Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/xmg8QPAGusHDOhe5ZHy_PhfuB7M.roa
File: xmg8QPAGusHDOhe5ZHy_PhfuB7M.roa (raw, json)
Hash identifier: lhuUKXwQ9KJqg8CrnqDLsLla1SaFn9ITLVKllc2S3Wc=
Subject key identifier: C6:68:3C:40:F0:06:BA:C1:C3:3A:17:B9:64:7C:BF:3E:17:EE:07:B3
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 018B313801DE32DCE1A64C936502E94C6D82
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/xmg8QPAGusHDOhe5ZHy_PhfuB7M.roa
Signing time: Sun 15 Oct 2023 02:43:55 +0000
ROA not before: Sun 15 Oct 2023 02:43:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16589
IP address blocks: 89.37.216.0/23 maxlen: 24
194.135.26.0/23 maxlen: 24
62.112.12.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:31:38:01:de:32:dc:e1:a6:4c:93:65:02:e9:4c:6d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Oct 15 02:43:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6683c40f006bac1c33a17b9647cbf3e17ee07b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:39:c8:fa:41:d9:01:66:ac:64:ee:26:61:1b:
9a:79:c2:9b:9c:21:5e:2a:10:a9:26:0b:3e:2e:cc:
38:bb:c3:9d:06:5c:23:03:67:a9:20:12:fa:77:02:
b1:7d:4d:a7:fa:9d:54:ad:1c:6e:00:1f:8d:7a:c2:
a8:0f:b4:f4:84:f6:55:9f:ca:ad:be:6f:cc:87:71:
f0:95:01:b5:b3:cd:ba:f7:40:ae:4e:12:2b:87:51:
08:77:95:7e:a7:8b:37:25:0b:29:7d:4c:a0:2c:25:
5f:7c:0c:3e:ec:11:70:d5:0d:7f:93:06:9d:08:a4:
1c:13:a4:bc:68:63:7d:1d:fe:c2:ec:a6:69:27:73:
59:db:5d:df:22:a7:f9:dc:78:e3:82:94:d4:fa:b5:
3f:be:9a:df:6a:04:0c:e5:83:e4:44:e5:ae:12:a1:
05:10:0c:99:e9:53:b2:a4:6f:99:57:b8:b6:90:89:
e5:d2:f7:d4:63:f2:59:6e:c2:f8:e2:d4:a8:de:13:
36:e3:d7:88:0e:b2:ad:0a:bb:e2:d8:cd:e6:bb:88:
0a:9a:26:1d:a4:4c:4f:35:0f:d7:95:05:58:d0:7a:
e1:9c:76:da:5e:d8:16:86:90:87:46:bd:1e:11:39:
e4:38:36:17:a8:5b:43:5d:64:4c:e2:8b:c3:00:5f:
a1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:68:3C:40:F0:06:BA:C1:C3:3A:17:B9:64:7C:BF:3E:17:EE:07:B3
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/xmg8QPAGusHDOhe5ZHy_PhfuB7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.12.0/23
89.37.216.0/23
194.135.26.0/23
Signature Algorithm: sha256WithRSAEncryption
58:ce:e2:98:57:78:d9:69:9f:e3:4f:64:dc:d7:ed:d4:75:ba:
c5:4c:02:2a:97:c4:34:02:7c:b5:f2:2d:a0:a0:5a:01:ee:17:
53:fd:1a:a9:2b:c9:65:cc:a0:04:fa:e3:7c:e3:02:39:4b:5f:
ca:50:42:76:e3:59:c1:2a:b6:da:89:be:ec:94:33:50:a8:15:
f0:d7:ed:36:32:00:56:b2:e2:be:94:b4:6a:2f:fa:fe:77:d9:
34:50:5b:61:79:6b:fb:91:2b:14:a9:02:dc:b7:1a:62:69:0e:
17:9b:c8:80:ee:fb:fd:a3:35:c7:22:a2:58:f5:87:03:89:4e:
2d:fc:48:fc:b9:9a:4a:6a:18:56:56:4f:75:71:90:53:d0:37:
20:33:29:82:d0:75:b4:f4:45:d0:3a:cf:72:b7:0a:90:fe:ca:
e5:6f:dc:a2:6d:4f:7c:dd:a7:2b:5b:95:07:57:27:79:63:b8:
9f:f6:e2:ba:f8:93:3d:4f:37:86:ca:35:0c:c2:c5:f5:1e:bd:
be:c7:7d:42:8f:b1:f8:84:a8:7e:10:49:76:de:83:7b:52:be:
c6:22:39:41:24:72:87:71:43:b2:a9:04:08:f9:5a:e9:9e:73:
86:bb:ff:b5:dc:c4:57:95:ef:3b:87:bf:71:31:ad:a2:71:30:
56:6c:1d:d1
-----BEGIN CERTIFICATE-----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 at Mon Nov 6 19:03:20 2023 by rpki-client on console-ams.rpki-client.org