Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/C1lD7F1EMdBWLrmdVFHudixB2Yw.roa
File: C1lD7F1EMdBWLrmdVFHudixB2Yw.roa (raw, json)
Hash identifier: 62WCaEdsU+SIM8013GgjoSyWDuFGoYMEYb99VpEYWVA=
Subject key identifier: 0B:59:43:EC:5D:44:31:D0:56:2E:B9:9D:54:51:EE:76:2C:41:D9:8C
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01912119316053AEE896F670E93625A77B76
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/C1lD7F1EMdBWLrmdVFHudixB2Yw.roa
Signing time: Mon 05 Aug 2024 05:53:04 +0000
ROA not before: Mon 05 Aug 2024 05:53:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
89.47.114.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Aug 2024 14:56:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:21:19:31:60:53:ae:e8:96:f6:70:e9:36:25:a7:7b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Aug 5 05:53:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b5943ec5d4431d0562eb99d5451ee762c41d98c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:94:0b:b5:0c:2a:db:e3:a6:74:0a:9a:05:a6:
8e:02:c1:18:b0:ca:99:1a:ae:87:af:9b:44:94:95:
7c:4c:1c:d9:36:16:34:4b:d2:cd:0e:4e:f8:9a:a5:
72:0f:13:e2:35:ee:19:d1:99:da:ac:b4:bd:89:ad:
cb:2e:d8:c6:ac:de:b9:ee:86:fb:90:fd:4f:41:15:
d9:5c:4f:07:78:86:5f:e9:48:ac:37:80:aa:56:7c:
23:64:ba:db:59:de:6a:62:c9:81:2a:f1:4e:1a:09:
a9:58:0f:06:ec:d7:ee:92:b7:89:27:f9:ec:1c:ec:
82:0e:17:e9:25:10:fc:46:c4:05:60:d9:14:ca:4b:
40:51:72:4e:92:6b:1a:2b:f8:7c:cd:0f:e8:83:57:
5c:f1:43:92:18:da:21:53:28:38:f9:52:70:1d:5c:
1d:90:31:16:1d:df:3e:16:56:44:83:99:e5:ce:6c:
2d:80:63:d5:91:58:06:11:52:bb:bc:42:90:56:93:
03:dd:79:48:3f:97:4d:30:74:e4:3f:95:b9:5c:45:
42:39:07:07:9a:fd:77:4f:d7:6c:99:91:0f:d7:77:
b0:6e:af:e9:cd:96:e1:74:30:f3:ae:54:b7:89:a8:
40:0a:18:17:e0:c5:ba:ed:8e:e6:6a:39:13:07:3a:
8e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:59:43:EC:5D:44:31:D0:56:2E:B9:9D:54:51:EE:76:2C:41:D9:8C
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/C1lD7F1EMdBWLrmdVFHudixB2Yw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.81.0-89.42.83.255
89.47.114.0/24
Signature Algorithm: sha256WithRSAEncryption
01:1e:3b:50:73:79:18:17:87:1d:a2:9e:8c:6b:d2:fa:25:17:
03:58:14:5e:a9:cf:07:1b:9b:b8:d8:07:a8:46:4c:88:03:87:
16:f6:d0:ad:b5:97:3d:02:be:a9:8a:11:d4:f7:c8:46:1d:a2:
d8:01:6a:6b:ac:6a:13:de:d1:ce:93:41:b3:c2:49:f0:f3:86:
0a:82:a2:4b:04:2a:40:76:ae:13:91:b0:73:0b:18:94:0b:63:
18:78:13:10:88:3a:51:7c:1b:06:97:01:e7:83:a7:44:af:2b:
c8:11:d8:1a:ea:87:b5:e1:86:7c:41:17:72:7e:20:d9:b0:74:
0e:29:b6:a7:05:4d:29:8b:e0:0b:02:3b:95:75:1d:67:5e:5b:
28:52:16:c8:e1:e3:ca:8d:ac:3c:29:ae:d8:19:17:ac:6e:8d:
ff:f5:ea:83:82:6e:d0:de:b2:e2:9a:49:44:c9:d5:81:40:cf:
34:5b:aa:c5:95:bc:1a:fd:9f:a4:8d:02:c9:c3:c7:04:f2:ef:
d3:c6:2f:d4:a9:1b:3d:16:c6:66:42:f1:31:cc:36:1d:1f:f5:
82:43:8f:e6:33:3c:24:51:8c:4e:cd:c6:fc:bc:b4:0b:cb:f6:
a4:d7:f4:c2:5a:61:ec:f4:c5:8a:48:2a:f8:d9:6b:78:72:6e:
ff:eb:71:1d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Aug 5 17:11:46 2024 by rpki-client on console-fra.rpki-client.org