Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/6j8e3kiYWoDJW5SYUQ7_MH9OSE8.roa
File: 6j8e3kiYWoDJW5SYUQ7_MH9OSE8.roa (raw, json)
Hash identifier: 6k7oBGvMVQjS8cPnKpWfrJGnt+bRwNwgZ/ZqqQ4sKFk=
Subject key identifier: EA:3F:1E:DE:48:98:5A:80:C9:5B:94:98:51:0E:FF:30:7F:4E:48:4F
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018A4B6CEDFAB3C28E71BBAF0AF63CFD992E
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/6j8e3kiYWoDJW5SYUQ7_MH9OSE8.roa
Signing time: Thu 31 Aug 2023 11:49:04 +0000
ROA not before: Thu 31 Aug 2023 11:49:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.42.82.0/23 maxlen: 23
89.42.80.0/23 maxlen: 23
89.37.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 31 Aug 2023 18:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4b:6c:ed:fa:b3:c2:8e:71:bb:af:0a:f6:3c:fd:99:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Aug 31 11:49:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea3f1ede48985a80c95b9498510eff307f4e484f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ce:ef:16:68:cc:f8:14:94:81:f6:3e:23:ba:
7d:92:c1:db:f5:85:5f:c8:3f:d9:d8:dc:ed:c0:af:
f9:7b:09:ed:89:58:bf:a2:ab:9f:7b:17:9e:9f:51:
5a:fe:6c:de:c0:74:69:62:92:c7:c4:4d:57:07:5d:
69:98:a2:20:a5:2f:ea:14:bc:21:35:cb:66:a6:48:
25:b0:74:45:93:e1:2e:7a:a4:b2:07:4c:af:d4:14:
f4:93:8b:4b:30:39:c8:f4:a2:2d:2c:77:32:a7:77:
e8:11:b0:a5:4d:ff:e0:11:65:a0:e1:59:77:30:6a:
c8:ff:96:fb:68:42:0e:b7:51:37:6c:0c:23:e2:b6:
e8:fb:d3:7d:2a:96:0e:e1:82:32:e4:c0:f7:8e:1f:
55:06:4c:95:33:bc:0c:e4:9a:dd:f4:90:db:e8:2a:
2f:51:79:9a:63:b8:89:a9:f4:a6:78:51:61:f5:f3:
4a:34:a5:e3:e3:ac:1b:e0:04:09:b2:b7:9f:28:c6:
bb:b9:78:3a:ff:db:6e:5c:e3:cb:e9:35:cb:d1:9c:
8f:ce:50:69:f1:ed:f1:8d:09:90:ed:59:91:bc:b4:
5a:7a:09:94:a7:36:51:5f:f5:21:30:15:6e:fc:de:
3d:42:92:47:2b:44:cf:56:63:55:d5:93:3a:04:f1:
28:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:3F:1E:DE:48:98:5A:80:C9:5B:94:98:51:0E:FF:30:7F:4E:48:4F
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/6j8e3kiYWoDJW5SYUQ7_MH9OSE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.196.0/24
89.42.80.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:36:cc:4a:2a:01:be:36:2f:4b:7f:68:70:d4:87:54:8f:f8:
ec:d5:ff:41:aa:61:37:35:68:92:d6:15:8a:7a:ca:6b:55:28:
48:d4:54:c9:1c:33:11:1b:32:33:d9:86:35:ee:e7:6e:f6:be:
e4:ef:a5:54:24:91:ac:33:60:ed:26:6e:eb:4f:d7:08:bf:85:
10:4c:b4:47:d7:3f:3d:6c:d3:5c:6f:02:96:9c:7a:95:f0:19:
48:83:b7:80:bd:e6:5e:43:16:ae:67:b2:3b:87:7b:e9:d1:40:
4a:24:02:3e:e7:c3:1f:8e:f3:0b:3a:8f:b5:91:fe:b6:e3:3a:
28:4a:b5:12:6f:35:ca:eb:26:b6:55:6d:49:54:e9:ef:f6:fc:
67:35:55:06:67:f7:af:ff:02:40:dc:47:98:b9:ee:76:bf:ad:
c0:10:8d:db:f5:71:df:27:45:28:f0:d8:70:46:a4:67:9a:db:
15:80:10:e5:5b:0a:f3:a9:25:d5:68:d6:ac:56:87:db:21:99:
80:0c:eb:c5:ba:d9:27:ce:8d:64:17:68:7b:06:df:db:73:78:
69:59:df:9c:5e:f7:c8:bd:74:0e:f5:7f:1e:a6:02:71:f7:dc:
6a:be:4e:65:36:d7:4e:aa:26:44:9a:1b:b8:76:30:13:e0:eb:
f6:6c:94:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:49 2024 by rpki-client on console-ams.rpki-client.org