Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dt848PGLUjGjDeoUnjDxlr66Z4.roa
File: 8dt848PGLUjGjDeoUnjDxlr66Z4.roa (raw, json)
Hash identifier: sCagK7u5XIVND601H8H1TnIzVeLbZMv25DXxl0IPNuY=
Subject key identifier: F1:DB:7C:E3:C3:C6:2D:48:C6:8C:37:A8:52:78:C3:C6:5A:FA:E9:9E
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018B84570092C578F41088226E6C248A6BB2
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dt848PGLUjGjDeoUnjDxlr66Z4.roa
Signing time: Tue 31 Oct 2023 06:06:16 +0000
ROA not before: Tue 31 Oct 2023 06:06:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3223
IP address blocks: 89.47.233.0/24 maxlen: 24
188.240.210.0/24 maxlen: 24
89.41.179.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:84:57:00:92:c5:78:f4:10:88:22:6e:6c:24:8a:6b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Oct 31 06:06:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1db7ce3c3c62d48c68c37a85278c3c65afae99e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2c:35:6d:07:2d:50:08:cc:7e:76:f4:16:52:
94:62:2a:6c:c1:24:26:1c:5b:2f:9c:3b:5a:b3:da:
35:16:d4:d3:3d:a0:fc:a1:f7:a0:f0:b7:b6:a3:ec:
e7:fb:d8:6d:5a:74:98:6d:ed:aa:7c:77:8c:4d:83:
7d:0b:c2:43:8b:b3:a7:30:de:d6:e1:dc:3b:f8:49:
46:ff:33:47:12:37:76:1d:d8:3a:20:3e:3e:f6:40:
df:dd:d0:04:db:6f:53:ac:2c:4a:a8:6b:2d:b4:e1:
0b:9c:2c:72:ad:1c:4c:4d:37:fb:b1:fa:90:53:ba:
62:64:92:06:d2:67:26:3c:21:4c:23:1a:a9:5e:27:
75:40:12:25:9a:52:24:2b:db:3b:ab:95:f0:e3:35:
ee:0c:f4:3a:63:84:71:6c:8d:4b:cc:b9:1f:21:d8:
19:98:c1:88:96:29:cb:30:c0:58:85:ca:df:0a:3a:
38:66:d7:ab:38:4f:15:31:17:01:f2:7a:72:38:75:
c6:0a:72:70:0c:06:81:90:ab:08:fd:e8:8c:41:f1:
8d:46:55:ef:44:bf:80:9b:bf:cc:05:d5:5b:7c:9a:
6d:1f:89:3f:b6:35:d6:77:b7:60:83:3c:ae:5a:49:
8a:cf:4d:99:55:7f:6f:fb:34:fa:55:a2:d8:4c:47:
9d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DB:7C:E3:C3:C6:2D:48:C6:8C:37:A8:52:78:C3:C6:5A:FA:E9:9E
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dt848PGLUjGjDeoUnjDxlr66Z4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.41.179.0/24
89.47.233.0/24
188.240.210.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:fa:a3:56:e1:34:2c:b3:4b:af:bf:7a:31:3c:4f:4d:45:a1:
d6:90:13:97:f7:2f:d8:3e:f2:b3:ef:6d:ba:47:a9:f7:d1:34:
ed:f9:da:b5:0e:db:e8:71:1d:78:c8:4c:e9:8f:0a:52:6a:09:
39:16:03:b3:a3:70:63:0a:ee:85:0c:47:9c:9a:ea:05:8d:40:
81:a6:b9:5b:53:9a:29:f9:39:60:43:7d:72:10:0d:34:9f:cf:
87:f6:63:ba:eb:49:34:17:ac:16:de:3f:3e:d8:44:cc:dc:74:
aa:0f:99:41:f5:95:f8:db:81:e1:41:59:62:f4:e5:96:59:1d:
63:b6:00:59:d8:bb:e0:99:a8:70:94:26:36:e7:6c:f6:a7:ef:
84:59:e8:d3:00:75:42:b7:25:61:0a:bd:ae:c3:29:9f:6f:d8:
ca:24:16:63:18:9b:51:4e:9b:67:3d:24:6a:0b:c6:9e:30:a5:
84:ab:77:67:5e:56:7a:a8:0f:fb:51:21:b4:a7:46:a1:7f:8f:
5f:e5:b4:68:16:e6:c4:93:f9:32:fc:3d:57:93:04:57:7c:e9:
b6:a5:2f:69:5b:63:27:48:d5:69:e9:27:3b:7b:ad:6f:5c:74:
ba:f1:f5:d8:81:f7:f8:8c:3b:fa:32:c8:2b:38:97:29:dd:9d:
53:75:01:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:36 2024 by rpki-client on console-fra.rpki-client.org