Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/D2mS098Tn3QDctqzdhIsuSBpSg4.roa
File: D2mS098Tn3QDctqzdhIsuSBpSg4.roa (raw, json)
Hash identifier: E8yD6vgCHnTp2JDERql8+W+Hj7M0qPgPIAAgBjYhFjA=
Subject key identifier: 0F:69:92:D3:DF:13:9F:74:03:72:DA:B3:76:12:2C:B9:20:69:4A:0E
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01896A0569D9CDD369D6B43E18D2A3897760
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/D2mS098Tn3QDctqzdhIsuSBpSg4.roa
Signing time: Tue 18 Jul 2023 17:21:26 +0000
ROA not before: Tue 18 Jul 2023 17:21:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 89.42.84.0/24 maxlen: 24
89.42.85.0/24 maxlen: 24
93.119.105.0/24 maxlen: 24
89.42.87.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6a:05:69:d9:cd:d3:69:d6:b4:3e:18:d2:a3:89:77:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jul 18 17:21:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f6992d3df139f740372dab376122cb920694a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8c:80:20:67:41:61:c1:26:d3:50:00:47:2a:
c8:ca:0d:3c:dd:c1:ea:ae:60:f1:44:a8:11:5b:7e:
77:a7:07:e4:3c:61:f3:01:e4:60:ad:5b:3c:e7:35:
99:94:3a:03:5d:c5:d5:a6:df:22:7b:aa:3b:d0:e3:
39:53:95:2a:cd:3c:85:02:2f:34:06:ee:05:bd:7d:
9d:8a:c9:3c:af:96:0d:36:93:b8:19:f7:b9:47:ee:
78:ad:da:86:40:74:29:a6:e9:b3:d6:38:27:d4:e5:
9d:5b:db:d9:86:ef:3d:2a:29:63:9c:a0:a2:54:14:
30:5a:63:28:fa:0d:da:94:17:63:3e:49:dd:96:9b:
16:f6:33:a3:1a:22:8f:50:41:9b:a7:b9:c0:93:0c:
15:03:6a:d2:6c:0e:87:80:07:7c:21:0d:a9:48:27:
13:96:ec:e6:ef:b4:c9:e6:f4:bf:a6:26:23:3e:b4:
cb:7b:99:a3:dd:6b:00:21:84:3c:14:00:2f:db:51:
2f:8a:5b:a9:f4:c7:d0:1c:fc:fa:1a:e6:12:2d:7f:
66:67:7c:f9:6d:7b:67:6b:61:71:08:0f:b3:ad:9b:
d5:04:38:ad:1e:81:c8:58:c2:2d:6b:d2:c3:56:3b:
34:44:88:24:a0:8e:fb:a3:67:3a:4a:89:20:ca:5a:
89:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:69:92:D3:DF:13:9F:74:03:72:DA:B3:76:12:2C:B9:20:69:4A:0E
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/D2mS098Tn3QDctqzdhIsuSBpSg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.84.0/23
89.42.87.0/24
93.119.105.0/24
Signature Algorithm: sha256WithRSAEncryption
61:8a:e2:b1:bc:7d:cc:1e:89:a2:b4:0a:d8:9a:09:02:5c:41:
39:b2:86:3a:1a:83:38:ef:a3:93:ec:4f:55:9e:02:3a:95:b4:
e5:d4:88:7f:ad:39:23:aa:08:3e:31:55:20:ed:78:84:46:dd:
8f:09:6f:05:26:4b:a2:ec:84:52:30:de:95:b4:0e:fe:e7:62:
2b:19:4c:c2:45:e5:5c:82:ac:48:75:cd:0f:99:ec:38:f5:94:
7b:a8:48:c8:bd:30:b5:12:69:4f:db:09:83:c9:18:87:11:e3:
54:00:37:5c:1b:d3:72:f9:67:1e:0d:1b:0d:2d:0a:ce:c5:1b:
e0:05:3a:90:82:94:fc:2d:b8:3d:ed:c0:69:02:76:a4:55:77:
74:f4:62:b2:9d:fb:9e:b1:38:f1:cc:dc:c7:92:7f:1a:c5:76:
fd:f8:f9:e0:ea:26:c5:c4:fa:6c:5e:56:13:8e:45:3f:74:a8:
02:aa:3f:72:61:e6:a0:88:59:4c:6c:12:6f:b4:29:84:3a:b9:
53:d5:d6:b7:2c:f6:1a:5d:28:af:42:ad:8c:28:b5:c0:22:fd:
79:87:1f:3a:90:d3:fd:18:e5:cd:ea:7b:fb:50:ff:c4:8c:f6:
54:25:d3:43:de:de:90:b5:1b:69:79:e6:fc:7b:5c:7c:95:ff:
94:78:df:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 17 07:56:17 2023 by rpki-client on console-ams.rpki-client.org