Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/dx1z1RrvIz2ArtZ2866KbIM_tA4.roa
File: dx1z1RrvIz2ArtZ2866KbIM_tA4.roa (raw, json)
Hash identifier: gyH+jEvN3ZF/yUykkHtRADCQWBupOUDyiPNDWLZQnNo=
Subject key identifier: 77:1D:73:D5:1A:EF:23:3D:80:AE:D6:76:F3:AE:8A:6C:83:3F:B4:0E
Certificate issuer: /CN=cb608201f88aeae9486b9fa87189d796c54027dd
Certificate serial: 018BC3671FBE57008AB9FC7B59E585BB219C
Authority key identifier: CB:60:82:01:F8:8A:EA:E9:48:6B:9F:A8:71:89:D7:96:C5:40:27:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2CCAfiK6ulIa5-ocYnXlsVAJ90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/dx1z1RrvIz2ArtZ2866KbIM_tA4.roa
Signing time: Sun 12 Nov 2023 11:59:57 +0000
ROA not before: Sun 12 Nov 2023 11:59:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60808
IP address blocks: 89.23.126.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c3:67:1f:be:57:00:8a:b9:fc:7b:59:e5:85:bb:21:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb608201f88aeae9486b9fa87189d796c54027dd
Validity
Not Before: Nov 12 11:59:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=771d73d51aef233d80aed676f3ae8a6c833fb40e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c3:df:8e:dd:59:50:0a:0b:60:bb:d5:ce:c5:
7c:b4:81:af:48:6e:1b:3d:92:6e:38:35:a4:85:39:
de:0a:ac:3c:cb:02:56:d9:8e:56:4e:a5:2f:84:a8:
05:63:20:0c:a4:cd:41:24:1f:b5:99:2e:27:70:40:
34:32:44:39:05:c7:61:1e:e5:6a:11:72:7a:a4:f0:
65:1d:1a:b5:59:d0:1a:92:d1:10:b0:d0:f3:26:fc:
6b:3b:96:15:23:46:ac:fc:b3:ca:e0:ff:27:ac:d7:
bb:4c:15:8e:0a:32:72:89:41:96:69:58:d8:ad:f5:
1d:70:68:dd:7c:0f:29:c4:fa:b6:e8:f0:05:38:75:
4b:98:3f:e1:87:72:a8:29:2d:70:cb:24:72:2e:9f:
46:cc:5b:60:5e:1b:b9:fb:3e:df:03:70:d0:be:7c:
92:d1:2a:9c:5e:49:14:58:2b:1c:c1:64:74:cb:86:
8f:6b:71:45:b7:79:81:fd:f7:ef:c0:25:9a:8b:0c:
3b:11:c4:1a:14:bf:65:f0:82:c3:b8:6d:33:cc:35:
25:aa:8e:ce:a1:9d:8e:88:17:58:0a:97:97:5a:7f:
f9:98:3e:5e:80:74:01:c6:20:a2:27:3e:d5:b8:c0:
6f:4a:23:7e:43:7c:60:fa:ab:b1:8a:d0:aa:31:19:
5d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:1D:73:D5:1A:EF:23:3D:80:AE:D6:76:F3:AE:8A:6C:83:3F:B4:0E
X509v3 Authority Key Identifier:
keyid:CB:60:82:01:F8:8A:EA:E9:48:6B:9F:A8:71:89:D7:96:C5:40:27:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2CCAfiK6ulIa5-ocYnXlsVAJ90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/dx1z1RrvIz2ArtZ2866KbIM_tA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.126.0/24
Signature Algorithm: sha256WithRSAEncryption
31:52:09:5b:02:c9:77:2b:28:31:92:6a:37:44:5e:df:80:cb:
54:0e:0c:a0:a2:3e:e3:60:2c:8f:5b:2d:12:1a:85:1c:a8:97:
17:8a:b9:b1:20:6d:da:be:7b:34:a8:2d:94:57:4e:42:a4:1d:
e6:5f:62:0a:58:ea:7c:7a:21:0f:89:f3:76:b7:06:1d:77:bf:
ee:3c:8f:76:06:1f:9e:d5:b3:b0:a9:73:b6:3b:00:7f:e1:87:
cd:5c:8a:9b:e3:32:d9:0e:1e:a1:5e:1f:6d:87:13:d0:34:97:
4f:48:17:59:68:dd:55:76:3d:9a:85:7c:cb:3c:c6:f3:ed:91:
e8:ce:24:c8:cc:23:01:16:82:a7:13:ce:f2:67:aa:72:4a:0f:
12:fe:25:74:4f:94:7d:7f:5b:22:95:84:7f:ff:b4:c7:3d:4b:
8b:b0:7e:3f:5c:31:1c:1e:1c:ac:85:b7:dc:85:93:53:b7:17:
d1:b8:39:b7:6d:fa:aa:c4:bc:33:ba:42:fe:5a:a1:15:11:21:
68:ab:b5:6a:f8:95:fc:ad:62:5c:9d:d4:a5:a2:81:8f:42:a2:
db:aa:89:70:c9:7e:3d:53:f7:63:6a:88:4a:bf:8f:a4:9d:5f:
33:92:d4:e7:bf:21:82:36:2f:a0:4b:0a:d0:0a:3b:36:7b:a1:
a2:77:ef:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:39 2023 by rpki-client on console.sobornost.net