Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/61-chqC7g3-KVQjeG82_Gk8OZVg.roa
File: 61-chqC7g3-KVQjeG82_Gk8OZVg.roa (raw, json)
Hash identifier: 20F1eimCtAlgCYoLqHUNgZw+Y3Kq2muiBNZgag3apPQ=
Subject key identifier: EB:5F:9C:86:A0:BB:83:7F:8A:55:08:DE:1B:CD:BF:1A:4F:0E:65:58
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018C175B7FB31CAC826A1D8F8CE0CBC79A84
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/61-chqC7g3-KVQjeG82_Gk8OZVg.roa
Signing time: Tue 28 Nov 2023 19:15:21 +0000
ROA not before: Tue 28 Nov 2023 19:15:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60949
IP address blocks: 89.42.84.0/24 maxlen: 24
89.42.94.0/24 maxlen: 24
89.47.112.0/24 maxlen: 24
89.34.26.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:17:5b:7f:b3:1c:ac:82:6a:1d:8f:8c:e0:cb:c7:9a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Nov 28 19:15:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb5f9c86a0bb837f8a5508de1bcdbf1a4f0e6558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:33:fd:50:5a:fa:65:ee:d8:b9:2c:32:a6:23:
63:2a:03:d6:8a:47:e7:a5:f8:73:0f:70:a8:c3:87:
e5:52:65:e7:79:6b:17:3d:a4:54:d7:77:81:ec:a4:
99:58:5c:6f:45:7d:a5:b8:9e:19:63:2e:f7:7b:d5:
3a:31:63:a9:78:f6:cd:c1:ea:e4:3d:c1:72:56:a3:
d8:3d:5c:5b:2b:ab:72:0a:38:d2:66:ce:48:0e:d1:
5f:b6:58:f7:f3:28:af:57:6f:a3:70:62:13:2c:a3:
b3:cc:ee:6e:1f:51:ff:99:e7:41:e6:19:e1:2f:17:
87:85:99:17:8b:a5:a3:56:f2:f7:eb:aa:8e:35:74:
a7:22:a0:1a:16:69:4c:58:a7:8e:af:c0:84:b7:97:
72:67:c4:f0:4f:23:a0:1a:4f:cd:82:83:c1:68:4c:
ab:1d:d5:10:9a:27:aa:9f:44:d7:b4:e4:71:03:f0:
1a:91:9b:dc:e4:76:fa:63:81:fa:7d:ea:f2:00:af:
8c:54:ad:fb:c8:d5:31:65:92:a4:09:e3:ff:6d:8f:
ff:94:e0:69:ab:04:ca:a0:f1:cf:a0:33:d1:ff:79:
0a:b0:27:3b:16:90:c8:a1:b5:ec:36:fe:cc:6a:bc:
93:64:83:d4:e2:74:eb:f8:db:1b:a4:5c:84:70:0e:
aa:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:5F:9C:86:A0:BB:83:7F:8A:55:08:DE:1B:CD:BF:1A:4F:0E:65:58
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/61-chqC7g3-KVQjeG82_Gk8OZVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.26.0/24
89.42.84.0/24
89.42.94.0/24
89.47.112.0/24
Signature Algorithm: sha256WithRSAEncryption
28:bb:b4:17:cf:6b:56:f4:5e:16:57:b2:c1:39:55:31:25:4f:
81:9f:04:b0:b9:d4:1e:7a:83:5c:1b:c4:b1:08:92:03:a0:1c:
5d:cd:d7:e3:e9:fb:86:31:97:09:8e:24:f1:77:42:cb:23:33:
4a:40:dc:04:5e:f5:54:db:be:ec:fb:c2:73:e2:92:f0:7d:62:
53:35:4f:0c:33:61:30:3a:47:e8:52:5d:a7:85:c8:d7:5e:8d:
8a:a3:07:6d:45:04:a0:30:90:ee:ac:e3:5d:71:4e:f7:31:91:
89:30:52:05:1f:00:11:62:6e:20:1b:9e:0f:f6:08:9e:7c:75:
62:80:19:ef:25:f1:96:3d:5d:86:e0:f0:cf:a5:76:dd:0c:08:
7e:2f:6f:7c:82:ef:d7:a3:77:1f:18:ba:77:12:6a:05:90:60:
8b:d6:7f:20:47:4b:03:80:b4:93:96:ec:b4:a3:4b:1f:40:81:
9f:15:76:e7:4c:04:32:36:61:21:ae:53:95:05:ab:9c:da:6a:
ea:f4:46:6a:78:5c:17:a6:24:3c:cd:48:24:46:52:6e:34:7c:
19:5b:76:e4:9b:c2:40:f2:57:bc:54:1e:63:94:29:02:5d:da:
e8:7e:0e:ca:b0:51:db:0f:da:a8:8a:c1:9b:36:31:66:eb:4f:
51:b0:10:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:54:12 2024 by rpki-client on console-ams.rpki-client.org