Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/An3XFUYJ5l54L1jtUKh43_aHvx8.roa
File: An3XFUYJ5l54L1jtUKh43_aHvx8.roa (raw, json)
Hash identifier: ATX3//ZPYztOepMbND83mjp13130S2FSA0IPnV7n4nQ=
Subject key identifier: 02:7D:D7:15:46:09:E6:5E:78:2F:58:ED:50:A8:78:DF:F6:87:BF:1F
Certificate issuer: /CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec
Certificate serial: 01856D663C54E7C964DA9A3D480B46AD5C6F
Authority key identifier: B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/An3XFUYJ5l54L1jtUKh43_aHvx8.roa
Signing time: Sun 01 Jan 2023 12:54:54 +0000
ROA not before: Sun 01 Jan 2023 12:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8708
IP address blocks: 89.37.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:66:3c:54:e7:c9:64:da:9a:3d:48:0b:46:ad:5c:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec
Validity
Not Before: Jan 1 12:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=027dd7154609e65e782f58ed50a878dff687bf1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:76:90:47:fe:6f:50:ab:2c:1c:fd:20:5c:47:
2d:ad:5b:57:37:9b:b7:b3:d5:ef:28:64:00:43:42:
2e:f0:f4:23:ca:16:18:ce:c3:c8:51:cf:d5:3d:37:
09:f3:73:c9:ea:b4:6b:2b:10:18:11:13:27:6c:26:
d8:25:2a:22:9f:10:d1:12:34:16:f6:3a:92:50:9f:
59:20:2a:10:1d:fe:e6:07:eb:86:53:eb:7e:e6:45:
a1:f7:c7:cb:30:8f:f4:c9:f3:8b:eb:00:5b:43:6b:
3d:3b:a3:d7:f4:70:06:6f:11:7c:83:bf:d0:4c:ee:
81:92:05:b7:39:e3:4c:75:60:f0:85:98:55:8e:91:
11:75:42:8c:9a:0a:75:57:07:19:f8:72:7d:95:a8:
94:57:ac:da:70:68:58:4c:16:12:56:3d:87:1b:fa:
07:b5:05:a7:90:0f:f7:5d:29:b1:78:83:44:2d:d8:
d4:50:b0:c9:90:6f:e6:b2:6c:f3:e6:39:8a:0b:b7:
a3:a3:98:3d:28:02:8f:d1:82:a9:62:79:4b:22:5a:
51:43:56:06:b6:29:ba:55:1e:21:f1:f6:96:e3:0f:
63:10:b2:a6:17:6b:ba:d5:e9:63:70:26:a1:cc:0a:
b8:55:d6:e6:d6:c2:13:03:48:c6:59:0b:9f:c9:61:
4d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:7D:D7:15:46:09:E6:5E:78:2F:58:ED:50:A8:78:DF:F6:87:BF:1F
X509v3 Authority Key Identifier:
keyid:B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/An3XFUYJ5l54L1jtUKh43_aHvx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.135.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:97:35:a6:a0:aa:5d:82:99:88:18:12:dd:94:d1:3b:eb:5c:
9d:17:8b:9f:d3:75:c5:fd:cb:90:bd:ac:87:fa:b1:44:e6:7e:
3d:2c:00:48:1c:1a:98:d0:a5:4c:4d:cf:ad:1f:11:17:47:2f:
c7:99:6f:d6:1d:c1:83:ff:e3:6f:32:18:4e:6f:bc:ce:0a:c9:
41:cb:6a:4c:06:46:5b:07:4d:11:c9:9f:c1:f1:2e:76:ed:c7:
5a:e4:66:25:23:2c:80:aa:e4:10:ad:f8:27:37:17:9e:6b:82:
05:e4:a9:f3:f3:d3:86:b2:a8:1b:24:ef:9e:3e:d7:1a:20:61:
10:44:26:a1:f3:86:f3:4f:15:c5:81:e0:a3:23:cc:38:ad:65:
24:f8:bd:32:90:b5:dc:cb:35:b2:ff:04:fd:f7:74:7e:4a:41:
ba:46:5d:c4:11:09:11:ff:37:80:d5:e0:d8:c0:02:22:de:3b:
8f:02:16:93:a5:11:a2:c3:9a:dd:f8:df:a3:35:57:66:17:ac:
02:39:f3:2c:92:e2:b1:0b:15:5d:da:15:e2:0b:24:d5:66:fc:
3f:47:12:0b:7f:9c:25:5a:0c:05:b5:2f:18:ef:73:b2:a7:83:
c9:e8:61:e2:f6:22:3b:94:34:7c:45:3e:d2:46:22:7b:c8:90:
a2:50:94:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:47 2024 by rpki-client on console-ams.rpki-client.org