Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Bz0tvGvq9CyOZ5HxVSs5JVGaMN8.roa
File: Bz0tvGvq9CyOZ5HxVSs5JVGaMN8.roa (raw, json)
Hash identifier: v5c36SOSsw6v7xSFPhnrvEV1Y+yoI1halLpQxt4WtWk=
Subject key identifier: 07:3D:2D:BC:6B:EA:F4:2C:8E:67:91:F1:55:2B:39:25:51:9A:30:DF
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018AABC32FB1243855144C64BAC0BE09F2C1
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Bz0tvGvq9CyOZ5HxVSs5JVGaMN8.roa
Signing time: Tue 19 Sep 2023 04:46:50 +0000
ROA not before: Tue 19 Sep 2023 04:46:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 89.42.95.0/24 maxlen: 24
89.34.224.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ab:c3:2f:b1:24:38:55:14:4c:64:ba:c0:be:09:f2:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Sep 19 04:46:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=073d2dbc6beaf42c8e6791f1552b3925519a30df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ed:b9:71:b9:82:98:5c:76:a3:0f:dc:66:f0:
92:38:31:39:62:e9:bc:52:e6:b5:e9:a2:99:55:a2:
67:b0:06:d4:05:78:e9:b3:d8:48:7d:31:6e:19:a6:
22:d8:d9:17:a4:88:3b:4c:f5:5d:9e:f4:5a:b7:b2:
d4:7f:d5:6c:10:59:c9:44:4e:c9:ba:d8:74:d3:7d:
bb:0a:a2:c8:60:7e:65:91:ed:14:a4:cf:c0:39:d9:
ea:bf:c3:56:0e:54:92:f4:3b:92:b5:e4:c8:c1:f3:
ea:40:2f:df:67:e6:6a:b6:e3:b2:2b:64:f1:65:8a:
17:f2:2c:ce:0b:57:42:aa:d5:e8:2f:3a:93:3d:eb:
38:2b:3b:79:ff:c9:40:13:12:4b:e1:c8:28:68:4f:
2b:8c:c0:62:af:4e:9d:c8:39:fa:e6:63:7a:84:4d:
86:e0:0b:9c:49:e6:ab:5f:4e:2a:e9:3a:1b:29:2d:
c5:3f:9d:cc:8b:38:0b:9a:7d:f2:b5:e6:f5:34:57:
e2:bd:55:e6:f0:d1:a4:5c:3f:31:26:6a:17:ba:64:
d6:ce:ac:05:b0:d1:61:2a:39:7c:3c:e6:ea:23:30:
c9:6e:b1:e6:dc:fc:51:6a:0f:03:4c:0f:b2:5b:9b:
e7:af:d7:1f:2c:d5:c3:36:57:e2:60:fc:9c:e0:4c:
b8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:3D:2D:BC:6B:EA:F4:2C:8E:67:91:F1:55:2B:39:25:51:9A:30:DF
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Bz0tvGvq9CyOZ5HxVSs5JVGaMN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.224.0/23
89.42.95.0/24
Signature Algorithm: sha256WithRSAEncryption
50:52:10:2d:b7:93:2c:54:10:70:03:72:54:90:b6:fc:b0:9f:
0e:30:6a:81:f7:f0:51:57:ec:f2:00:ca:2b:91:56:2e:34:62:
84:45:3f:03:dc:89:80:19:6a:c3:c8:17:d2:9f:bb:14:a2:02:
04:ba:57:b0:dc:b8:bd:2c:51:64:e9:1c:10:2f:b0:a0:c9:8d:
43:a4:de:50:f3:5e:9f:72:9a:dc:ca:39:c3:74:66:62:96:ef:
c7:3d:a9:9b:ed:e9:3b:a2:ea:d6:37:92:b3:08:b0:eb:99:c5:
05:98:4a:e2:33:a6:db:9f:e1:de:25:32:22:ce:3f:9c:3f:ba:
0b:9f:e6:13:47:48:88:05:2a:84:f7:0a:9f:1e:5d:01:59:6b:
5b:f4:10:12:d2:8c:37:bd:73:05:4f:a1:5d:30:03:22:d3:ac:
a8:b3:5f:04:35:d2:07:f1:46:f0:2a:19:d9:36:ed:1b:95:4c:
8e:1a:2f:cd:d0:46:02:03:d6:01:4c:bc:60:45:a1:3a:6b:59:
7a:fd:21:b7:37:d3:c6:79:9f:dc:78:b2:97:2d:10:7f:5c:ff:
79:b3:e7:79:2e:4c:5d:7a:ae:41:e8:d2:97:20:13:94:68:f7:
ec:03:22:e9:1d:79:e6:1c:8d:8b:c7:83:d7:b6:f9:21:3b:48:
bb:0c:c4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 30 13:54:16 2023 by rpki-client on console-fra.rpki-client.org