Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/5iPzPQ-zsFjggICs5RX0EwRRrJM.roa
File: 5iPzPQ-zsFjggICs5RX0EwRRrJM.roa (raw, json)
Hash identifier: KBNNoIftIFOvl6TfpuE86693TZtjaCHthDkvnyXx2Xc=
Subject key identifier: E6:23:F3:3D:0F:B3:B0:58:E0:80:80:AC:E5:15:F4:13:04:51:AC:93
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0189F7BC1E180C8ABEC61D97DDA9CC15F8DC
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/5iPzPQ-zsFjggICs5RX0EwRRrJM.roa
Signing time: Tue 15 Aug 2023 05:47:28 +0000
ROA not before: Tue 15 Aug 2023 05:47:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.42.81.0/24 maxlen: 24
89.42.82.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
89.42.83.0/24 maxlen: 24
89.42.80.0/24 maxlen: 24
89.42.80.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f7:bc:1e:18:0c:8a:be:c6:1d:97:dd:a9:cc:15:f8:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Aug 15 05:47:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e623f33d0fb3b058e08080ace515f4130451ac93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d9:c8:bf:0f:9e:96:09:9d:35:bc:aa:a6:64:
44:78:11:30:20:66:92:c1:f5:f5:aa:6e:5b:f1:c3:
c5:92:dd:11:fa:7e:95:3a:d6:62:e7:24:db:b4:18:
44:33:da:c4:c2:51:48:c9:5a:7b:a4:44:5d:ec:92:
8c:07:38:2a:41:81:85:e3:33:0a:2f:49:b2:f0:6e:
ad:37:52:24:da:6a:75:99:54:55:77:cb:6d:b2:5c:
67:86:e5:80:d2:f7:6a:90:07:43:14:ca:7f:26:f9:
34:32:ee:9d:1f:0f:05:c4:54:39:3a:e2:61:c7:f1:
12:e8:5c:37:72:00:b7:26:e2:ad:c1:75:6b:3e:3f:
1e:2d:7f:0d:ea:b7:18:69:ec:73:bc:de:37:5b:b6:
38:2f:af:22:2c:9d:c6:1a:e9:36:c9:f4:74:a5:49:
a0:42:5f:ef:b1:da:9a:03:d3:48:18:6d:f6:03:e1:
a5:2c:28:fa:68:df:e9:73:a3:15:2b:72:d0:64:43:
db:ae:d3:04:ef:48:be:1c:d4:93:70:e1:3a:40:d6:
a4:ea:76:11:ac:c3:5b:6f:3e:85:d8:ec:0b:f6:ac:
cb:bf:a9:58:86:25:1f:c8:cf:e8:b0:8b:5b:e7:31:
f8:25:b5:d6:85:b2:ea:db:62:d5:61:bf:50:39:63:
47:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:23:F3:3D:0F:B3:B0:58:E0:80:80:AC:E5:15:F4:13:04:51:AC:93
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/5iPzPQ-zsFjggICs5RX0EwRRrJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.80.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:74:72:ed:d4:36:33:16:ab:06:0b:d4:fc:bd:07:3c:53:ec:
9f:9f:ef:34:ce:db:64:1c:5b:e2:a7:95:0c:34:f7:ab:ab:1f:
15:cb:02:ce:ed:92:0f:c8:1f:3e:ba:3f:2a:d2:68:b7:07:c9:
ad:06:4c:f9:83:1e:c9:73:8f:33:c5:c4:7a:66:17:65:54:3a:
8f:8c:f7:20:56:2a:1f:d7:e8:b2:6b:46:94:2c:b3:61:82:8a:
1c:18:10:e4:4d:49:d3:71:26:b5:79:14:de:13:c5:bc:85:06:
cd:c9:58:d7:2e:50:28:6c:7c:ba:ca:e2:fa:f5:43:84:48:d7:
47:8d:a1:d4:68:c5:7c:93:23:60:aa:c0:fd:e5:66:50:a5:ae:
d0:af:d2:14:51:9a:5d:c3:16:09:cf:b5:a7:dc:96:a8:be:51:
9a:28:d2:83:92:66:53:ea:99:b9:c9:56:1f:a6:dd:1c:f6:4c:
6c:84:31:ee:92:cd:74:5e:bf:c8:a5:71:78:e3:33:42:b8:95:
db:2e:42:2a:ba:e1:92:c8:81:d4:ae:bc:82:16:a0:b8:a6:42:
03:9d:b1:e5:9f:67:3a:c2:ea:c9:48:20:88:75:ce:37:ac:7b:
3a:90:66:28:32:f0:0e:db:84:b0:aa:9f:6e:c7:21:39:8d:ab:
22:10:3d:a4
-----BEGIN CERTIFICATE-----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Generated at Tue Aug 15 18:42:56 2023 by rpki-client on console-ams.rpki-client.org