Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8c4Rmf-O7jXwhuYL8pTJM1qYz5w.roa
File: 8c4Rmf-O7jXwhuYL8pTJM1qYz5w.roa (raw, json)
Hash identifier: Tos85DB5aVat7irEOgEyZ+Bjmi4eMGdTr0UAkgTo1+M=
Subject key identifier: F1:CE:11:99:FF:8E:EE:35:F0:86:E6:0B:F2:94:C9:33:5A:98:CF:9C
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018C7B9BD2768B4A5F513FA3CFAC6079889D
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8c4Rmf-O7jXwhuYL8pTJM1qYz5w.roa
Signing time: Mon 18 Dec 2023 06:27:38 +0000
ROA not before: Mon 18 Dec 2023 06:27:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200636
IP address blocks: 89.42.80.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7b:9b:d2:76:8b:4a:5f:51:3f:a3:cf:ac:60:79:88:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Dec 18 06:27:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1ce1199ff8eee35f086e60bf294c9335a98cf9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:39:43:b2:4b:59:29:57:ce:47:9d:09:81:52:
c4:99:50:a8:7e:d4:c0:31:12:b4:29:16:e5:f8:de:
99:45:ae:ac:e4:e8:86:ce:43:1f:e1:ad:9a:e7:e8:
9e:e4:07:90:8f:65:e5:66:f3:aa:bc:c9:e9:b4:f6:
6f:2c:29:ed:2d:a7:e5:f4:f7:93:49:33:5e:44:33:
be:99:93:a4:f8:f7:b1:4d:23:38:c2:e7:da:d0:84:
a2:8e:51:c0:b6:0b:5b:76:4f:2b:13:ab:0a:7d:5a:
87:26:ac:7c:08:95:2d:15:42:5a:53:bd:14:96:ce:
6f:d7:a4:ca:05:d1:dc:eb:eb:18:43:27:5b:74:98:
16:fc:70:13:ec:32:0b:1f:02:7d:e4:95:d6:e1:9d:
3b:1a:45:01:82:7f:19:34:47:d9:9a:6a:ff:3f:53:
2b:c2:5f:9b:5b:4f:7d:df:46:04:75:ad:f8:00:9f:
5c:2c:e5:2e:ba:20:39:c4:b4:87:97:6b:27:53:2d:
18:58:75:5c:d5:d4:91:4e:ab:93:b4:54:72:6d:ce:
0e:eb:45:80:93:29:3c:8c:c3:da:2d:57:37:a5:bb:
db:87:fd:a0:fa:5a:4c:ce:d4:5a:78:aa:e7:eb:56:
d4:a8:47:53:a9:19:9c:79:0c:56:f6:93:52:d9:a9:
f6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:CE:11:99:FF:8E:EE:35:F0:86:E6:0B:F2:94:C9:33:5A:98:CF:9C
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8c4Rmf-O7jXwhuYL8pTJM1qYz5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.80.0/24
Signature Algorithm: sha256WithRSAEncryption
39:30:1c:53:ec:da:58:02:97:5f:7b:f8:ac:32:e3:9b:89:f7:
81:1d:e7:f6:63:3b:28:6b:d7:d1:f6:2c:aa:a6:13:23:36:15:
4b:5d:c6:f4:65:b4:99:da:b5:4c:0d:87:40:26:97:24:94:07:
e0:ee:65:70:ef:e8:b7:d6:06:83:b4:6a:c7:8d:40:68:dc:a9:
59:d6:ad:d7:2f:f1:25:fe:b1:dd:c2:24:57:09:42:06:bf:f5:
23:32:90:c6:64:3e:7d:f5:d6:0c:98:d8:6a:74:9b:30:33:c9:
4e:1f:0e:79:db:ee:50:a2:a7:ea:61:48:87:07:07:31:ec:b3:
05:99:a4:69:ae:ba:09:da:7a:38:f2:c1:21:08:a0:44:ab:49:
e1:2d:1e:fe:56:f8:dd:13:7a:78:b6:58:e7:76:c7:47:95:0e:
f3:e7:a1:ee:92:17:83:23:06:a6:cc:32:15:07:dc:f2:a2:72:
8d:95:83:42:a0:de:0e:0b:1d:6e:18:68:6c:9a:ea:77:00:31:
f4:bc:6c:5a:e8:29:a2:6b:cf:0b:4b:63:48:91:b1:c4:71:ef:
0e:8b:0c:3a:e7:b8:2a:2a:e6:25:9a:27:d4:72:ab:88:9c:48:
53:d5:7f:4e:37:86:1f:1e:ef:b7:f4:52:67:9f:ae:59:b8:b3:
51:36:ef:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:49 2024 by rpki-client on console-ams.rpki-client.org