Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/6OxiU6LtYJlNrx_iWR9zMBz3D5k.roa
File: 6OxiU6LtYJlNrx_iWR9zMBz3D5k.roa (raw, json)
Hash identifier: FgdNszyq5C4NthEdlG+I3N8jOfneRQ54f3WnAjg/C0w=
Subject key identifier: E8:EC:62:53:A2:ED:60:99:4D:AF:1F:E2:59:1F:73:30:1C:F7:0F:99
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018E5A90D5B24EA733C00A12A24AA8661159
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/6OxiU6LtYJlNrx_iWR9zMBz3D5k.roa
Signing time: Wed 20 Mar 2024 06:33:45 +0000
ROA not before: Wed 20 Mar 2024 06:33:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
89.46.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Mar 2024 05:18:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:5a:90:d5:b2:4e:a7:33:c0:0a:12:a2:4a:a8:66:11:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Mar 20 06:33:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8ec6253a2ed60994daf1fe2591f73301cf70f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5e:9e:9b:d0:9d:21:41:f9:de:e8:3d:5f:e5:
10:f1:c8:8c:5a:37:ff:3d:22:f5:10:d1:29:5b:4f:
45:3a:97:7b:6c:fe:f2:f1:ef:8b:35:96:e9:dc:52:
1c:c2:e9:83:97:d2:16:1a:04:04:61:c3:3d:e2:1a:
f9:49:d7:d4:66:47:1e:a3:9b:40:1b:fa:51:c9:5a:
8c:5f:28:7f:4a:a1:95:0a:37:87:21:3b:eb:f1:bc:
1b:92:bb:06:13:8f:32:d2:e7:dd:fb:38:4b:db:e3:
43:7f:d3:c1:12:8e:a3:df:83:23:ac:be:77:79:74:
c4:94:00:47:1e:77:08:e8:0c:4c:20:2b:9c:5a:f3:
24:33:fd:17:5b:82:ab:23:d3:5f:df:38:d8:03:a2:
93:b7:ce:89:33:57:49:19:1c:ba:99:9f:92:8a:9b:
19:58:58:e8:23:12:f5:29:ea:e2:37:d3:b3:a9:c1:
7e:82:72:87:15:c6:1e:2f:40:ab:82:0a:10:10:a0:
b9:f6:0d:2f:e6:ea:5d:1b:22:fb:48:29:06:44:60:
47:bb:31:1a:d8:d1:56:91:c5:67:86:44:15:9c:ce:
f8:26:3a:0f:d1:1e:c7:5f:4b:c3:55:31:71:f2:67:
de:a3:0c:64:4f:5e:09:11:5a:c5:c7:93:2f:6c:6b:
38:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:EC:62:53:A2:ED:60:99:4D:AF:1F:E2:59:1F:73:30:1C:F7:0F:99
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/6OxiU6LtYJlNrx_iWR9zMBz3D5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.81.0-89.42.83.255
89.46.3.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:01:8a:de:08:42:41:6e:5d:99:d6:48:53:f8:75:75:8c:84:
b9:13:d6:5a:50:84:29:e3:66:3e:62:5f:e8:9d:89:bf:3d:96:
d2:d6:1c:58:e1:cd:3f:9b:e9:01:78:ef:4e:1c:37:ff:ef:7b:
2f:7f:85:1d:1f:88:72:52:d6:64:91:cb:30:56:0a:26:f0:a2:
2f:dc:df:6b:27:3a:36:ce:ee:81:26:f3:c0:97:3a:fe:d0:e9:
42:4d:d8:9a:38:73:1d:b5:80:9a:8d:e7:03:fa:2c:d4:6e:31:
53:d1:ab:df:45:50:b9:ab:c7:b3:02:4c:8e:66:bb:6e:1f:b1:
2c:20:b2:ba:8e:2a:ee:ee:94:ba:92:99:4d:30:11:2c:db:b2:
61:4b:b8:80:a4:e7:25:b6:ff:98:9b:99:35:7f:9e:17:3b:0e:
31:07:a5:f9:35:f4:f4:ea:29:17:b7:c5:4c:86:f6:3c:c7:cc:
36:b7:5a:72:14:7d:a9:4d:17:ea:ca:ca:eb:75:93:67:74:cc:
10:d5:7c:52:e8:60:e7:20:f4:7e:e8:c3:80:74:cb:2b:0d:eb:
c8:73:a2:c9:73:fe:c0:6c:e0:c5:d0:06:54:3d:b3:69:99:3d:
4c:44:ad:a9:90:7c:d6:20:c7:01:f3:1d:96:53:72:57:86:f3:
5d:de:13:b0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:49 2024 by rpki-client on console-ams.rpki-client.org