Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/9LXc6F8X_XwTDbLeP89pDbyp5BI.roa
File: 9LXc6F8X_XwTDbLeP89pDbyp5BI.roa (raw, json)
Hash identifier: pNUXzjM5v6vFsqUmYmRrY4fwxdmwscLrEDuCPEQTpu0=
Subject key identifier: F4:B5:DC:E8:5F:17:FD:7C:13:0D:B2:DE:3F:CF:69:0D:BC:A9:E4:12
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018B8EB6F24881A62C39CE1F260169663023
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/9LXc6F8X_XwTDbLeP89pDbyp5BI.roa
Signing time: Thu 02 Nov 2023 06:27:16 +0000
ROA not before: Thu 02 Nov 2023 06:27:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.42.82.0/23 maxlen: 23
89.42.80.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 16 Nov 2023 05:47:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8e:b6:f2:48:81:a6:2c:39:ce:1f:26:01:69:66:30:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Nov 2 06:27:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4b5dce85f17fd7c130db2de3fcf690dbca9e412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1a:2e:c2:d7:c1:c3:95:4a:52:e2:d2:20:70:
cc:54:26:16:75:33:39:9b:c8:09:8a:51:33:7b:a4:
08:a2:5e:aa:3f:99:b0:7a:31:0a:e2:84:73:8f:85:
ec:3b:f0:34:65:d8:a4:e0:1c:83:19:a0:b7:83:6f:
46:b3:2e:af:2a:a9:2e:84:66:5d:8b:af:5a:4a:19:
0e:62:04:24:d2:52:53:9b:c1:bf:ea:29:17:46:db:
b4:23:42:04:2c:fd:80:66:db:db:0a:0d:36:27:3f:
80:21:6d:db:cd:ce:04:e1:86:85:cd:34:07:33:10:
87:e1:a1:00:b9:90:7f:b0:31:c7:fb:25:93:3d:a3:
be:ba:9f:91:f8:45:b7:75:3e:5f:48:a3:bf:93:87:
3e:c7:81:e3:3c:e4:c5:5c:8c:2c:93:db:57:55:55:
d5:9b:d3:e4:1b:71:e9:85:62:ae:75:61:7a:36:6e:
fb:86:70:3e:ed:3c:f2:06:9a:29:96:bc:80:c5:a0:
64:ac:f5:08:e7:a8:7d:20:48:d9:71:91:4d:36:54:
74:9e:84:a8:ad:ff:96:34:38:0c:24:cd:bc:c5:43:
69:66:16:cf:53:0d:55:3d:92:67:54:91:63:bf:7a:
3f:a9:42:6e:ec:35:d5:37:bb:a9:8c:b5:bb:94:84:
d5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B5:DC:E8:5F:17:FD:7C:13:0D:B2:DE:3F:CF:69:0D:BC:A9:E4:12
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/9LXc6F8X_XwTDbLeP89pDbyp5BI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.80.0/22
Signature Algorithm: sha256WithRSAEncryption
49:c7:62:db:5c:17:67:97:f7:e9:29:fb:dd:d5:1b:3e:93:39:
f3:82:12:58:5c:4c:ab:f7:62:88:32:dc:58:0f:17:c7:f8:a4:
c8:94:69:49:38:e4:67:a3:db:8c:59:3c:95:0e:97:27:d8:fa:
3d:ef:05:e3:9e:97:2a:89:d7:5e:59:0d:90:03:0c:98:8f:f6:
ab:f9:c0:5d:47:ac:4c:be:19:c0:00:96:47:a4:39:a4:30:c6:
3a:d9:cd:05:92:05:57:f0:dd:0d:e4:86:60:7c:3f:39:38:a1:
f0:98:eb:f2:e1:00:3e:90:4c:10:50:d0:f0:5d:2a:a5:58:30:
93:dc:8f:7c:c5:be:1b:93:85:50:1a:5a:78:54:41:29:a5:c8:
fe:55:a8:87:7d:da:b0:67:9f:44:47:9d:bd:6e:e5:a0:4f:e6:
5a:c7:ca:ec:2e:0d:16:14:6d:3c:14:ba:56:3f:d9:f8:6a:41:
16:42:18:27:9d:a7:fd:a2:96:08:67:a4:be:dc:02:a5:e2:b6:
86:1e:d1:c9:e0:56:56:f2:0a:51:be:3f:87:30:52:5b:1b:95:
89:e3:e6:16:18:a6:64:75:a4:1d:7f:5b:25:7e:ae:57:01:01:
b0:da:0c:03:81:cc:31:ac:e0:77:7d:2d:c8:2d:67:af:5e:1e:
1e:6c:f5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:49 2024 by rpki-client on console-ams.rpki-client.org