Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/CJAdTcHvSEsm1WwDPOwJOkw0u80.roa
File: CJAdTcHvSEsm1WwDPOwJOkw0u80.roa (raw, json)
Hash identifier: LTyq7T+z6gQWGZFl7r+gsBldlRy70xds6aRCDcxP51c=
Subject key identifier: 08:90:1D:4D:C1:EF:48:4B:26:D5:6C:03:3C:EC:09:3A:4C:34:BB:CD
Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Certificate serial: 01856CE62ADBA89A14914A44EB61ED5AA079
Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/CJAdTcHvSEsm1WwDPOwJOkw0u80.roa
Signing time: Sun 01 Jan 2023 10:35:01 +0000
ROA not before: Sun 01 Jan 2023 10:35:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5537
IP address blocks: 89.111.128.0/18 maxlen: 18
89.111.144.0/20 maxlen: 20
89.111.148.0/24 maxlen: 24
89.111.160.0/20 maxlen: 20
89.111.177.0/24 maxlen: 24
89.111.176.0/20 maxlen: 24
2a01:d8::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:2a:db:a8:9a:14:91:4a:44:eb:61:ed:5a:a0:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Validity
Not Before: Jan 1 10:35:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=08901d4dc1ef484b26d56c033cec093a4c34bbcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:82:73:cb:88:30:fb:8f:7c:e0:01:6c:7d:f9:
d4:a5:de:0d:87:8a:ba:8f:f9:bc:03:4f:07:5e:7d:
36:d4:d8:90:c1:62:74:59:91:e6:76:5e:e4:3d:70:
4e:e0:69:59:36:de:6e:04:40:82:8e:fa:7a:93:ca:
cc:bb:30:ec:8a:98:bf:46:92:ed:71:36:8b:97:2f:
79:00:4c:06:b1:21:dd:1e:2d:2e:1e:e4:47:0c:05:
1f:9e:9b:5b:29:43:e8:21:78:83:ca:07:a2:0d:dd:
b8:06:3f:57:db:11:c6:69:d0:80:b1:48:2e:65:79:
e0:d6:a6:f0:d7:93:7a:e9:28:5d:6c:df:74:a6:64:
d4:22:de:89:a3:81:e2:9e:39:7a:c6:cc:8f:de:7d:
c5:07:c1:29:fd:48:7d:a0:7b:82:ca:d2:04:22:92:
a5:e4:f2:48:a4:e6:e5:20:72:58:70:b8:f7:30:c8:
d1:f3:db:d5:e0:8a:bb:13:ef:95:75:5b:09:26:6b:
7b:3d:38:d5:85:a7:19:50:1a:b5:67:fc:ca:d6:88:
77:22:0b:04:21:d0:1b:7b:54:fc:31:78:6e:fd:ed:
e1:f5:79:67:8d:ef:c4:9e:9e:10:7e:65:b5:33:49:
92:15:e6:3a:f1:76:8c:e9:28:de:5a:e0:19:2a:01:
8b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:90:1D:4D:C1:EF:48:4B:26:D5:6C:03:3C:EC:09:3A:4C:34:BB:CD
X509v3 Authority Key Identifier:
keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/CJAdTcHvSEsm1WwDPOwJOkw0u80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.111.128.0/18
IPv6:
2a01:d8::/32
Signature Algorithm: sha256WithRSAEncryption
1c:ca:27:64:c6:1c:48:d3:d5:a8:9e:3f:05:bc:cf:d1:bc:3a:
bc:38:80:1b:a9:25:c4:25:6a:50:4f:ad:7d:14:78:3b:50:33:
24:02:39:cc:ae:23:c4:f1:b5:72:a3:14:b9:8c:ce:1a:d5:04:
d7:31:f7:6e:10:f4:e8:ad:f5:08:a8:b0:6c:05:83:82:c8:fb:
95:f6:b7:ec:4e:b7:d1:e3:28:20:94:c5:87:80:2f:0d:a1:68:
0d:18:5e:ee:7d:e3:d7:2b:48:21:c3:a4:86:76:c6:90:58:f5:
a6:dd:d7:1f:7e:46:60:2c:ef:1e:18:f7:c4:32:42:3c:5a:f3:
ff:84:5a:aa:8e:ed:9c:20:53:7e:61:01:4d:e0:97:62:ea:1c:
54:26:3d:78:47:a5:18:f4:d0:a4:8e:0f:14:71:71:de:59:51:
9c:08:81:f1:c9:72:ee:2a:42:8a:6e:f4:83:b4:70:9f:28:80:
db:0d:6a:50:05:2b:15:62:c4:dc:e9:1e:66:fc:99:ee:4f:2a:
a4:74:99:0b:90:d3:71:27:d2:eb:0b:7b:c2:67:85:e7:94:0b:
29:f8:4c:4c:6d:2f:6e:85:c7:bb:b0:fe:40:48:7b:ad:84:b9:
c1:33:64:b3:fa:72:54:29:eb:70:0e:fe:9e:09:82:b5:61:c9:
40:65:e5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:15 2024 by rpki-client on console-fra.rpki-client.org