Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/2D554fQtM9X9nu6Nj52B1Glf08U.roa
File: 2D554fQtM9X9nu6Nj52B1Glf08U.roa (raw, json)
Hash identifier: sufpqJPF6Zmmg8Hhx9PiFh556xLdzlwMIiGXrB/4BKY=
Subject key identifier: D8:3E:79:E1:F4:2D:33:D5:FD:9E:EE:8D:8F:9D:81:D4:69:5F:D3:C5
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018CEEFE6E7594931D13CAF606B3AAA4026D
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/2D554fQtM9X9nu6Nj52B1Glf08U.roa
Signing time: Tue 09 Jan 2024 16:11:40 +0000
ROA not before: Tue 09 Jan 2024 16:11:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 23470
IP address blocks: 89.34.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 10 Feb 2024 12:28:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ee:fe:6e:75:94:93:1d:13:ca:f6:06:b3:aa:a4:02:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 9 16:11:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d83e79e1f42d33d5fd9eee8d8f9d81d4695fd3c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5e:1e:93:73:33:99:72:1a:49:89:6a:9f:79:
dc:a5:85:1f:00:ca:66:cd:0f:54:02:60:a1:50:98:
80:fd:51:c6:ff:22:bd:d3:c7:7e:33:e6:45:d7:64:
12:4e:38:fc:30:bd:5c:ac:a4:43:c7:d1:74:a8:d0:
8c:0a:fe:37:31:b4:2d:74:3b:13:f1:0f:ee:86:43:
27:cf:d4:e3:d2:2d:71:a9:bc:53:2a:81:1c:76:ff:
06:1f:11:43:00:23:3d:dd:11:0a:d7:bc:68:d7:5c:
36:77:a4:ad:19:84:25:99:32:b1:64:cc:99:e7:f9:
ec:dd:0f:a9:d1:d5:1e:0c:dc:cd:ee:41:94:aa:71:
8e:05:4c:76:6b:60:ec:dd:97:69:ba:78:90:fe:c9:
74:7a:eb:fc:4c:a2:7f:df:26:bd:b0:47:2e:cf:b8:
c4:ba:92:2a:39:24:3d:dc:8c:56:55:41:b3:55:a3:
bb:10:97:fc:55:39:16:3b:2f:3e:e6:cc:66:38:1e:
49:f3:6f:1c:0c:d8:f7:a9:06:0a:95:ec:eb:85:da:
1f:9f:b0:18:dc:6d:d5:be:36:63:55:4f:b0:f7:7d:
a5:88:7c:27:62:41:81:35:64:70:a6:77:e9:0a:d9:
ad:f7:c9:90:8a:6e:bf:c0:67:c6:e0:65:57:04:fa:
4a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:3E:79:E1:F4:2D:33:D5:FD:9E:EE:8D:8F:9D:81:D4:69:5F:D3:C5
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/2D554fQtM9X9nu6Nj52B1Glf08U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.230.0/24
Signature Algorithm: sha256WithRSAEncryption
68:f5:f0:01:29:c5:88:61:72:03:a4:83:2d:8b:a7:3f:ac:de:
08:93:eb:da:c3:61:d7:67:5a:4d:0d:cf:95:e7:bc:94:90:ed:
8c:dd:fb:22:fe:13:2a:a4:b6:ce:fe:a3:53:09:0e:5d:6d:5a:
d2:1f:bc:99:73:39:bb:7b:0b:85:3d:cd:7f:0a:46:82:60:29:
11:df:9c:7c:fc:68:2c:bc:ab:15:19:28:a4:ef:13:85:7f:5d:
06:90:f6:d2:31:9d:0b:32:05:76:b8:b4:cf:9d:1b:c8:a0:99:
81:e6:d8:1e:fb:37:61:5d:12:ad:ad:7b:a6:4e:9c:02:ee:01:
b0:f7:c9:47:df:9a:a8:ef:d6:b7:55:b3:b2:b5:65:57:59:13:
e8:69:19:70:56:07:b9:8b:50:98:93:f9:21:f6:14:a9:c1:e7:
d2:1a:81:a0:59:d6:98:0e:2b:5d:6a:be:c3:b5:22:87:e6:aa:
5a:dd:16:4c:5e:5d:61:b6:3c:e5:22:e8:ec:72:44:04:0e:57:
8b:bc:fe:82:7d:92:06:76:c3:7d:34:4c:a5:bc:84:e7:6f:e4:
ad:69:0b:91:36:ea:c0:ed:83:31:0f:9c:72:55:a6:03:5c:3e:
da:c4:54:b3:a0:b7:f1:f5:0c:7d:be:d8:71:9b:58:c5:45:86:
1a:85:31:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 10 13:55:19 2024 by rpki-client on console-ams.rpki-client.org