kZxRxaWdylk.roa
File: L3G5GIpU0Y0v0dO0kZxRxaWdylk.roa (raw, json)
Hash identifier: zHlf/SRe4Qcyu6FFLCLLzSihoSW3H2CunO/3r1eDpIk=
Subject key identifier: 2F:71:B9:18:8A:54:D1:8D:2F:D1:D3:B4:91:9C:51:C5:A5:9D:CA:59
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 0185E8B9E23453DBE34A8AA22F137D608BEB
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/L3G5GIpU0Y0v0dO0kZxRxaWdylk.roa
Signing time: Wed 25 Jan 2023 11:39:34 +0000
ROA not before: Wed 25 Jan 2023 11:39:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62044
IP address blocks: 89.167.131.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e8:b9:e2:34:53:db:e3:4a:8a:a2:2f:13:7d:60:8b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Jan 25 11:39:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f71b9188a54d18d2fd1d3b4919c51c5a59dca59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:57:b6:78:23:76:f0:f9:36:7b:7c:c0:b6:f0:
48:f0:22:5b:c4:b3:90:2b:3a:de:cf:d0:e8:5e:9b:
7c:c8:bb:4f:ca:d3:5d:80:aa:53:6f:8f:25:35:4f:
19:98:55:8b:ba:7b:10:bd:97:d0:a6:24:ae:3b:38:
4f:f9:2a:86:c1:68:53:97:76:08:ee:6a:8d:98:63:
3e:6b:b4:7b:29:cf:71:51:86:83:b9:b6:89:02:d0:
1c:32:24:e9:fe:64:03:04:8e:6e:75:14:31:4f:17:
00:9e:3c:59:be:c5:c0:61:fb:69:2c:34:25:aa:31:
8a:e3:23:bd:17:fa:d8:2c:37:73:33:7a:6c:6b:40:
e6:66:64:d9:ff:fa:6f:f6:c5:84:f0:d3:9e:20:b0:
93:5e:a8:5e:de:c7:8a:b5:2c:e8:6d:f3:a7:9d:d0:
b6:35:4f:3d:63:96:e2:f7:c2:c2:28:e2:33:79:80:
73:a7:25:e0:62:96:a3:35:f3:d3:79:a7:a4:a5:d7:
57:a7:31:4a:99:e2:43:50:95:ea:20:b7:04:2b:19:
c5:8d:57:2f:32:9d:13:22:f6:4b:b4:9b:76:3c:8e:
80:77:c9:70:7f:3a:b7:f6:88:66:d6:20:39:a5:e7:
1b:3e:4d:5e:6d:4a:3b:96:62:3a:cf:de:22:ca:6b:
a8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:71:B9:18:8A:54:D1:8D:2F:D1:D3:B4:91:9C:51:C5:A5:9D:CA:59
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/L3G5GIpU0Y0v0dO0kZxRxaWdylk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.167.131.0/24
Signature Algorithm: sha256WithRSAEncryption
74:7a:80:bd:c0:a6:4e:55:b8:ea:ac:d9:ce:3d:78:96:9e:ed:
55:8d:bc:cb:0e:4a:43:e1:2a:20:ac:3d:e9:38:80:cc:4f:89:
8f:c1:ae:11:a3:15:e9:f8:43:27:49:47:a6:b5:99:bd:84:a3:
ed:03:92:d2:a0:1c:3f:ea:77:a5:a9:65:49:15:2b:0a:15:0c:
31:73:5e:8d:c2:f1:5c:85:14:2a:13:34:22:13:d1:1f:0b:a2:
67:e6:d1:af:95:90:cd:94:de:14:dc:c4:7f:98:76:e4:93:1f:
ed:8c:7b:ef:37:6b:b2:fd:f7:ae:6b:51:67:07:71:18:79:4c:
f8:f2:cd:e2:60:d7:4a:b6:ee:9f:b1:8d:07:e1:2c:a6:fa:df:
78:13:2a:26:8b:fe:3e:45:c2:c0:74:14:17:86:75:18:9d:c6:
95:c7:57:71:53:ae:71:13:90:b0:5a:f4:b5:95:e2:a3:2a:44:
63:8a:2e:b7:43:56:7b:ef:a2:92:e9:81:e2:30:f1:5c:c3:2f:
f1:a2:ec:31:99:7d:9b:17:df:f6:3a:08:86:c5:0b:dd:8f:e1:
07:b1:d4:63:2f:de:62:ed:09:ea:5c:e2:f2:8d:bf:22:23:9f:
75:f5:e6:59:07:a1:fa:d0:5b:5f:cd:31:b4:13:e9:f9:af:b2:
d8:7e:5d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:53 2024 by rpki-client on console-fra.rpki-client.org