Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/6b-R_WCh0Cb1xelqezjyz22JpwY.roa
File: 6b-R_WCh0Cb1xelqezjyz22JpwY.roa (raw, json)
Hash identifier: m1hPKeJRy0eXFzjF+5vaGnMiG5UYatM4eUYrzcfS3Dc=
Subject key identifier: E9:BF:91:FD:60:A1:D0:26:F5:C5:E9:6A:7B:38:F2:CF:6D:89:A7:06
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018BC0B5BAE33DBB3796377A3DC0E6989668
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/6b-R_WCh0Cb1xelqezjyz22JpwY.roa
Signing time: Sat 11 Nov 2023 23:26:57 +0000
ROA not before: Sat 11 Nov 2023 23:26:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60949
IP address blocks: 89.42.84.0/24 maxlen: 24
89.34.26.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c0:b5:ba:e3:3d:bb:37:96:37:7a:3d:c0:e6:98:96:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Nov 11 23:26:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9bf91fd60a1d026f5c5e96a7b38f2cf6d89a706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:85:c4:89:0d:75:0e:dd:72:26:e9:1e:6d:6f:
27:a6:0d:65:2c:ae:9c:4d:d9:f8:2a:aa:51:4a:3f:
db:02:3a:5c:c7:d5:5e:7a:6a:37:a3:16:0b:3f:1b:
9c:bd:77:5a:f6:03:43:d2:aa:63:a6:52:b7:ae:29:
32:27:32:a1:8e:71:19:a6:75:0d:14:c4:95:31:7f:
1c:cb:1f:fb:63:01:ea:70:4a:01:63:c4:0d:f9:58:
b6:91:8f:17:76:8b:f2:92:5a:d3:20:96:38:36:fa:
b7:45:f7:a7:8b:a8:d6:c1:06:6f:a2:49:40:62:92:
ee:75:6b:5e:ab:29:26:37:01:f3:6c:41:29:f0:a9:
6f:b9:fc:94:22:b8:f1:64:98:56:46:57:25:17:10:
e1:50:c0:25:c9:66:16:84:64:70:f2:cd:5f:3d:74:
c4:7a:f6:0e:d0:52:40:e0:49:90:dd:e7:9a:a0:f2:
69:f1:5a:fd:b9:0c:d3:3f:2d:1b:e7:8f:c5:48:f9:
0a:c5:07:13:aa:40:2e:de:79:c3:7d:bc:6d:df:d0:
e7:f2:51:a8:8f:5d:60:f4:88:1e:8e:b1:3f:09:0f:
1f:93:82:34:dc:f2:85:50:2b:e6:64:76:6b:40:0a:
bc:84:5e:26:80:e1:3c:ce:a2:97:42:a8:54:05:46:
81:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BF:91:FD:60:A1:D0:26:F5:C5:E9:6A:7B:38:F2:CF:6D:89:A7:06
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/6b-R_WCh0Cb1xelqezjyz22JpwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.26.0/24
89.42.84.0/24
Signature Algorithm: sha256WithRSAEncryption
59:bd:dc:d5:d1:32:37:19:57:98:35:7c:c3:e7:01:46:6b:15:
69:90:88:0d:60:5c:b4:c3:a4:9b:58:c5:8f:14:2a:57:a5:99:
82:20:54:46:14:bc:ef:45:7b:81:a2:2a:15:83:f8:74:ae:5b:
8c:f9:e9:27:04:97:57:c8:30:9c:17:6f:fb:6c:70:5c:e2:05:
22:15:7c:99:69:ad:91:e2:88:13:cf:0f:7c:e8:d7:ea:60:ae:
97:52:30:09:de:75:91:6b:68:64:4e:ee:4f:90:36:51:5c:53:
6a:37:d0:97:6e:55:62:f5:d4:21:16:f4:dc:8c:05:44:e8:30:
ed:94:56:d0:85:52:36:a9:2c:20:4e:ae:f1:29:35:db:55:b8:
40:8e:05:91:48:dd:af:18:af:88:40:cb:b5:2c:85:c6:a0:91:
ed:25:a2:12:d5:3a:25:4e:5e:de:58:b2:84:c2:8e:29:24:8b:
64:f9:ff:2b:c2:be:41:b0:9d:80:dd:c9:a4:f0:ac:1d:e6:7b:
0f:8c:6e:f4:b4:1d:16:ec:32:7a:ce:bc:3f:d5:5e:3f:1a:02:
8b:08:95:23:31:28:8c:27:bc:bd:ac:37:22:0d:10:69:bf:d0:
1b:9f:5f:cb:4e:b2:4b:7c:3c:c3:c7:b5:ce:f5:18:ce:d3:34:
52:b0:f0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 28 19:43:27 2023 by rpki-client on console-fra.rpki-client.org