Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/5gXTcfCnqX-mof3TGOKUeTr17TM.roa
File: 5gXTcfCnqX-mof3TGOKUeTr17TM.roa (raw, json)
Hash identifier: BC8dTogukcdQcHHVA2AE3M9fRBsxdl0uDgFs15+yCUs=
Subject key identifier: E6:05:D3:71:F0:A7:A9:7F:A6:A1:FD:D3:18:E2:94:79:3A:F5:ED:33
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01856ECB779976BBD1DF4BDAEC321502BC95
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/5gXTcfCnqX-mof3TGOKUeTr17TM.roa
Signing time: Sun 01 Jan 2023 19:25:06 +0000
ROA not before: Sun 01 Jan 2023 19:25:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41763
IP address blocks: 89.42.192.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:77:99:76:bb:d1:df:4b:da:ec:32:15:02:bc:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 19:25:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e605d371f0a7a97fa6a1fdd318e294793af5ed33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6c:08:82:80:16:7d:4c:d1:77:56:38:c5:e8:
38:cd:05:6e:f7:93:eb:28:29:5d:bb:b7:7b:63:68:
10:4b:75:93:26:94:00:20:a9:7e:95:0e:65:3d:af:
a4:b0:26:55:b6:4c:00:65:88:9c:cf:16:cd:c3:2d:
72:9d:02:9f:2e:69:e6:4a:d5:6e:27:ce:3a:5a:96:
e5:d4:e3:85:dc:5d:5f:7e:eb:dc:5b:63:f6:d0:af:
b9:31:be:8a:34:da:57:53:da:ac:65:53:d0:42:a7:
d4:6d:3c:28:7b:06:50:4c:0a:61:d6:f9:c7:64:a9:
ec:2c:0d:e7:d0:6b:81:f0:ff:4c:84:cd:0a:d5:d2:
e9:70:10:6d:d5:8c:d5:7d:34:97:94:e3:22:52:d1:
93:a0:d0:a0:93:f7:bf:a9:72:10:2a:e6:5c:cd:8d:
53:00:22:d2:30:e9:b6:42:97:22:88:ef:00:5e:d1:
b1:65:05:2c:4b:52:f7:e6:79:89:6a:da:fe:c7:76:
f1:f4:46:1d:91:6f:53:40:77:cf:ae:55:41:a6:d8:
f7:ae:ee:4b:70:b9:bb:f1:4f:a6:ed:ca:0c:ee:00:
8f:f8:22:56:84:dc:d4:44:63:d4:2f:9a:e4:fc:cf:
4b:cd:c1:c1:8f:dc:85:0e:b0:69:46:08:b9:95:d4:
8f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:05:D3:71:F0:A7:A9:7F:A6:A1:FD:D3:18:E2:94:79:3A:F5:ED:33
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/5gXTcfCnqX-mof3TGOKUeTr17TM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.192.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:85:e8:ee:73:d5:1f:ce:c9:e0:75:8a:3a:15:18:3b:92:75:
3f:64:92:5d:0b:c9:df:97:14:0a:7d:2d:ae:a0:90:6c:aa:d5:
65:95:f8:79:84:7d:9a:68:f0:11:7d:84:3b:84:05:a8:fa:a6:
bd:fa:b2:ea:62:61:d7:f4:d2:ba:05:76:62:18:8a:02:b8:de:
23:aa:ce:1a:c1:c5:fb:18:3f:ba:9f:37:34:ad:5c:77:f4:67:
db:6a:ab:ce:35:5d:e1:d9:2c:42:38:5a:81:6a:6c:75:67:11:
33:68:b3:44:71:6a:d3:bc:45:b2:e4:4f:9b:2d:79:c2:9f:a2:
d9:42:20:3e:04:29:b7:99:8c:88:32:9f:ad:36:e1:e4:8f:bd:
af:f4:11:18:9e:81:c5:90:22:b8:9d:24:d0:3c:6a:75:5e:a6:
09:2c:98:36:66:6f:e7:e7:1b:07:ae:b2:51:e8:25:61:1f:a6:
98:0a:9f:e7:62:93:e5:fc:89:72:f3:91:52:3d:ae:57:f6:dd:
ed:79:ad:02:5f:11:94:c4:1a:dd:a3:da:84:8c:e5:9a:8f:6d:
cf:f5:95:2a:a2:51:8f:cc:2e:0e:9c:84:f5:c7:f3:c5:0f:b5:
7c:25:14:cb:8d:de:c1:a8:55:41:a1:cb:18:01:c7:6f:d0:d1:
cb:30:09:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:36 2024 by rpki-client on console-fra.rpki-client.org