Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8fShWFzuWlvPl_VhxC_U8UZrh3o.roa
File: 8fShWFzuWlvPl_VhxC_U8UZrh3o.roa (raw, json)
Hash identifier: qkjy97mIByQDAZlnqJj6SnTYjyVJ6/Ppy/m2/QR1tqk=
Subject key identifier: F1:F4:A1:58:5C:EE:5A:5B:CF:97:F5:61:C4:2F:D4:F1:46:6B:87:7A
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018995CE36C6C9D8980151EFEEBC0113A95F
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8fShWFzuWlvPl_VhxC_U8UZrh3o.roa
Signing time: Thu 27 Jul 2023 05:24:26 +0000
ROA not before: Thu 27 Jul 2023 05:24:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14445
IP address blocks: 89.42.91.0/24 maxlen: 24
89.42.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Aug 2023 05:40:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:95:ce:36:c6:c9:d8:98:01:51:ef:ee:bc:01:13:a9:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jul 27 05:24:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1f4a1585cee5a5bcf97f561c42fd4f1466b877a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:9f:4c:b5:77:41:34:bc:35:11:27:af:85:28:
8e:1e:6f:61:79:c7:1b:bb:f7:ba:ff:27:7e:34:44:
d2:53:df:f0:3e:c7:07:49:5f:92:f8:03:c1:08:7f:
c9:3a:36:94:86:d9:40:e3:bf:0e:88:bf:3e:e7:b7:
02:66:23:84:53:38:4b:c2:de:11:5e:4f:0b:df:f5:
36:4f:aa:6e:08:a9:92:e5:d8:30:e9:af:61:9d:8a:
53:b5:53:9a:f3:32:22:c3:21:6e:40:9f:50:65:67:
b5:0e:8c:d6:31:b1:b5:fd:59:36:ef:29:ee:43:e0:
10:4f:84:9b:f9:f7:01:fb:a4:c2:5e:76:79:36:b6:
f0:f0:0c:cd:bf:48:66:a1:16:3e:6e:b2:b9:58:d6:
66:e3:fc:2e:57:29:ab:f8:50:3f:1e:7c:8e:4d:fc:
d2:9e:a0:54:db:70:7c:e1:dc:12:4c:2c:96:21:c1:
03:6d:ee:91:a5:a2:35:9d:45:94:16:10:63:82:89:
ee:14:14:63:b7:d3:96:c5:3d:00:bb:fc:85:59:c2:
73:41:6a:d6:29:87:02:d1:31:70:c8:cf:3f:3d:fc:
78:29:89:77:ce:38:ff:6d:7b:dc:21:7f:df:78:ee:
36:83:ad:a3:da:b0:74:05:3f:48:5c:a6:62:0c:66:
ed:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F4:A1:58:5C:EE:5A:5B:CF:97:F5:61:C4:2F:D4:F1:46:6B:87:7A
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8fShWFzuWlvPl_VhxC_U8UZrh3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.91.0/24
89.42.94.0/24
Signature Algorithm: sha256WithRSAEncryption
30:aa:05:d7:24:09:9a:3a:d0:5c:42:a6:67:a0:b1:ab:6f:65:
4c:93:18:15:6a:53:b7:78:0a:a0:47:b3:d9:04:26:6e:a8:cf:
af:8f:1a:64:e9:57:ef:d1:9b:0c:6b:1d:52:00:1e:71:08:dc:
ec:3b:d1:c1:b4:36:01:25:5c:74:c9:5b:36:31:da:e3:25:b9:
4f:df:3e:00:ac:f1:65:63:76:37:a4:c8:dc:fe:1d:e1:9a:6f:
be:a7:2a:24:c4:ef:8e:1d:69:73:04:f4:b2:df:4a:05:65:aa:
31:bd:da:77:2c:4a:43:ed:7b:12:5a:1d:63:2c:56:ee:55:30:
25:0c:c7:c8:c9:c8:4b:0b:48:3b:9b:d0:b2:77:af:c0:a7:88:
77:7f:55:a5:2c:c9:79:09:4a:20:97:dd:e3:9a:40:29:51:23:
2d:82:1d:18:01:2c:9a:15:79:f2:bc:b2:95:76:97:04:e0:c5:
52:71:42:f6:75:40:05:8b:2e:95:16:ef:f1:c6:b0:05:0e:b3:
fb:39:db:4c:3b:4b:4a:00:71:06:42:51:3a:ff:97:08:8d:90:
52:9b:18:e6:da:23:3c:1b:04:8d:08:84:29:06:cb:70:1d:38:
e4:7b:21:d5:ff:6f:f2:39:1d:46:13:f2:ab:21:4f:34:c9:3c:
7d:50:c9:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:18 2024 by rpki-client on console-fra.rpki-client.org