Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Ft1SAZ_EzLTc1S9xBw5yRXRDaiY.roa
File: Ft1SAZ_EzLTc1S9xBw5yRXRDaiY.roa (raw, json)
Hash identifier: dqSddTcBWpvEy38dHfSeMhsb2gUqYOi+NJeKIOnAvN4=
Subject key identifier: 16:DD:52:01:9F:C4:CC:B4:DC:D5:2F:71:07:0E:72:45:74:43:6A:26
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018BD6ABFD311C24D0D57EBF13645929E898
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Ft1SAZ_EzLTc1S9xBw5yRXRDaiY.roa
Signing time: Thu 16 Nov 2023 05:47:57 +0000
ROA not before: Thu 16 Nov 2023 05:47:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 89.42.85.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d6:ab:fd:31:1c:24:d0:d5:7e:bf:13:64:59:29:e8:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Nov 16 05:47:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16dd52019fc4ccb4dcd52f71070e724574436a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1d:7b:b1:c2:0f:de:91:49:80:38:81:e3:90:
ff:33:f2:3d:e2:b4:6a:22:18:e4:81:92:61:0c:74:
4e:19:bf:59:43:3a:40:c7:00:d3:e7:ad:9c:b3:cb:
e1:80:ac:91:9c:cf:cf:7d:73:09:da:2d:b8:1a:38:
31:d1:64:6e:c5:2f:fb:98:a9:73:a1:1f:15:90:b3:
32:77:d0:63:31:b5:88:f9:fb:c0:72:ac:1c:0d:5d:
14:cd:68:05:15:fb:12:83:9b:2f:9b:11:2e:bc:46:
65:1d:6c:25:db:f5:0b:e0:f5:fe:16:aa:61:00:94:
d4:f3:e5:33:94:c4:84:ec:2b:39:29:55:11:16:87:
79:9d:a5:eb:76:34:7f:92:bc:db:e5:68:82:8e:d9:
b3:d5:ab:04:d8:72:08:3e:45:eb:83:63:86:7b:c2:
c6:1f:6c:cd:f9:22:8a:17:61:c9:2b:38:b6:ed:b0:
ac:76:73:37:e4:b9:9d:c2:23:4b:79:b4:dc:cb:ad:
cf:96:0b:3c:c1:d7:0e:eb:df:90:7e:84:af:4c:80:
ff:78:ad:8a:c5:63:b3:b3:e3:05:35:ca:ac:c4:a7:
12:98:8b:da:af:fc:60:a2:2e:60:74:95:63:5a:fb:
c0:2f:eb:69:64:76:57:05:fe:32:c9:17:a5:4a:0e:
50:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:DD:52:01:9F:C4:CC:B4:DC:D5:2F:71:07:0E:72:45:74:43:6A:26
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Ft1SAZ_EzLTc1S9xBw5yRXRDaiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.85.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:84:e5:b1:55:24:d3:92:1f:96:34:f3:99:d0:45:c6:a0:d0:
af:29:9f:4e:10:7d:ad:47:7c:bd:44:c8:7f:cd:fa:f5:5c:d5:
42:ec:30:a6:a7:1a:f6:3e:7e:67:e8:a1:e6:d5:b6:bd:16:53:
e4:76:7e:ba:37:e2:98:c9:6d:bd:99:69:de:2a:d4:d2:4e:da:
cd:f2:ed:ca:6f:85:1c:5a:82:c2:40:3c:53:18:cf:7e:4b:e1:
da:a9:69:d5:cc:73:5c:8a:46:10:cb:0c:c7:87:42:ac:1b:fc:
a1:de:6f:5e:b1:e8:7d:e7:37:6b:f9:8f:34:b7:3b:78:31:1e:
e0:47:8a:0c:dd:9c:7f:52:98:c4:ef:40:ac:49:dc:80:9c:bc:
66:43:99:2b:55:0e:6c:1a:c3:57:9a:26:32:f2:5d:76:ee:2e:
fa:92:86:eb:61:88:1c:30:5c:b1:b0:b4:b5:3d:a3:92:4f:68:
69:d7:f9:b1:a9:24:66:1c:33:4e:02:ef:c2:77:ae:36:3e:07:
7b:e1:69:39:cb:b8:50:19:bb:0a:c6:1c:7a:ff:df:b2:b0:02:
85:87:26:24:68:7a:1d:52:a8:4c:1a:12:d3:92:f8:ed:37:4d:
cc:a0:a2:bd:9d:fa:b6:57:6a:7e:49:df:56:fe:20:2f:0b:69:
72:e2:83:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 28 17:38:30 2023 by rpki-client on console-fra.rpki-client.org