Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/4pAQYBeDgsZ_gJiIgcCpPPt4cG8.roa
File: 4pAQYBeDgsZ_gJiIgcCpPPt4cG8.roa (raw, json)
Hash identifier: xKKbY/HkdEdLJBFk0OoHUIiQZXu5RE1PTHcGL/pCmTw=
Subject key identifier: E2:90:10:60:17:83:82:C6:7F:80:98:88:81:C0:A9:3C:FB:78:70:6F
Certificate issuer: /CN=1242466f8f8645c9f39f04874ddadf0d7136f67f
Certificate serial: 01856DEF6C5D227B0DEB10E45F4D1B1FC29C
Authority key identifier: 12:42:46:6F:8F:86:45:C9:F3:9F:04:87:4D:DA:DF:0D:71:36:F6:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/4pAQYBeDgsZ_gJiIgcCpPPt4cG8.roa
Signing time: Sun 01 Jan 2023 15:24:45 +0000
ROA not before: Sun 01 Jan 2023 15:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206089
IP address blocks: 89.46.36.0/24 maxlen: 24
89.33.43.0/24 maxlen: 24
89.33.40.0/24 maxlen: 24
89.33.42.0/24 maxlen: 24
185.196.33.0/24 maxlen: 24
185.196.34.0/24 maxlen: 24
185.196.35.0/24 maxlen: 24
185.196.32.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ef:6c:5d:22:7b:0d:eb:10:e4:5f:4d:1b:1f:c2:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1242466f8f8645c9f39f04874ddadf0d7136f67f
Validity
Not Before: Jan 1 15:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2901060178382c67f80988881c0a93cfb78706f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:50:dc:76:d0:a9:65:69:bb:07:c6:21:b8:02:
fe:4b:be:81:79:97:7e:e1:b8:0b:88:6e:7a:b9:9b:
0a:65:06:05:45:f2:4c:b4:0a:2e:9c:cb:32:8d:0f:
2d:03:4d:c3:ca:f7:10:7b:7c:34:f5:92:72:c0:ca:
bb:53:98:43:5e:a7:ae:bf:09:91:9a:73:30:7a:6f:
ac:e8:a7:6b:ca:6e:c4:e5:ff:e8:7e:f5:60:da:0e:
84:70:d3:89:47:c2:34:0e:84:58:90:c6:ec:9e:9a:
c8:0d:0c:5d:d3:f2:50:56:bb:b9:b3:58:b4:55:b7:
cf:21:f4:67:d8:8b:2f:0c:ad:0a:53:34:a4:b9:8c:
ab:09:db:b1:ac:87:fa:8f:d2:bc:e6:d1:81:8d:0f:
c1:ed:2a:b1:cc:28:d6:a2:cc:cc:f8:18:a6:d6:6a:
db:27:62:ea:69:41:6e:1d:a1:89:03:ea:2d:6b:7f:
f8:dc:2c:d2:84:c6:fe:36:3e:c2:7a:aa:47:41:53:
69:97:7c:1f:9b:b6:ec:39:b7:b0:57:ee:f4:c1:9f:
1b:33:53:40:62:0e:44:fd:62:fe:51:b3:08:6d:eb:
d4:fb:20:c8:11:8c:60:0c:96:a0:85:8f:7d:c2:f1:
d0:7b:ed:3e:43:4d:43:c0:6b:ad:fc:8b:06:13:60:
a1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:90:10:60:17:83:82:C6:7F:80:98:88:81:C0:A9:3C:FB:78:70:6F
X509v3 Authority Key Identifier:
keyid:12:42:46:6F:8F:86:45:C9:F3:9F:04:87:4D:DA:DF:0D:71:36:F6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/4pAQYBeDgsZ_gJiIgcCpPPt4cG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.40.0/24
89.33.42.0/23
89.46.36.0/24
185.196.32.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:a6:32:1e:66:d3:77:b3:37:49:53:e6:f0:0b:2f:9f:3f:b5:
50:6e:51:8d:94:d3:7a:f5:41:52:ef:d2:2c:39:60:6a:22:2b:
a8:dd:ee:dd:d4:78:70:b6:73:7f:59:d4:2f:af:68:1c:af:ee:
7f:c8:22:54:1e:df:f2:f9:28:1e:bb:ec:62:d3:aa:8d:85:01:
cb:df:9e:ad:30:10:6c:57:cd:4b:88:06:a3:2b:b8:5e:7d:8a:
7b:1d:ee:30:0f:f9:32:0d:ef:9a:f7:15:70:ba:20:4b:04:8a:
7f:0b:0f:db:f5:f8:f0:6e:8d:e4:b4:95:e7:35:62:2e:67:c2:
fd:ca:23:53:ea:5f:81:da:0e:3a:d8:52:3d:81:d7:09:63:fc:
6d:e0:37:d5:35:91:d8:5c:ba:77:f7:ef:f6:38:69:da:e2:ec:
51:b6:2f:f1:c4:44:1e:e4:c0:dc:4c:03:78:19:e9:ab:bc:2d:
55:0a:e4:e0:7b:85:04:94:98:ef:a0:ed:c2:d4:ee:7e:a6:e7:
a4:0f:53:7f:52:13:80:16:6c:c3:2e:4a:8d:71:75:f0:18:63:
c5:f0:49:cd:78:42:d2:23:fb:c0:38:03:ca:b1:45:7e:86:58:
57:30:62:32:ee:78:79:bf:18:c8:3e:a9:2d:9e:f5:8c:d5:a4:
fc:c8:b7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:56 2024 by rpki-client on console-ams.rpki-client.org