Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/CeDNJUrXGASmE97cP20A67FERZ8.roa
File: CeDNJUrXGASmE97cP20A67FERZ8.roa (raw, json)
Hash identifier: aoReMyfRUL0LzPcD9Yo8+/oL6JEz/sgzwZ6y6QVZcjI=
Subject key identifier: 09:E0:CD:25:4A:D7:18:04:A6:13:DE:DC:3F:6D:00:EB:B1:44:45:9F
Certificate issuer: /CN=618cc46d71e7848978488961d7b51aba1541f3c4
Certificate serial: 0191035F540EA43A0D7E7F6DBD8BC8C33ED5
Authority key identifier: 61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/CeDNJUrXGASmE97cP20A67FERZ8.roa
Signing time: Tue 30 Jul 2024 11:21:04 +0000
ROA not before: Tue 30 Jul 2024 11:21:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 89.184.16.0/22 maxlen: 24
193.223.103.0/24 maxlen: 24
193.223.108.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Nov 2024 01:26:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:03:5f:54:0e:a4:3a:0d:7e:7f:6d:bd:8b:c8:c3:3e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618cc46d71e7848978488961d7b51aba1541f3c4
Validity
Not Before: Jul 30 11:21:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=09e0cd254ad71804a613dedc3f6d00ebb144459f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:98:fd:4e:72:3d:4e:14:19:e3:a6:bb:88:bb:
f0:07:dd:7c:eb:df:80:4c:99:fa:66:77:e5:ff:d4:
f1:95:3e:e4:d7:42:ed:ab:6f:69:99:72:d8:06:6e:
31:70:21:9c:dc:9f:95:d4:c4:fe:6e:d2:17:90:ba:
42:c5:88:69:6d:5d:75:ff:c3:68:f2:39:5e:d4:16:
55:a9:1d:03:c6:d4:50:e8:7b:be:e5:a1:ab:8c:eb:
53:9d:be:31:66:99:92:1e:3e:3b:76:fc:05:9e:3f:
0b:01:35:95:44:c8:e1:a1:cf:7f:5e:1b:78:44:0e:
e5:34:c9:e1:35:12:62:86:a9:f7:ab:e0:3d:95:f0:
b4:dd:d5:f6:a7:81:0c:42:ab:33:e5:fb:a9:02:77:
5c:1e:3e:f8:29:7f:cc:7b:81:52:be:90:e4:b4:18:
62:4f:8f:c6:6a:3f:7c:df:1f:78:98:c3:72:ab:c3:
eb:1e:9a:5d:5c:2c:bf:75:37:e2:a8:1f:69:9a:a6:
ca:af:55:c9:ea:39:2b:c2:34:00:2b:5c:ca:6c:31:
35:f3:83:d3:44:4f:b4:fc:3f:1c:07:f0:44:17:93:
6b:7b:d5:f7:b2:5c:6a:af:2d:b3:63:8e:2a:2a:13:
80:04:30:c6:49:a4:d2:9f:a8:fc:d1:3c:fa:e6:81:
86:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E0:CD:25:4A:D7:18:04:A6:13:DE:DC:3F:6D:00:EB:B1:44:45:9F
X509v3 Authority Key Identifier:
keyid:61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/CeDNJUrXGASmE97cP20A67FERZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.184.16.0/22
193.223.103.0/24
193.223.108.0/24
Signature Algorithm: sha256WithRSAEncryption
73:af:81:be:46:6f:c0:86:ec:9c:12:a9:ec:ac:22:68:f6:6c:
b4:47:3b:0b:3f:4a:f7:4c:1a:46:e5:61:b7:06:56:bb:d6:24:
a4:cb:9b:cb:f2:36:a0:56:e2:3a:3e:e2:49:9b:87:fc:07:11:
91:76:2e:d7:55:1f:44:b4:e7:dd:6a:6b:4a:05:43:9f:0d:b8:
89:50:a5:9b:b7:68:92:c6:9f:4d:5a:b2:63:5f:10:2f:1e:8b:
1a:1a:16:77:0f:e1:7a:6b:60:7a:37:5c:31:24:e9:6b:19:5f:
cd:a4:68:64:62:de:0a:f5:2e:72:e3:06:07:04:d2:cd:ea:8c:
e7:0b:70:0f:4e:36:a7:c4:5b:f9:1a:36:5e:49:cd:97:53:e1:
4a:15:95:f8:3e:d3:27:ec:f6:27:a6:08:4f:fb:94:71:f7:20:
80:68:c5:86:ab:f9:b7:08:57:dd:c8:e8:24:59:0c:e8:a9:f6:
75:27:1b:bc:7e:27:8c:cc:69:ae:62:b0:ac:07:57:44:65:59:
47:0c:8e:0b:9d:7a:28:92:65:e1:a8:5b:a2:58:d0:10:56:89:
b0:29:ae:e1:81:ff:4d:2e:c2:67:db:71:ab:96:b2:e5:a6:70:
8a:5e:16:a7:4d:2b:79:27:1f:e4:5f:3b:33:77:be:7e:40:81:
54:ce:ab:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 07:02:32 2024 by rpki-client on console-ams.rpki-client.org