Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/1ozu5gvOtFnc451waquRnnAxx2s.roa
File: 1ozu5gvOtFnc451waquRnnAxx2s.roa (raw, json)
Hash identifier: Q6iVB7mAXoTEVXil6Aj/I9PmNiaAhddhUtmv1uG0KPU=
Subject key identifier: D6:8C:EE:E6:0B:CE:B4:59:DC:E3:9D:70:6A:AB:91:9E:70:31:C7:6B
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018DCFA36684404CD116402875D76C1B2CFF
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/1ozu5gvOtFnc451waquRnnAxx2s.roa
Signing time: Thu 22 Feb 2024 07:06:48 +0000
ROA not before: Thu 22 Feb 2024 07:06:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 89.40.83.0/24 maxlen: 24
89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
89.46.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 06:46:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:cf:a3:66:84:40:4c:d1:16:40:28:75:d7:6c:1b:2c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Feb 22 07:06:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d68ceee60bceb459dce39d706aab919e7031c76b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0f:45:17:15:02:d3:2e:83:a4:89:c4:5c:74:
30:54:79:85:07:23:58:ec:4d:b4:f7:6d:0f:d3:6a:
c4:bf:ce:e5:ea:93:ef:ad:0c:79:77:5a:fe:63:ac:
08:15:ee:37:35:65:8b:5e:ef:38:59:fc:6d:33:22:
41:a0:4b:e1:e6:c5:c9:8f:c1:9c:49:1c:66:49:0a:
01:98:43:6b:75:11:c2:81:2f:38:3d:24:db:8a:c6:
97:a1:58:e3:a0:78:a6:db:21:b1:39:bc:b2:7d:9f:
5a:a3:a7:7c:0b:ae:6c:22:09:39:77:9f:30:dd:a0:
2f:c2:57:40:dd:0f:2f:1c:2c:89:32:14:6b:3c:05:
b1:bf:2f:92:66:0f:04:7d:3a:48:3f:31:8a:52:0d:
7a:3f:2b:2c:2e:94:f4:b7:46:e1:61:d1:d0:68:f4:
a8:e2:45:68:fb:87:3a:2b:8b:46:a3:84:35:ed:ae:
32:c1:aa:dd:10:7b:90:7c:39:da:24:02:87:01:25:
a1:08:a8:e1:62:25:fb:40:41:98:ff:d9:d5:15:4c:
c9:28:fb:6a:ae:59:16:2f:d5:02:af:e9:6f:da:67:
ff:9b:95:b4:17:2c:eb:2d:21:df:71:63:5e:aa:7f:
fd:a3:22:ff:70:60:19:78:e6:17:f3:db:ae:3b:99:
9c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:8C:EE:E6:0B:CE:B4:59:DC:E3:9D:70:6A:AB:91:9E:70:31:C7:6B
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/1ozu5gvOtFnc451waquRnnAxx2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.83.0/24
89.42.81.0-89.42.83.255
89.46.3.0/24
Signature Algorithm: sha256WithRSAEncryption
03:4b:21:1f:d0:db:53:eb:a8:33:0a:12:ac:c4:6d:d8:a0:20:
62:0d:06:65:9d:08:52:d2:16:51:dd:da:0f:06:d6:16:a2:21:
e4:e4:66:ce:08:32:4b:e5:0b:57:d3:51:70:33:90:4b:9f:df:
2b:39:16:08:41:ca:d2:fb:68:19:37:27:2f:19:e2:01:0c:6f:
fa:18:8f:52:f5:66:5a:6e:1d:13:51:dc:2d:44:25:f2:3a:55:
b3:02:b2:5d:78:8c:f0:09:91:df:e6:7a:1c:8b:6b:74:ac:a1:
bb:73:8c:27:ed:4b:1a:2b:a1:13:29:0f:8b:7b:2c:2a:7a:44:
74:c7:0d:c9:58:29:93:a7:30:59:df:4c:e7:14:06:1b:dc:05:
3c:bf:04:86:5a:0d:51:60:0a:33:bc:35:76:54:10:8c:8f:e2:
94:73:d5:e5:f5:b6:f2:6b:22:4b:17:9f:29:6d:e6:11:c2:40:
57:9b:47:97:75:e5:38:d5:cd:08:29:46:3f:7e:bd:d7:87:a4:
d7:63:d4:54:d3:28:e9:a2:b1:ac:a1:9b:70:55:01:bc:e1:e1:
79:af:4d:ca:e9:e7:fd:ab:e9:b4:f0:3e:43:36:bc:29:be:e1:
b8:fc:cd:6e:24:f7:2a:6f:7b:9a:86:a3:61:c5:e9:7a:70:bb:
1c:36:8c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:18 2024 by rpki-client on console-fra.rpki-client.org