Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/5wsNKWJ2l3yQxCtacJ5Gcfs8Y8Y.roa
File: 5wsNKWJ2l3yQxCtacJ5Gcfs8Y8Y.roa (raw, json)
Hash identifier: cOI9/1d8Iysfx8YfJGidRuoXEorsGe/91CIvxDrqSKo=
Subject key identifier: E7:0B:0D:29:62:76:97:7C:90:C4:2B:5A:70:9E:46:71:FB:3C:63:C6
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018DA8697D682B2375042415E66E584BC06F
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/5wsNKWJ2l3yQxCtacJ5Gcfs8Y8Y.roa
Signing time: Wed 14 Feb 2024 16:18:22 +0000
ROA not before: Wed 14 Feb 2024 16:18:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
89.46.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Feb 2024 07:06:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a8:69:7d:68:2b:23:75:04:24:15:e6:6e:58:4b:c0:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Feb 14 16:18:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e70b0d296276977c90c42b5a709e4671fb3c63c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9d:05:b5:3b:2a:90:bd:8b:0e:33:ab:7a:b4:
91:35:67:53:47:25:51:64:5b:fc:45:34:61:bf:57:
b1:fb:90:3c:3d:0d:3a:be:37:ab:ef:2f:e8:46:0c:
48:e5:82:10:ce:3a:f9:ce:21:5f:bf:88:28:56:3a:
ab:49:cd:48:cb:10:77:02:0e:74:a9:d2:44:ed:b1:
68:4e:a3:12:4b:12:cf:c9:d8:03:fb:94:d8:d0:23:
6d:f4:f8:3b:63:09:42:fb:eb:d7:10:7a:42:81:ce:
7b:93:d8:4e:18:da:9c:af:3a:93:6b:42:ad:8b:03:
ae:d9:54:9b:9f:5e:e0:90:48:cb:e6:9e:7e:93:84:
74:83:7c:bd:9e:cd:65:f4:3f:76:3a:06:cc:c2:e9:
a7:3f:d0:e4:a7:43:05:09:09:00:c7:39:ed:75:57:
84:10:f2:fc:80:9a:98:bf:7b:6a:90:2f:68:5a:8e:
51:a4:82:58:12:77:a3:9b:c6:e3:05:b1:46:47:14:
dc:db:e8:bf:42:22:be:0a:da:58:a9:d1:5d:df:87:
47:99:f6:77:4f:0e:01:a5:47:0f:e3:cc:23:fe:69:
0b:09:56:c1:8c:a0:ca:83:8f:db:ec:5d:d0:76:04:
e5:84:59:ac:3d:65:48:fc:8d:9a:c9:23:51:a8:cd:
ab:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:0B:0D:29:62:76:97:7C:90:C4:2B:5A:70:9E:46:71:FB:3C:63:C6
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/5wsNKWJ2l3yQxCtacJ5Gcfs8Y8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.81.0-89.42.83.255
89.46.3.0/24
Signature Algorithm: sha256WithRSAEncryption
16:ae:95:8e:a6:a2:42:6c:b0:72:ba:e8:ce:fb:8b:b3:53:b2:
8c:41:a1:57:d2:8f:e7:cb:94:ea:ac:6a:05:df:bb:65:a3:f8:
09:fd:16:a7:eb:c1:8e:94:1c:f9:95:1b:81:22:4e:1d:15:d6:
7b:0b:15:6c:14:ec:d3:9b:9b:29:7c:fd:05:6f:b3:a4:12:93:
5b:48:da:04:f6:09:be:71:3d:8f:c7:fc:c8:ae:f3:a3:2b:2c:
d6:e7:cc:8f:d7:47:48:7a:33:0c:9b:38:a7:35:1f:38:d5:22:
21:25:af:89:6e:6f:2b:52:6d:40:1b:5f:84:14:53:6b:a4:52:
4b:87:8f:50:df:4f:6f:58:17:bd:f7:42:38:89:22:0b:1e:4e:
15:38:f8:19:ca:84:24:2d:17:fb:44:ef:9b:f8:9e:18:c3:ed:
a0:bd:26:44:c1:f6:82:3c:3b:6b:0e:32:0b:fe:a0:fc:55:15:
d6:78:eb:c7:a6:9c:03:2c:1b:20:40:69:e8:d2:a8:d7:81:90:
6c:62:62:0a:fa:1e:ae:ca:2a:49:74:46:67:da:5f:4c:ae:98:
90:8b:b8:c1:db:9e:c5:04:24:1a:57:b6:8a:f3:db:3a:db:a6:
4e:12:24:bc:93:88:5a:78:75:60:98:40:9a:8c:2a:7e:0e:25:
e6:1b:0a:d3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:18 2024 by rpki-client on console-fra.rpki-client.org