Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/RuHb0O_uUqvw3mEPZIR6LiJ32As.roa
File: RuHb0O_uUqvw3mEPZIR6LiJ32As.roa (raw, json)
Hash identifier: 0s/dVI2jl2+iyjND5+YiY3Dqpa/560kiXvFY2l4XjfE=
Subject key identifier: 46:E1:DB:D0:EF:EE:52:AB:F0:DE:61:0F:64:84:7A:2E:22:77:D8:0B
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 0189E066C202131127E907CF60F0084FB995
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/RuHb0O_uUqvw3mEPZIR6LiJ32As.roa
Signing time: Thu 10 Aug 2023 17:02:58 +0000
ROA not before: Thu 10 Aug 2023 17:02:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 89.117.240.0/24 maxlen: 24
89.117.242.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e0:66:c2:02:13:11:27:e9:07:cf:60:f0:08:4f:b9:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Aug 10 17:02:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46e1dbd0efee52abf0de610f64847a2e2277d80b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:07:78:2a:3d:29:18:f8:18:5d:90:26:51:e6:
b8:9c:05:92:57:7b:21:c9:8d:d4:60:54:8d:9a:49:
23:be:dd:1b:87:ec:2a:91:94:e2:7d:3f:12:2b:69:
0a:7c:46:e0:bc:28:50:03:8f:4f:cb:c0:f3:6f:4c:
0a:44:2c:3f:a5:2f:d9:ae:d9:d0:55:88:ae:c9:74:
48:06:34:a8:39:83:d6:f0:5c:87:38:74:33:f6:ec:
db:c6:f6:e7:81:a6:a7:43:23:8f:68:83:88:3e:8d:
80:1f:29:e3:75:dc:7c:0d:c5:38:5b:a6:81:2b:6e:
1e:64:9b:59:1c:24:a8:44:b2:fc:d6:14:00:62:68:
81:52:44:52:64:ac:b3:d9:6a:ef:c5:40:11:84:61:
49:fb:53:6a:43:e8:cf:4c:0b:0d:68:ed:e1:8d:e3:
b6:82:e9:db:c9:13:3f:75:f6:88:b7:f2:20:e9:b5:
0d:a3:55:72:22:f7:3c:b2:a9:92:43:22:d7:74:85:
b0:53:4d:06:26:4d:4c:5d:e7:fe:5b:30:91:bd:94:
9a:8c:ca:31:3e:66:32:0f:f2:f4:ed:3c:b1:77:8e:
39:fa:52:6a:c5:69:89:f3:11:8e:82:d6:04:f2:f2:
77:4a:a3:03:f1:bc:3e:d8:46:78:1d:8f:8c:04:24:
8f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E1:DB:D0:EF:EE:52:AB:F0:DE:61:0F:64:84:7A:2E:22:77:D8:0B
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/RuHb0O_uUqvw3mEPZIR6LiJ32As.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.117.240.0/24
89.117.242.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:dc:19:81:3e:0c:33:d7:f5:ff:43:f3:4b:bb:9e:ee:0e:4e:
df:1b:32:c4:b0:fc:18:5c:1e:ee:03:7b:2e:42:ab:42:73:e8:
da:77:07:fe:c0:02:b2:23:81:98:f7:8e:f4:cd:56:e9:b6:37:
52:6b:66:d8:f7:a9:e8:97:40:18:41:56:c0:a0:a8:8f:08:8b:
50:65:0d:52:97:dd:43:13:32:23:28:15:71:f0:a9:45:f3:32:
22:0e:8b:7b:82:75:a7:f4:ab:51:c5:dd:ac:67:ac:73:dc:9f:
fb:fa:ca:3f:9b:8a:b2:24:32:40:7a:c8:13:bd:d6:84:8c:20:
9f:b3:03:64:de:4f:09:80:a0:b0:08:de:c3:36:7b:8a:0f:fe:
3f:52:06:12:e8:22:13:44:db:a4:68:8d:51:20:a3:6e:2f:c7:
56:00:6d:62:ca:be:53:b1:9d:2f:2a:ed:50:87:02:43:51:18:
f5:8b:32:b7:1d:14:ad:5a:42:c6:60:b3:99:8f:d5:94:1d:e7:
f1:d9:7b:86:4f:af:0d:e9:d3:94:e5:5d:38:ca:b5:84:e7:55:
78:c9:d4:d9:c4:db:63:80:88:7c:76:ed:aa:8b:2b:cb:cc:d5:
76:01:44:79:c2:0c:b8:37:21:d6:eb:9a:9b:07:d8:8a:27:4e:
6c:fd:c1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:19 2024 by rpki-client on console-ams.rpki-client.org