Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/DsR-A1agFbhOQ59oHOwylxYioS8.roa
File: DsR-A1agFbhOQ59oHOwylxYioS8.roa (raw, json)
Hash identifier: cnL745nQ31yvIRl9lNbNzAclxeg0M8Od3VW96PePIlM=
Subject key identifier: 0E:C4:7E:03:56:A0:15:B8:4E:43:9F:68:1C:EC:32:97:16:22:A1:2F
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018CC26D29C814D4C16A3124FA7464D41D38
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/DsR-A1agFbhOQ59oHOwylxYioS8.roa
Signing time: Mon 01 Jan 2024 00:29:43 +0000
ROA not before: Mon 01 Jan 2024 00:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 89.42.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Feb 2024 06:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:29:c8:14:d4:c1:6a:31:24:fa:74:64:d4:1d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 00:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ec47e0356a015b84e439f681cec32971622a12f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:79:c2:e0:57:55:75:4d:d9:c2:2e:00:dc:90:
f4:3a:0c:ff:5c:b3:6a:65:a1:1c:bf:9e:db:90:5a:
33:13:0f:45:07:e8:10:1b:f0:1c:38:f7:79:c5:ca:
be:ff:5a:97:77:12:56:4a:ab:1d:40:4e:b0:02:6f:
d3:c4:5f:28:19:60:48:ec:29:78:cb:5f:f2:dc:5f:
fa:a0:a0:3a:d7:1e:21:39:4d:3b:1e:2b:10:07:6b:
af:39:cb:b2:d7:10:1f:3a:eb:f5:f1:35:68:c0:e5:
18:9d:a9:5e:51:34:b0:0f:34:ed:12:04:4d:11:75:
fc:ef:ac:a8:69:19:56:ae:a8:d2:24:41:21:fd:c2:
ca:09:19:7f:c8:6b:57:9a:7e:2d:10:ae:8e:9a:a1:
ca:ce:c3:ab:05:cc:36:ff:56:ea:0b:9c:50:4e:76:
59:05:cf:69:d1:1e:5b:a8:96:25:c3:2d:b3:ad:8c:
e6:45:25:57:34:60:59:c5:4f:0b:54:4e:23:e8:03:
a2:20:37:ca:cc:df:a6:50:8e:1d:7c:1f:e0:9f:5f:
59:7d:44:2d:e3:95:fb:b8:e3:67:9f:2d:b2:44:2c:
4b:e1:6f:a5:52:36:a6:67:36:ec:bb:d4:4c:0d:9e:
82:3b:bb:89:70:52:4f:49:9a:48:76:ca:74:e0:74:
e5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C4:7E:03:56:A0:15:B8:4E:43:9F:68:1C:EC:32:97:16:22:A1:2F
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/DsR-A1agFbhOQ59oHOwylxYioS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.90.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:97:db:7c:c9:9e:16:a0:b6:0a:d2:0c:29:45:ff:b5:05:fe:
39:86:29:e6:d3:96:ea:3d:e5:59:f0:64:6a:1b:a5:21:a9:28:
51:87:7e:38:fe:d7:f8:0c:83:93:03:8c:6a:35:9e:7b:cd:b4:
30:3a:d4:cb:bb:d0:8e:3f:dd:8d:d7:e6:a4:ca:9c:a7:ad:55:
6f:19:4f:89:bd:9b:00:9e:b4:f2:d9:b1:08:c8:9e:3f:d7:c8:
00:ad:bd:0b:79:ff:94:8a:98:e3:0d:41:0d:52:f2:20:da:b7:
67:c7:57:1a:17:bd:98:19:38:e4:a9:b7:6f:64:04:5b:84:d6:
c5:1b:fd:58:29:75:9a:99:69:c2:85:ad:98:20:de:4b:26:91:
48:30:8c:8e:c1:f8:a8:6f:ae:46:66:1b:de:1f:3f:ed:0b:4c:
b7:b3:ac:f3:cd:6b:4f:c6:d6:b9:f4:f7:b2:54:91:90:8c:22:
8d:f9:66:3e:8c:e4:8f:f2:d0:e1:e0:f7:23:8d:16:95:cf:82:
b4:23:c4:47:68:15:ec:48:6d:78:ef:20:c4:21:a9:37:d2:d5:
7a:94:e5:5e:f4:40:e9:32:e0:81:3e:a0:87:32:d8:61:ab:bc:
d2:18:c7:df:61:55:76:83:38:e2:48:6d:c9:4a:d4:24:f7:e6:
ee:96:74:ba
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzCbSnIFNTBajEk+nRk1B04MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjQwMTAxMDAyOTQzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZWM0N2UwMzU2YTAxNWI4NGU0MzlmNjgxY2VjMzI5NzE2MjJhMTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3nC4FdVdU3Zwi4A3JD0Ogz/XLNq
ZaEcv57bkFozEw9FB+gQG/AcOPd5xcq+/1qXdxJWSqsdQE6wAm/TxF8oGWBI7Cl4
y1/y3F/6oKA61x4hOU07HisQB2uvOcuy1xAfOuv18TVowOUYnaleUTSwDzTtEgRN
EXX876yoaRlWrqjSJEEh/cLKCRl/yGtXmn4tEK6OmqHKzsOrBcw2/1bqC5xQTnZZ
Bc9p0R5bqJYlwy2zrYzmRSVXNGBZxU8LVE4j6AOiIDfKzN+mUI4dfB/gn19ZfUQt
45X7uONnny2yRCxL4W+lUjamZzbsu9RMDZ6CO7uJcFJPSZpIdsp04HTl0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA7EfgNWoBW4TkOfaBzsMpcWIqEvMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvRHNSLUExYWdGYmhPUTU5b0hPd3lseFlpb1M4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSpaMA0G
CSqGSIb3DQEBCwUAA4IBAQBMl9t8yZ4WoLYK0gwpRf+1Bf45hinm05bqPeVZ8GRq
G6UhqShRh344/tf4DIOTA4xqNZ57zbQwOtTLu9COP92N1+akypynrVVvGU+JvZsA
nrTy2bEIyJ4/18gArb0Lef+UipjjDUENUvIg2rdnx1caF72YGTjkqbdvZARbhNbF
G/1YKXWamWnCha2YIN5LJpFIMIyOwfiob65GZhveHz/tC0y3s6zzzWtPxta59Pey
VJGQjCKN+WY+jOSP8tDh4PcjjRaVz4K0I8RHaBXsSG147yDEIak30tV6lOVe9EDp
MuCBPqCHMthhq7zSGMffYVV2gzjiSG3JStQk9+bulnS6
-----END CERTIFICATE-----
Generated at Tue Feb 27 07:44:30 2024 by rpki-client on console-ams.rpki-client.org