Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/ePSQwmNG0fyqVGatW75jcbDwWRs.roa
File: ePSQwmNG0fyqVGatW75jcbDwWRs.roa (raw, json)
Hash identifier: vF8OD3lDE/Y1zvG/i312gqgYlYixsWwevPe2THQcUzM=
Subject key identifier: 78:F4:90:C2:63:46:D1:FC:AA:54:66:AD:5B:BE:63:71:B0:F0:59:1B
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 0185E8B9DF95B929E88C101336B735C2E1A2
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/ePSQwmNG0fyqVGatW75jcbDwWRs.roa
Signing time: Wed 25 Jan 2023 11:39:33 +0000
ROA not before: Wed 25 Jan 2023 11:39:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 89.167.134.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e8:b9:df:95:b9:29:e8:8c:10:13:36:b7:35:c2:e1:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Jan 25 11:39:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78f490c26346d1fcaa5466ad5bbe6371b0f0591b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:df:c3:61:47:94:d7:dc:62:ee:7b:ac:35:65:
54:ec:2d:48:ae:4a:0e:d4:60:10:43:0a:20:a8:aa:
d6:b1:9a:05:d9:38:14:b9:49:9f:97:3a:bd:5e:8d:
c9:e9:6b:25:b9:42:90:c3:b8:af:ab:b2:1c:b4:58:
fe:09:60:40:c7:95:a5:70:89:e0:8b:4c:f2:ae:7b:
22:4c:c7:98:97:40:2f:c0:bf:ce:13:80:c2:0a:a9:
8a:8c:f6:13:df:95:07:23:01:23:c5:fb:db:bc:d4:
78:02:a0:77:d6:09:8f:49:b9:5b:92:07:25:c7:3b:
b7:89:a0:f4:c1:15:52:70:84:90:50:db:1c:78:0b:
7d:18:8e:48:5e:de:17:69:6d:44:64:9b:c1:21:27:
64:b3:ee:de:0c:ca:cd:8f:9a:48:70:bd:a7:f7:1d:
14:31:7f:d9:ca:cc:ee:c1:c7:2e:3f:a8:7b:05:99:
51:c4:50:56:49:14:02:03:a0:80:84:c5:f4:b4:ae:
82:68:33:1f:88:57:b6:33:76:89:3f:6f:47:62:95:
1b:e0:49:52:b5:2e:9f:67:08:44:f0:8f:53:d7:22:
d3:1a:cb:eb:09:fa:b8:88:08:54:94:f2:df:1f:9b:
22:20:86:42:c7:e7:8c:82:84:a4:7f:c4:a2:fc:ff:
95:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F4:90:C2:63:46:D1:FC:AA:54:66:AD:5B:BE:63:71:B0:F0:59:1B
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/ePSQwmNG0fyqVGatW75jcbDwWRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.167.134.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:88:a7:4f:4c:12:b5:61:67:57:2f:13:c6:70:e5:f9:51:3c:
2f:8c:a1:9b:07:b5:66:c7:88:48:26:ac:ed:cd:f3:39:44:d7:
76:4a:fe:e6:57:91:fd:a3:92:d1:9d:fe:84:af:cc:60:ae:74:
ec:26:d4:5b:24:cc:4c:7a:65:94:02:39:c2:65:5a:51:fa:af:
b4:66:a7:e2:6b:3a:d8:ab:a2:a6:e2:fd:4c:af:e3:69:78:ce:
ca:a6:c9:7e:e3:48:ce:f4:fb:6e:5a:dc:c6:ec:6e:18:c1:cb:
ff:2c:b7:06:f3:03:6c:f4:8b:c1:5e:ca:a3:d3:8c:52:bb:e2:
96:ef:07:d7:87:6c:d5:3d:fe:d0:98:6c:3f:5d:48:78:57:a0:
4a:7e:0c:a4:6d:2a:5c:53:72:85:39:c0:b9:60:60:91:d8:2f:
c4:fc:19:46:23:3c:9c:87:77:6d:a5:77:38:f9:4a:1e:ae:f3:
8c:1d:d9:d7:5c:7b:33:fd:bf:a5:28:6a:1d:be:83:3c:b8:ef:
7c:76:0b:0e:67:0c:33:b2:92:d4:66:67:db:da:e6:fe:cf:c1:
1d:e4:08:bb:75:46:54:07:a3:60:35:a1:db:7a:09:51:78:a4:
15:ee:de:b2:b9:75:0c:21:78:03:3f:98:4f:e2:e2:60:81:32:
90:44:a8:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:53 2024 by rpki-client on console-fra.rpki-client.org