Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/1--8OlwDYJbfakkJbiAa0Qq8yStk.roa
File: 1--8OlwDYJbfakkJbiAa0Qq8yStk.roa (raw, json)
Hash identifier: d+crrdcGmod6U3/jfSmXeU8ZCwvEqlmo0Tqkdo9/hVU=
Subject key identifier: FB:EF:0E:97:00:D8:25:B7:DA:92:42:5B:88:06:B4:42:AF:32:4A:D9
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0189D8AE2576F7E5BBC4CDC58F880E1A71A5
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/1--8OlwDYJbfakkJbiAa0Qq8yStk.roa
Signing time: Wed 09 Aug 2023 05:03:58 +0000
ROA not before: Wed 09 Aug 2023 05:03:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 89.42.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Sep 2023 04:46:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d8:ae:25:76:f7:e5:bb:c4:cd:c5:8f:88:0e:1a:71:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Aug 9 05:03:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fbef0e9700d825b7da92425b8806b442af324ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ae:5f:82:cc:e8:00:7f:9f:e8:74:00:4c:f4:
79:5e:09:d6:bc:66:af:4c:91:9f:04:bc:da:aa:e2:
3e:df:a4:d3:3b:61:16:d6:43:d8:30:28:2f:ad:34:
51:d2:5b:44:75:c5:9d:c4:d1:3c:9e:1b:bb:9f:d5:
43:f4:fe:c9:25:3d:ea:82:98:58:07:8f:72:83:63:
b5:23:b0:9f:03:c0:51:31:fc:a8:b2:6b:cd:b7:b5:
0d:48:86:b8:91:00:69:23:34:8b:8c:12:6d:16:33:
19:ee:27:fc:10:99:26:0b:2f:0f:2b:dc:9f:16:7b:
74:a8:44:77:87:fd:51:2c:fd:1e:40:24:26:2e:58:
c7:1b:16:f8:47:13:d9:88:ac:b5:11:1e:1b:87:07:
d4:a9:0e:e8:6b:cb:90:6d:80:ee:75:52:42:53:12:
6d:21:49:47:f6:13:53:e9:5e:40:42:e9:8b:03:75:
0a:cc:ea:66:3a:db:c2:5e:35:ea:7a:96:be:21:31:
4f:ff:8d:10:5b:28:01:54:09:d5:31:5f:ef:15:2e:
17:71:b6:c5:15:97:31:2a:43:06:18:cd:c3:75:97:
74:ca:39:94:9a:eb:97:27:80:24:4d:a6:5d:69:4e:
62:74:db:7c:c7:9f:8e:6e:a5:8f:dd:89:c6:8c:76:
44:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:EF:0E:97:00:D8:25:B7:DA:92:42:5B:88:06:B4:42:AF:32:4A:D9
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/1--8OlwDYJbfakkJbiAa0Qq8yStk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.95.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:e2:b1:9b:7b:1c:f2:65:ce:63:83:d2:cb:9c:ed:f4:21:6e:
45:a4:d3:16:af:25:a6:a1:34:3f:9b:da:56:78:6d:2a:b7:72:
a5:a9:44:86:24:63:55:ab:59:e2:a0:4b:46:ae:42:e5:99:ba:
3f:06:60:92:eb:2d:a4:57:56:e6:d4:8c:d6:76:2f:6b:f7:df:
ce:88:b0:18:95:d6:1e:63:38:69:f7:bb:ae:fd:bb:22:52:21:
6f:b9:5a:8b:a8:96:a8:6b:de:44:c4:14:76:fa:ec:5d:08:84:
f7:8f:68:d1:f4:52:f7:9a:e8:bb:5a:7b:13:6b:76:3b:ff:b9:
78:7d:f3:8a:92:f9:1b:c5:6d:f4:fd:5d:32:6d:cb:4e:6c:1a:
af:cd:91:d7:4c:65:6a:1d:b1:8e:6e:c4:9a:99:5d:60:26:f6:
8d:4c:f1:ad:fd:fc:22:15:67:8c:db:f3:48:95:27:7f:8c:0e:
ee:e3:02:a3:98:36:ad:26:cc:a7:aa:b8:fe:1a:8c:f2:ac:ca:
9b:ac:2d:9d:0a:4c:0e:bf:09:91:3a:3d:58:26:9c:c5:48:ff:
83:4c:56:8f:dd:cf:03:ad:6a:0b:a5:0c:d0:3f:a9:03:2b:10:
7f:89:c9:2f:4f:bd:74:71:d0:26:86:b3:7c:3c:69:48:3b:3c:
2b:fc:7d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:49 2024 by rpki-client on console-ams.rpki-client.org