Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/5LGSrLygRTqzFrnyUNYdF3q5efg.roa
File: 5LGSrLygRTqzFrnyUNYdF3q5efg.roa (raw, json)
Hash identifier: TM9DopUZ4/cQ5ZRoLKgWUDyQx4wFTQ2jfBe15UItelw=
Subject key identifier: E4:B1:92:AC:BC:A0:45:3A:B3:16:B9:F2:50:D6:1D:17:7A:B9:79:F8
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01886644CC1B8D61727203F24B3201A0D900
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/5LGSrLygRTqzFrnyUNYdF3q5efg.roa
Signing time: Mon 29 May 2023 06:49:24 +0000
ROA not before: Mon 29 May 2023 06:49:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 89.33.195.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:66:44:cc:1b:8d:61:72:72:03:f2:4b:32:01:a0:d9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: May 29 06:49:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4b192acbca0453ab316b9f250d61d177ab979f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:66:7a:96:2e:28:f8:a5:41:18:cc:7e:d1:ce:
e1:2c:9f:df:50:01:64:14:92:d7:58:4a:79:a7:72:
05:0e:d0:5a:cf:bf:95:55:64:25:00:d5:1d:ce:72:
2f:d6:af:3a:22:d0:68:a9:16:3c:fa:ae:01:71:b5:
7e:42:b3:1b:2b:3e:5f:fa:ac:db:7b:b0:23:a1:c5:
2d:39:e2:f9:4c:f2:63:bd:a6:a3:0d:a0:ad:bd:82:
97:c8:56:c6:09:88:04:f8:91:ed:9c:cd:8b:e7:7d:
8c:97:b2:06:20:69:aa:99:b0:14:99:c0:43:d2:4f:
9a:1f:ef:8a:25:fa:a8:4d:16:b9:41:4f:04:e7:0a:
11:eb:ad:1a:52:6f:8e:0f:41:86:ee:84:cc:78:2e:
f2:8e:c3:bf:07:0e:03:d8:d4:60:1c:95:be:9c:8c:
67:dc:e8:44:83:75:28:23:52:1c:2f:35:cc:21:10:
69:65:7e:cf:36:f7:fc:d5:0d:13:13:5c:44:64:c2:
82:ea:e3:2a:b0:87:e0:ee:1b:62:be:11:39:ec:2e:
38:82:79:be:f8:b3:a4:51:79:e5:ce:8f:5c:26:df:
c0:5e:f3:2a:05:b1:9e:13:61:28:f2:fe:a0:08:8b:
cb:2e:67:ef:39:6c:6a:28:a3:41:fc:9b:aa:0a:9a:
23:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B1:92:AC:BC:A0:45:3A:B3:16:B9:F2:50:D6:1D:17:7A:B9:79:F8
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/5LGSrLygRTqzFrnyUNYdF3q5efg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.195.0/24
Signature Algorithm: sha256WithRSAEncryption
61:07:1f:54:16:28:aa:40:5f:18:60:9c:3d:3a:89:7a:01:94:
4a:a9:43:a8:34:34:17:37:6e:03:e8:6d:df:d3:72:8f:d9:a9:
d5:ed:03:43:c3:72:78:15:9d:56:63:3c:73:0f:c9:e8:63:f9:
f8:42:78:74:72:b1:c2:8d:bd:09:1a:cb:48:96:9a:ae:2b:8f:
48:69:9d:29:89:71:a1:73:aa:bb:17:2e:40:9f:26:28:42:94:
bf:82:a0:a8:01:10:65:6b:41:17:5e:c3:c2:62:1e:4b:e0:78:
f2:f6:3e:be:b6:83:55:33:6a:68:dc:39:1d:cc:f2:a5:b5:cb:
1b:a8:fa:01:4d:4d:c8:c6:bd:96:20:d5:88:7f:57:30:32:74:
18:34:d6:2f:a7:6e:d0:8c:6d:f4:05:42:42:c9:0c:24:9b:ee:
54:cd:d0:ef:77:49:03:b9:82:2b:45:e7:15:19:bd:43:33:3d:
c0:49:84:ef:cc:02:16:50:cb:31:83:09:f4:8d:87:ee:c0:95:
c7:73:ae:a9:f3:76:25:7a:d8:7d:fe:a9:de:bb:c1:a7:af:bd:
5f:57:fb:1e:2c:b0:99:e6:17:48:6a:43:be:1a:18:5f:7d:de:
18:e9:6a:02:a3:09:8d:10:1e:b9:b3:34:17:3a:2a:88:e7:f8:
ae:c2:52:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 23 09:18:14 2023 by rpki-client on console-fra.rpki-client.org