Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/N38tycmu_yIcb_OjbR2oq-ji2hQ.roa
File: N38tycmu_yIcb_OjbR2oq-ji2hQ.roa (raw, json)
Hash identifier: O9EiFv3/bKvbCC1zCNfr7a9dvDFV7xTCNtC5WGQVkNE=
Subject key identifier: 37:7F:2D:C9:C9:AE:FF:22:1C:6F:F3:A3:6D:1D:A8:AB:E8:E2:DA:14
Certificate issuer: /CN=09b4bf37f39eec62982c4b63709fab5d146c7373
Certificate serial: 01888FE9182C88353A90AB8DB966FBB591E0
Authority key identifier: 09:B4:BF:37:F3:9E:EC:62:98:2C:4B:63:70:9F:AB:5D:14:6C:73:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/N38tycmu_yIcb_OjbR2oq-ji2hQ.roa
Signing time: Tue 06 Jun 2023 08:53:17 +0000
ROA not before: Tue 06 Jun 2023 08:53:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44756
IP address blocks: 89.44.110.0/23 maxlen: 24
94.247.26.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8f:e9:18:2c:88:35:3a:90:ab:8d:b9:66:fb:b5:91:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09b4bf37f39eec62982c4b63709fab5d146c7373
Validity
Not Before: Jun 6 08:53:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=377f2dc9c9aeff221c6ff3a36d1da8abe8e2da14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:43:92:b4:f2:4d:c2:dc:82:7e:67:19:4d:f5:
db:1e:1c:af:76:98:a2:00:44:81:13:03:fc:09:ce:
d3:a0:11:a6:60:57:5b:ff:81:43:3b:c8:72:d8:20:
6f:f6:df:83:99:bf:fb:9f:b9:f8:64:2f:ee:41:c1:
25:42:8c:66:55:87:d6:d2:b1:43:43:ef:25:57:dc:
aa:08:ed:62:81:d9:ed:83:66:e2:77:5d:17:e2:6f:
80:5e:d0:00:6a:1a:33:33:4f:7e:84:a6:5f:58:fc:
68:82:bc:dd:e1:c7:35:a6:d7:ce:75:b1:74:ad:05:
c8:71:13:8d:26:09:83:2c:90:46:2a:c2:6b:2b:bb:
78:7f:e7:f0:5a:73:95:25:b3:1d:5b:14:7d:02:d0:
71:56:17:1a:98:4f:47:74:55:56:68:aa:72:3f:6c:
d4:cc:19:24:81:78:bf:66:16:8d:a6:b1:97:f7:fe:
e3:83:74:a0:c9:19:eb:79:94:e3:51:1c:9c:7f:50:
76:87:47:47:65:9c:d2:c8:13:a6:55:db:ec:ca:74:
2f:95:e5:ef:6e:6e:d5:b7:fb:40:20:6b:9b:12:19:
9b:97:41:be:09:2a:b0:cc:89:83:60:25:fe:bf:9c:
29:e3:7a:ae:b1:7e:40:5a:43:5a:ab:b6:0d:62:11:
f9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:7F:2D:C9:C9:AE:FF:22:1C:6F:F3:A3:6D:1D:A8:AB:E8:E2:DA:14
X509v3 Authority Key Identifier:
keyid:09:B4:BF:37:F3:9E:EC:62:98:2C:4B:63:70:9F:AB:5D:14:6C:73:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/N38tycmu_yIcb_OjbR2oq-ji2hQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.110.0/23
94.247.26.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:c1:4d:49:fc:93:ca:90:14:f9:77:9d:2c:04:f8:fd:d0:33:
cb:fa:c6:d5:15:74:c6:2a:ab:f8:e1:fd:8b:ff:8f:cb:4d:e1:
11:65:75:7e:45:e4:79:3d:47:09:72:ab:ca:53:e6:1b:a2:c3:
59:aa:a2:f0:5b:8d:b8:dd:d3:7e:4e:a8:dd:6f:8e:68:f2:1f:
01:20:8d:18:5c:e6:42:04:0d:2b:e4:be:c2:ef:12:34:4c:aa:
bf:d7:96:35:61:c8:60:0a:37:cf:04:45:34:6e:88:10:d3:7e:
1b:77:ee:57:a8:64:36:08:76:22:23:5e:6d:16:a5:ad:87:d4:
97:3f:23:a7:0c:1e:84:1f:90:b2:0e:93:9c:d3:78:c5:51:ad:
b6:91:b6:56:67:1a:60:b5:0a:88:2c:d5:88:93:99:4e:29:8c:
32:6c:5b:82:21:f7:d9:68:4d:24:bc:70:55:ec:59:e8:6f:7d:
e2:ac:b3:42:ef:15:2b:80:92:43:42:45:3b:57:5c:06:ff:7f:
66:31:7f:e4:f2:0a:c1:b0:87:2d:48:31:8d:f0:eb:92:aa:41:
ad:35:33:e5:99:29:a2:89:ce:99:67:21:98:a0:9b:42:fe:9d:
42:99:d9:16:87:f3:ca:73:be:56:8d:ec:56:c1:7a:56:7c:44:
3f:98:a1:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:53 2024 by rpki-client on console-ams.rpki-client.org