Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/9c9W4-Svh5DCVpNS1HOc2KnvpaI.roa
File: 9c9W4-Svh5DCVpNS1HOc2KnvpaI.roa (raw, json)
Hash identifier: Le6fYFcneZluzP1qMlLMAojGzDh2HXceqonE9jegfeg=
Subject key identifier: F5:CF:56:E3:E4:AF:87:90:C2:56:93:52:D4:73:9C:D8:A9:EF:A5:A2
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018CB103B2105ABFE166EBC6735ECC575017
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/9c9W4-Svh5DCVpNS1HOc2KnvpaI.roa
Signing time: Thu 28 Dec 2023 15:20:58 +0000
ROA not before: Thu 28 Dec 2023 15:20:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
89.47.127.0/24 maxlen: 24
89.33.195.0/24 maxlen: 24
89.46.3.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b1:03:b2:10:5a:bf:e1:66:eb:c6:73:5e:cc:57:50:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Dec 28 15:20:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f5cf56e3e4af8790c2569352d4739cd8a9efa5a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a4:ea:79:cd:f1:c0:df:fd:70:5c:35:1b:b5:
a4:76:b0:b4:b4:6f:9c:11:9c:2b:6f:31:77:6c:92:
96:51:c1:a7:c8:fd:ed:3b:cf:28:f9:0c:3a:08:cd:
24:8f:4a:1f:51:9e:dc:3f:e8:d1:7f:8b:3c:68:ee:
ca:6c:3e:19:a8:8e:1f:f2:b6:b3:30:d9:7f:fc:84:
c2:e4:97:22:2f:9f:86:7d:82:25:ca:cf:c4:c7:d6:
25:33:5c:34:fe:e6:26:42:cd:a2:b5:c5:f6:1c:c6:
47:7f:37:fb:20:5d:0b:62:ec:df:43:de:07:4d:2c:
1a:ca:5a:c7:ac:83:fb:43:49:9f:46:33:a9:8e:0f:
9b:be:56:92:2d:4d:1e:56:8f:02:2b:96:91:f2:83:
bf:f5:d1:ee:55:db:c5:1c:48:df:39:9d:c1:77:1c:
d4:05:31:b8:69:41:3f:fd:51:b3:8c:d1:4e:d6:9f:
d4:f7:5f:22:e7:fc:9d:a4:3d:92:95:f9:60:b4:a5:
aa:cf:48:fe:cf:7a:fb:46:eb:9f:84:fc:b9:f6:70:
5d:e1:63:9a:37:e4:7d:2a:c4:e0:69:07:b2:7a:09:
ff:29:1a:cc:2f:e3:22:20:14:56:d2:51:a7:bf:26:
6c:7e:9f:d9:e4:02:2a:4f:24:a0:c9:4d:aa:5f:fc:
b0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:CF:56:E3:E4:AF:87:90:C2:56:93:52:D4:73:9C:D8:A9:EF:A5:A2
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/9c9W4-Svh5DCVpNS1HOc2KnvpaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.195.0/24
89.42.81.0-89.42.83.255
89.46.3.0/24
89.47.127.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:9e:e0:e1:0c:3d:71:6e:4b:25:0f:3f:77:a8:ee:75:52:90:
f3:4f:c6:48:45:1e:7c:cc:16:2d:e9:4e:17:8d:ff:45:74:f2:
53:09:ac:b7:6a:ff:e6:cd:67:1f:a1:c9:ba:a3:3e:1c:b6:d1:
b2:0d:7d:20:2e:57:69:db:8d:8e:48:4b:8a:30:ba:08:9f:ea:
0f:13:0e:fb:9f:f5:b2:bf:0f:26:0c:f1:a1:2b:53:46:ac:92:
94:71:d3:71:24:29:3f:b7:34:b8:12:f6:5a:5a:23:a7:33:55:
ca:f4:1a:fc:c1:a1:08:63:73:4c:02:2b:8d:cf:63:bf:ab:17:
5e:8e:5e:4c:39:20:1e:8d:b9:9e:be:d0:cc:c2:cc:fa:49:4f:
73:e2:31:dd:4f:99:9d:04:2c:48:87:ed:1e:60:c6:8c:1c:f8:
16:59:6e:2f:ec:47:2f:6e:94:67:a3:78:45:c5:68:a4:14:d3:
4f:c1:4f:66:fa:d6:bd:1e:5c:ff:e3:1a:c4:04:fe:15:3d:8b:
97:68:b6:5a:0b:6c:c4:c5:23:f6:75:94:e6:78:1b:9d:97:8a:
da:74:54:6d:06:ea:d7:46:2f:e0:43:4a:65:3f:66:24:98:d9:
ff:9c:23:07:37:06:f1:c0:1a:91:f4:a7:34:2d:a9:8d:40:a4:
48:47:d3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 28 19:58:30 2023 by rpki-client on console-fra.rpki-client.org