Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/clubwWyM1wGCTWK56YS1-__nYjY.roa
File: clubwWyM1wGCTWK56YS1-__nYjY.roa (raw, json)
Hash identifier: nQDYLSRqrTY/hUlXb+Dz4xOgizCRjufpQ1p0Tfnwwi4=
Subject key identifier: 72:5B:9B:C1:6C:8C:D7:01:82:4D:62:B9:E9:84:B5:FB:FF:E7:62:36
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 018AFC201EEB7210F7A0CA4F46061EA54B3E
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/clubwWyM1wGCTWK56YS1-__nYjY.roa
Signing time: Wed 04 Oct 2023 19:17:57 +0000
ROA not before: Wed 04 Oct 2023 19:17:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211439
IP address blocks: 89.40.166.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fc:20:1e:eb:72:10:f7:a0:ca:4f:46:06:1e:a5:4b:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Oct 4 19:17:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=725b9bc16c8cd701824d62b9e984b5fbffe76236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e7:f5:a1:dc:c9:5b:ef:ec:cc:ce:de:29:f1:
13:1f:ab:2f:4c:ac:3c:f8:09:be:40:ab:71:d0:27:
bc:7a:f5:26:91:e3:5e:a2:a3:ed:bd:ed:38:0b:9f:
f2:5c:bb:fd:66:20:6a:95:4f:44:89:49:e3:0f:47:
53:48:bf:ed:49:fd:b9:e4:c6:69:ba:f1:14:93:4b:
1d:49:7e:be:ac:03:54:ef:7e:45:36:51:f3:78:00:
f8:ad:68:0b:90:a2:a6:0a:3d:96:b1:7b:d6:e6:2a:
05:00:4e:9f:e8:0d:72:19:a8:1a:ce:b9:1d:2f:b0:
04:4f:d3:5d:92:63:26:22:8e:79:6c:98:49:01:d1:
7a:e8:6f:ec:d9:bc:5b:42:b1:3c:02:3f:f5:a3:90:
5a:d5:b3:01:9b:8b:b2:89:9b:9c:e1:3c:14:5f:13:
05:cc:35:de:36:81:7d:c1:ad:f5:a7:fd:03:e0:63:
b9:a6:cd:0a:30:0a:cc:e2:e4:ce:9d:a2:da:d8:d0:
d3:33:a6:e3:d7:0f:7c:ab:3d:7a:e3:19:6a:47:fc:
17:81:55:8e:d3:42:01:ac:6c:40:88:26:45:e3:7d:
8c:22:b2:d7:72:38:04:52:c1:3a:25:fa:a1:5c:fc:
ea:27:2c:cf:87:d7:b5:8f:5d:3d:a0:db:36:95:fa:
74:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:5B:9B:C1:6C:8C:D7:01:82:4D:62:B9:E9:84:B5:FB:FF:E7:62:36
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/clubwWyM1wGCTWK56YS1-__nYjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.166.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:2e:20:a5:28:7e:2d:11:3e:32:da:45:e9:f4:15:01:10:b0:
31:4c:3f:b1:87:26:69:1b:ba:a7:43:fb:33:c5:e0:0f:e6:c9:
2e:8c:6e:59:49:09:1c:73:c3:1c:c8:e6:ae:14:cc:78:2a:d4:
f4:6a:a4:54:71:41:0f:b0:c3:ca:28:c5:cc:df:31:58:3b:2a:
22:6a:a4:50:79:c1:cb:c8:4e:6e:d3:0d:c9:c0:0f:ba:67:73:
3f:45:6b:a0:46:17:7d:34:46:fd:86:00:d0:fe:4f:86:bb:90:
19:33:a0:bc:9d:e5:fb:77:99:d6:18:eb:f6:81:28:5d:98:de:
83:e8:cc:7f:df:ac:09:ed:25:68:e6:ff:ea:9b:80:38:3f:81:
af:4e:18:ac:48:ac:61:93:61:67:be:31:f1:7d:8b:a3:ae:46:
a8:54:1f:f3:2d:24:cb:69:fa:5f:d9:07:6e:72:5f:43:72:ba:
4c:6a:a2:d3:84:e2:9c:c0:06:e5:44:ac:f6:46:9e:ca:e8:b4:
5e:53:a0:a3:37:6a:3e:94:4b:82:cf:72:96:87:52:32:ea:f8:
55:51:bb:26:e6:72:1d:5e:d7:63:2e:ce:5b:39:4f:0d:a4:06:
24:92:1b:20:6d:e4:8b:70:6c:56:0c:ce:57:2c:36:bc:18:2c:
79:2b:45:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:26:45 2024 by rpki-client on console-fra.rpki-client.org