Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/29rbCGRRMw0xzHr7YfKt0Qij73E.roa
File: 29rbCGRRMw0xzHr7YfKt0Qij73E.roa (raw, json)
Hash identifier: sgGWtMzAP+z4w1RduiVnWsSauf6/Q8bm3F83v+6UT3o=
Subject key identifier: DB:DA:DB:08:64:51:33:0D:31:CC:7A:FB:61:F2:AD:D1:08:A3:EF:71
Certificate issuer: /CN=5e400ac2396ae228d2b2e56f4b06739969379e44
Certificate serial: 018572FA63F3E5D8AE73BA3F4AEE88C880BC
Authority key identifier: 5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/29rbCGRRMw0xzHr7YfKt0Qij73E.roa
Signing time: Mon 02 Jan 2023 14:54:50 +0000
ROA not before: Mon 02 Jan 2023 14:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60737
IP address blocks: 89.30.86.0/24 maxlen: 24
89.30.95.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:fa:63:f3:e5:d8:ae:73:ba:3f:4a:ee:88:c8:80:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e400ac2396ae228d2b2e56f4b06739969379e44
Validity
Not Before: Jan 2 14:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dbdadb086451330d31cc7afb61f2add108a3ef71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:06:83:b6:eb:2a:25:2a:2e:08:06:38:0e:c5:
11:26:6c:57:aa:3d:c8:2e:c9:e2:09:f8:82:23:99:
24:4f:b7:26:ba:c3:fc:90:ae:f4:10:61:f1:49:57:
8d:5f:df:8f:71:60:98:6b:99:c7:2f:aa:3d:8e:f2:
5a:cf:87:8e:23:d7:79:0b:78:82:3b:5f:dc:6c:e1:
79:2b:0b:83:95:9b:43:63:97:2a:67:cb:74:3b:a6:
fd:dc:90:1d:8e:25:7d:80:3c:36:6a:c8:8e:b2:66:
72:ce:6d:2d:99:5b:66:f0:6c:0e:ba:50:ca:b0:9c:
7f:1a:6d:fc:90:71:8e:74:bf:63:5b:08:66:c5:d3:
4a:b6:6c:a2:e0:8a:14:25:f2:40:00:0b:97:a6:3a:
55:7d:7a:d3:0a:05:1f:fa:8e:b2:2e:25:21:75:2a:
da:13:1d:1d:c8:c0:db:34:5e:dd:82:e5:2f:cd:b8:
09:86:89:2d:12:ec:34:5b:ff:75:cb:e8:17:9f:82:
c0:e3:82:90:d3:e7:87:fb:ae:86:07:12:f1:c5:71:
19:d1:5b:fc:da:72:af:42:97:27:99:79:4a:48:6b:
ab:8b:60:f7:b9:a3:75:94:33:95:c7:d0:2e:c1:ca:
3b:d6:00:24:9b:7e:aa:b2:d7:c0:ca:c7:34:8d:59:
13:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:DA:DB:08:64:51:33:0D:31:CC:7A:FB:61:F2:AD:D1:08:A3:EF:71
X509v3 Authority Key Identifier:
keyid:5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/29rbCGRRMw0xzHr7YfKt0Qij73E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.30.86.0/24
89.30.95.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:5a:8e:5c:d3:9e:d9:0a:7a:e4:3c:9c:82:f5:f7:37:17:aa:
21:a6:dd:0c:05:30:98:1e:17:aa:ec:35:f7:f7:1a:dc:2e:1c:
b6:b5:be:45:22:0e:c3:d2:ad:74:65:d2:cc:c2:d4:31:d7:5c:
a5:8a:24:32:6c:36:8a:a0:70:e3:98:49:85:d8:55:d8:b7:7c:
f0:83:ed:9c:03:b4:75:a0:81:d5:3d:3b:52:94:6d:db:8f:f8:
f6:15:8e:ef:23:7a:aa:80:df:40:0b:c6:53:3b:c7:fa:e7:42:
59:c8:ba:25:94:c1:0a:f7:7e:43:1f:99:ff:53:6b:e1:03:a1:
8c:22:4f:48:dd:3e:1d:d8:bd:fb:ff:e5:69:26:72:fd:02:d1:
f7:45:df:52:72:34:d7:ff:92:93:1c:98:96:e8:96:62:16:da:
a5:e3:99:d6:fb:19:9e:cf:70:58:0c:53:bd:9b:74:8b:19:b9:
2c:1f:02:1b:80:14:23:8f:d5:a5:6b:87:d9:b3:e2:cb:2e:2f:
66:c3:8b:46:a5:f1:27:05:2b:89:29:3c:e1:0a:80:07:68:c3:
e4:98:7c:94:53:5a:6c:4d:d1:e1:1f:93:18:4b:ec:fd:e6:b5:
08:6c:88:cd:79:bc:be:aa:86:5e:36:3c:99:22:41:68:a5:8f:
fc:97:c6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:13:27 2024 by rpki-client on console.sobornost.net