Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/6wbVDoO9gPzeDkEyYpCA_1CV9lY.roa
File: 6wbVDoO9gPzeDkEyYpCA_1CV9lY.roa (raw, json)
Hash identifier: /ra46DIIh++6/EvIS6MEXwRnHnBqw2uaBsJDyxXK97Y=
Subject key identifier: EB:06:D5:0E:83:BD:80:FC:DE:0E:41:32:62:90:80:FF:50:95:F6:56
Certificate issuer: /CN=d7d0674bd6f0cc9175219a328c8b396829f6c0af
Certificate serial: 018CE38EAFCB8145C0E81E33F3EC4EEA6CDC
Authority key identifier: D7:D0:67:4B:D6:F0:CC:91:75:21:9A:32:8C:8B:39:68:29:F6:C0:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/6wbVDoO9gPzeDkEyYpCA_1CV9lY.roa
Signing time: Sun 07 Jan 2024 10:53:48 +0000
ROA not before: Sun 07 Jan 2024 10:53:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 32787
IP address blocks: 89.147.32.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sun 04 Feb 2024 12:05:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e3:8e:af:cb:81:45:c0:e8:1e:33:f3:ec:4e:ea:6c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7d0674bd6f0cc9175219a328c8b396829f6c0af
Validity
Not Before: Jan 7 10:53:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb06d50e83bd80fcde0e4132629080ff5095f656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:93:bd:a2:2c:6e:d9:dd:f3:e6:c2:74:24:f3:
dc:5f:33:57:46:6f:49:a1:e2:3e:b9:93:b6:63:e9:
d6:38:c1:af:62:06:cd:c5:55:6c:7c:1d:b0:e1:63:
8c:06:09:8d:93:aa:7d:76:f1:15:32:f6:42:cf:39:
19:83:9e:ec:67:ec:4d:4c:1d:21:35:76:1f:9f:9f:
1a:fd:0b:ca:02:c6:6d:c1:ec:99:17:05:95:0a:85:
41:f8:2a:78:c4:38:15:a7:10:e7:db:35:27:e1:dc:
8f:1c:71:b6:0d:dd:f9:75:cc:1e:9e:1a:27:36:c7:
f1:d9:33:bf:cc:8e:e7:a3:70:84:69:89:c7:c1:18:
c6:85:02:b6:f6:d1:79:dc:18:c2:62:10:8a:30:66:
d1:55:36:2d:df:af:8e:d9:0e:3d:2d:d4:b1:d0:13:
5f:e9:13:83:d9:af:9a:66:47:1d:51:37:cc:10:fa:
64:4a:ad:6d:77:0a:9d:0c:7b:1e:b8:24:ec:f7:35:
9a:a9:31:e5:98:0e:10:01:30:1d:0a:07:c8:a3:0e:
0f:7c:37:d7:fe:d2:d7:6c:fc:40:4b:ad:33:b3:92:
f7:80:ac:a7:58:a8:d1:19:8b:f0:7f:25:ba:5d:a1:
7b:79:19:d1:b1:f5:f8:9f:50:4d:9f:36:ed:d4:80:
09:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:06:D5:0E:83:BD:80:FC:DE:0E:41:32:62:90:80:FF:50:95:F6:56
X509v3 Authority Key Identifier:
keyid:D7:D0:67:4B:D6:F0:CC:91:75:21:9A:32:8C:8B:39:68:29:F6:C0:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/6wbVDoO9gPzeDkEyYpCA_1CV9lY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.147.32.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:18:e7:e8:ea:40:ee:d1:13:43:c5:50:73:1b:34:b3:56:cf:
06:ed:50:1f:27:79:0f:0c:6e:ed:1e:8b:57:b7:15:57:d1:c6:
ca:40:31:34:93:2b:3f:67:5f:3f:f4:ef:74:19:70:44:d3:1c:
bc:f0:0c:8c:3b:c6:7d:8d:bb:13:a9:96:a3:e2:e3:81:4d:a0:
87:77:57:b6:1b:de:9f:7e:3d:92:ad:40:68:9d:13:6e:7c:29:
9c:03:c8:4b:ec:24:7d:c3:93:69:25:09:09:05:fd:ba:9b:ee:
91:b7:0f:1e:e1:a0:b0:6f:d6:d8:06:e8:88:79:14:50:6a:d0:
e0:2a:b8:94:26:43:77:ec:52:58:ba:57:22:90:b3:84:17:93:
b3:29:ba:0d:d6:a0:93:e9:1d:43:9d:ce:59:d0:5e:ff:9f:cd:
9e:b8:7b:86:7b:36:63:42:c2:33:f6:ba:b2:c9:2a:82:4c:81:
bd:a9:0c:e6:a6:6f:6c:b8:78:fa:58:c3:55:69:9b:92:e0:29:
bc:46:59:fa:f6:3d:29:3f:6f:1e:36:2a:75:52:40:d1:55:94:
88:b2:db:aa:ba:fe:d6:f7:6e:eb:01:1a:7d:8a:49:05:23:e1:
33:9c:1b:83:4d:bf:5e:e9:64:30:2a:20:62:ef:1f:d3:d3:c6:
4b:c3:95:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:21 2024 by rpki-client on console-fra.rpki-client.org