Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/1-MoKq7AiWBaYVl-XPyHrSjxujxw.roa
File: 1-MoKq7AiWBaYVl-XPyHrSjxujxw.roa (raw, json)
Hash identifier: 3V/YV4UWEZkdY0dImbVzioqx5ZLBI9Su4JH4P0/MYfQ=
Subject key identifier: F8:CA:0A:AB:B0:22:58:16:98:56:5F:97:3F:21:EB:4A:3C:6E:8F:1C
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018B14FCD553134E7A51111A3FF6FFD7BFD4
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/1-MoKq7AiWBaYVl-XPyHrSjxujxw.roa
Signing time: Mon 09 Oct 2023 15:09:55 +0000
ROA not before: Mon 09 Oct 2023 15:09:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.42.82.0/23 maxlen: 23
89.42.80.0/23 maxlen: 23
93.119.105.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:14:fc:d5:53:13:4e:7a:51:11:1a:3f:f6:ff:d7:bf:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Oct 9 15:09:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8ca0aabb022581698565f973f21eb4a3c6e8f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:95:62:a9:59:81:a5:bd:15:cf:f7:24:45:5d:
2b:88:9b:6e:68:85:73:16:77:5c:88:32:8f:b3:9d:
89:e0:38:eb:69:a4:d5:61:d1:be:64:bb:85:af:54:
fb:c9:f1:c9:9a:3c:8c:9f:0b:5b:88:92:38:18:f6:
e6:9a:bd:2e:29:76:3e:b2:3c:1d:c2:b1:8e:da:ad:
1a:cb:84:da:2a:8e:cc:8f:57:c1:bb:27:6c:7c:b1:
77:d3:47:14:15:08:b6:82:fa:91:5a:92:5e:b2:d2:
2e:39:76:08:67:93:23:fc:92:01:e9:c1:de:4d:f2:
91:06:12:4d:01:10:d6:ae:d6:f1:a7:1b:3b:73:3f:
8b:ae:17:5b:b4:ec:05:bc:70:23:81:3a:eb:84:dd:
ff:af:61:cb:c9:1d:2c:d8:b4:c2:b8:98:0f:23:9b:
fb:b8:56:d5:80:12:31:53:2b:f6:43:3d:ea:83:83:
e4:d2:dc:18:96:ce:e2:e0:0d:ce:9a:e3:1f:b1:a4:
a7:4d:30:27:4d:d0:c2:d0:78:a8:fe:d2:4f:8c:43:
06:d9:cb:c3:d6:a3:ad:77:a9:a8:4b:b1:ae:9a:00:
1a:61:6a:d4:21:2a:37:b7:58:e7:1b:66:58:00:ef:
f1:fd:0c:56:47:de:af:4b:40:67:6b:71:f4:73:4e:
18:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:CA:0A:AB:B0:22:58:16:98:56:5F:97:3F:21:EB:4A:3C:6E:8F:1C
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/1-MoKq7AiWBaYVl-XPyHrSjxujxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.80.0/22
93.119.105.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:d6:ec:1f:68:16:de:23:41:78:c0:b5:8c:4b:b7:f1:8f:dd:
a8:5a:03:22:15:10:e5:1d:dd:54:23:7a:fe:60:d0:26:61:c2:
22:c4:79:25:e7:73:ff:08:70:d1:8a:66:9e:fb:2e:89:18:55:
2f:d7:f9:30:76:11:29:cc:e3:db:fc:eb:1a:00:27:69:a4:02:
b7:83:5d:22:af:96:9e:b1:d4:f9:19:32:0a:e9:54:91:ff:f5:
84:18:26:46:01:bb:3f:34:b9:30:4c:bc:f8:ef:33:02:36:c1:
6d:1e:c0:45:07:7a:88:8d:5e:5d:a5:37:9b:2a:b9:f3:14:55:
92:f8:85:1b:e8:f8:2c:a9:d5:e7:64:85:94:e7:52:dc:c8:36:
34:29:6a:d2:d2:db:98:e5:e8:44:cd:e7:51:af:1b:d9:51:7a:
9e:e9:1c:0b:ad:cc:d4:61:3b:bf:78:25:89:54:fb:51:2f:4e:
82:25:a3:86:ce:58:f4:2a:d2:ca:53:1d:a3:f9:a2:bb:78:a0:
3f:98:f2:f2:08:7d:85:4b:5b:6d:ad:3c:69:d8:93:16:c6:98:
e1:31:6f:13:95:1e:db:b7:5a:6d:fd:55:9c:8c:6f:3b:f0:2a:
aa:70:43:4d:15:cc:05:6a:8b:f8:3c:8c:c1:56:d5:41:85:cb:
1e:6e:aa:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 16 06:47:43 2023 by rpki-client on console-ams.rpki-client.org