Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/FZyvuZgwxcaOjt10O6maMW05S3o.roa
File: FZyvuZgwxcaOjt10O6maMW05S3o.roa (raw, json)
Hash identifier: imYhOV5rnXhDLhpnocPpDhuGIrb5VALO/Zdn7wSHLGo=
Subject key identifier: 15:9C:AF:B9:98:30:C5:C6:8E:8E:DD:74:3B:A9:9A:31:6D:39:4B:7A
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018D68C019973654EF6E26CA807DD76244C5
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/FZyvuZgwxcaOjt10O6maMW05S3o.roa
Signing time: Fri 02 Feb 2024 07:37:16 +0000
ROA not before: Fri 02 Feb 2024 07:37:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
89.46.3.0/24 maxlen: 24
89.47.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 03 Feb 2024 16:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:68:c0:19:97:36:54:ef:6e:26:ca:80:7d:d7:62:44:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Feb 2 07:37:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=159cafb99830c5c68e8edd743ba99a316d394b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:64:cb:01:06:fd:8f:f3:1a:ac:20:f1:4d:d6:
aa:1e:73:6a:43:86:3d:91:dc:c9:26:8d:20:76:9d:
2f:24:84:a7:91:83:bd:ff:c6:02:0c:5a:55:87:52:
7a:01:4f:89:d0:6e:bd:b5:eb:20:2e:9d:06:1c:ae:
bc:7d:bb:22:e4:36:26:a3:b6:21:82:6a:a2:22:54:
90:16:73:00:37:22:2d:c6:18:a0:ad:a5:cf:de:af:
6f:77:45:7b:0a:ab:7d:2a:22:1e:51:14:cc:4a:93:
80:1a:78:0f:6d:98:13:13:17:59:f4:40:2c:69:71:
a5:4d:97:ca:79:a0:8f:0e:c1:25:c7:01:c0:80:dc:
cf:b1:64:62:59:99:d5:7f:55:44:76:7e:f9:b9:b0:
0f:1a:6e:27:99:19:ec:21:84:90:48:50:0f:51:57:
d9:68:d0:88:de:71:e4:ce:7f:ee:80:29:fb:ac:68:
3d:dc:c7:53:a0:12:a1:0d:9b:9c:d9:23:37:fb:fd:
4e:12:fc:86:6d:5c:48:3b:f8:c7:ff:7e:e9:f1:a4:
89:16:56:1f:29:21:b4:3b:a0:8b:45:55:c2:fc:c7:
d3:93:4b:6d:15:92:97:37:59:b5:b9:f2:99:9a:f1:
87:c6:74:ea:09:2f:c9:76:d0:34:38:eb:f8:bc:38:
eb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:9C:AF:B9:98:30:C5:C6:8E:8E:DD:74:3B:A9:9A:31:6D:39:4B:7A
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/FZyvuZgwxcaOjt10O6maMW05S3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.81.0-89.42.83.255
89.46.3.0/24
89.47.119.0/24
Signature Algorithm: sha256WithRSAEncryption
87:b4:ba:9c:fb:30:10:c5:92:8d:ac:e4:7e:42:ab:97:7f:75:
8e:f2:2d:32:d0:7f:31:3c:73:e7:6d:82:c5:23:2a:b8:eb:64:
8a:c6:01:8e:c5:c1:28:ec:a0:51:b2:74:39:ec:31:7e:59:62:
36:6a:ef:cb:40:02:03:7f:63:c0:c8:28:47:2a:48:53:93:c9:
02:a6:e2:2e:aa:35:00:1e:7a:9f:8f:59:dd:30:bc:8d:75:28:
6d:07:59:00:c7:1a:9c:e3:5d:60:fd:19:cb:0f:d4:2d:1b:e5:
72:f8:37:d8:d7:d7:fb:52:66:9c:78:29:8d:83:02:57:80:f3:
04:b4:cb:90:b5:a4:d9:97:05:4c:54:d1:b1:f1:54:d9:50:c2:
71:a5:24:76:2a:34:e1:cb:c4:e7:18:da:4a:ac:9d:d6:d3:fc:
70:f8:68:7f:1d:3a:61:c5:e7:31:dc:d3:3f:09:01:1a:0a:08:
db:c3:94:06:6d:cc:c2:dc:72:d0:b9:95:e5:12:fb:c2:73:df:
53:0a:e3:6b:5e:4a:d8:e7:33:de:af:27:37:30:68:c3:3a:5f:
b5:34:72:4e:68:62:79:4c:02:dd:50:53:7a:14:4f:ac:1b:c1:
db:12:e0:64:66:c1:f9:6f:62:4f:dd:a4:6d:9d:90:69:8b:cf:
44:e8:c9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 3 20:01:25 2024 by rpki-client on console-ams.rpki-client.org