Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/ieGWjoQuavq15lmOFbmscz9QVgs.roa
File: ieGWjoQuavq15lmOFbmscz9QVgs.roa (raw, json)
Hash identifier: Td+v/uMB/RMXq2SKPmfPnFVH1vjZdV3sT6axJ5Pi07s=
Subject key identifier: 89:E1:96:8E:84:2E:6A:FA:B5:E6:59:8E:15:B9:AC:73:3F:50:56:0B
Certificate issuer: /CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd
Certificate serial: 018570FBDB897090A321AFAAFFAE35BF1073
Authority key identifier: B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/ieGWjoQuavq15lmOFbmscz9QVgs.roa
Signing time: Mon 02 Jan 2023 05:37:12 +0000
ROA not before: Mon 02 Jan 2023 05:37:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8495
IP address blocks: 89.146.192.0/18 maxlen: 24
85.209.200.0/22 maxlen: 24
195.34.160.0/19 maxlen: 24
2a01:130::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 12 Oct 2023 18:52:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:db:89:70:90:a3:21:af:aa:ff:ae:35:bf:10:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd
Validity
Not Before: Jan 2 05:37:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89e1968e842e6afab5e6598e15b9ac733f50560b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c7:5f:de:85:de:6d:16:eb:c0:6c:0d:92:bb:
41:33:22:a1:aa:62:09:46:f1:cc:24:be:4b:26:f1:
6b:a0:9a:76:2d:49:75:0c:e3:5d:26:a0:eb:c7:21:
6d:91:0e:aa:29:74:a7:ec:c0:ef:bc:13:1b:a5:b7:
70:35:bd:3f:f5:0c:0a:b5:29:a0:a3:7e:68:ba:5d:
2a:fd:89:0a:ab:28:dd:e6:6c:70:14:7f:18:98:fd:
61:82:5c:fe:00:ef:89:51:bd:2a:ff:e3:fd:f8:88:
57:15:3c:8d:eb:43:c4:bb:b1:b1:0c:3d:81:aa:9a:
0c:8b:8f:11:92:75:38:88:8d:63:79:6d:de:6f:37:
de:f2:a2:6e:9d:75:a9:92:59:2a:ee:e8:41:dd:66:
32:97:29:f5:96:d0:0d:12:3a:82:3a:27:61:0a:bf:
b6:db:9b:e7:be:6c:ab:b9:b2:f1:f1:ca:f5:20:1a:
f3:97:6a:44:f6:26:0f:5d:b4:4f:52:2c:14:d8:df:
f6:b9:9c:f1:b3:de:cb:7d:5d:42:d3:0f:84:be:08:
1f:53:13:8f:61:65:1b:1a:ee:50:74:27:d1:45:94:
ed:87:6b:ee:33:88:82:63:7c:2a:5a:9b:fa:54:1f:
50:8a:a7:fc:d7:58:af:36:00:26:9e:6f:92:58:33:
0d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E1:96:8E:84:2E:6A:FA:B5:E6:59:8E:15:B9:AC:73:3F:50:56:0B
X509v3 Authority Key Identifier:
keyid:B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/ieGWjoQuavq15lmOFbmscz9QVgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.200.0/22
89.146.192.0/18
195.34.160.0/19
IPv6:
2a01:130::/32
Signature Algorithm: sha256WithRSAEncryption
73:66:07:21:2e:08:d1:de:fa:2c:c4:1f:7a:dd:e8:8f:1a:aa:
9c:9f:93:1f:ea:35:15:7b:fd:4f:40:e3:c7:96:1c:9f:f1:0f:
a3:58:03:c3:ac:69:98:cf:89:86:bf:96:91:30:e1:2e:a9:28:
cf:c5:58:76:2e:6e:a2:57:81:89:00:d8:ac:19:d4:72:0f:34:
57:27:f4:d6:7a:13:b4:3a:fe:b0:12:5c:4c:db:ac:58:42:c5:
b1:ca:8b:e5:10:e4:43:6c:de:d2:8c:99:16:b6:9a:ac:2d:7e:
38:4b:83:44:d9:18:8e:7e:85:0b:ae:28:87:7e:51:c1:11:69:
a8:38:51:fc:08:e5:94:cf:e1:92:3b:14:da:0a:4b:4a:7f:84:
2a:20:f5:40:74:d7:36:b1:b9:34:8c:3b:0e:e7:26:44:2e:e6:
5d:ab:eb:99:1f:7e:27:0a:21:83:fc:f2:77:87:0c:b2:12:77:
ac:a9:d9:b3:3c:51:aa:21:4b:af:7c:f5:ba:88:ab:63:f1:29:
ae:04:3f:ca:64:b9:63:11:80:16:94:45:31:2f:2b:6a:d7:7a:
40:96:67:57:e5:59:7b:87:72:93:0f:bf:b8:14:35:88:8b:b1:
28:f7:15:4c:12:c3:88:d1:77:d9:fe:53:c6:87:f5:83:61:12:
62:14:54:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:38 2024 by rpki-client on console-fra.rpki-client.org