Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/G1FCGlT2Hm9kxC9WI5QY9lyTE_c.roa
File: G1FCGlT2Hm9kxC9WI5QY9lyTE_c.roa (raw, json)
Hash identifier: bQMLGqoF8/84h6g2ivo+65LDCgVSohNEkoL4+Cb2OsU=
Subject key identifier: 1B:51:42:1A:54:F6:1E:6F:64:C4:2F:56:23:94:18:F6:5C:93:13:F7
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018A4364A8949A69A678C037E59304BE9B03
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/G1FCGlT2Hm9kxC9WI5QY9lyTE_c.roa
Signing time: Tue 29 Aug 2023 22:23:04 +0000
ROA not before: Tue 29 Aug 2023 22:23:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 89.34.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 Nov 2023 05:46:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:43:64:a8:94:9a:69:a6:78:c0:37:e5:93:04:be:9b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Aug 29 22:23:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b51421a54f61e6f64c42f56239418f65c9313f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8d:6d:d3:80:f7:13:56:04:f7:05:8c:8f:ab:
e5:23:52:f7:04:6e:dc:1b:b4:96:27:6a:5e:49:be:
db:2c:a6:4e:d8:bc:4f:5d:cc:f2:38:ae:79:d2:77:
a2:7f:91:8e:17:52:25:89:38:07:81:6d:da:6a:50:
d8:75:fc:f0:18:3b:a0:d2:c7:9c:25:bb:47:e4:6a:
91:0e:9b:91:9e:e4:86:d5:cd:5d:b3:4e:c1:d4:14:
ac:77:97:c5:a0:99:67:cc:e6:09:22:e1:06:4b:0f:
06:71:a0:2d:b5:97:e5:28:b1:bd:0d:79:1c:40:52:
19:b7:bf:e2:3b:73:a5:f6:6f:76:37:8a:ae:bf:33:
ee:1a:63:1b:4b:dc:6a:b6:bd:0b:21:61:13:60:1e:
90:28:f7:59:af:37:cf:ed:03:44:d4:a8:19:87:70:
84:da:8a:8e:64:a5:0b:8b:0f:82:cc:43:02:72:35:
85:2b:9b:52:58:6c:42:bf:74:cf:5d:59:7c:4f:af:
0c:af:78:c5:3c:5c:5e:fc:77:14:a0:c3:bc:7c:35:
2d:65:70:99:2c:80:4c:ee:53:e0:7b:68:c4:67:08:
a0:4c:ef:eb:5f:e0:50:b4:a8:f2:6b:8c:ee:0e:30:
fd:f4:6b:7f:fa:86:85:e1:33:36:c1:84:09:1b:d8:
18:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:51:42:1A:54:F6:1E:6F:64:C4:2F:56:23:94:18:F6:5C:93:13:F7
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/G1FCGlT2Hm9kxC9WI5QY9lyTE_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.227.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:2b:00:70:f6:63:dd:3f:9c:c1:3c:97:0a:0a:87:25:dc:97:
b2:18:d9:d5:8b:d0:cd:1e:a4:b4:2d:20:46:21:5a:97:c2:a7:
d7:bb:a8:61:84:c8:3d:e0:d3:cf:83:6e:29:b5:02:c4:d1:fe:
f8:18:68:ed:ec:50:d3:fb:ba:a2:a8:be:51:5b:3f:cd:72:18:
b5:ae:a0:10:ec:74:01:c5:4e:50:a7:f5:3c:cf:d6:4b:18:7b:
96:78:86:e7:bd:2b:4d:39:c1:00:da:e4:cb:25:e4:37:36:f1:
06:62:10:09:30:a6:ee:f6:78:0f:89:d2:66:16:30:8e:61:d7:
87:cb:e6:fe:24:f9:55:e3:29:41:0c:ee:4d:f4:cc:ed:45:bd:
a8:21:f7:7e:b3:5c:78:09:3d:07:ec:10:ee:90:4b:a4:31:d6:
01:47:3c:c2:13:cb:8c:9b:05:92:63:dd:20:d0:d8:c2:89:2b:
52:d2:83:e6:bb:ba:f0:4d:24:fd:6d:0d:d7:ce:c6:4b:74:ac:
1d:74:4d:a5:78:47:57:e6:06:6f:ee:a5:00:ec:f5:a0:02:f7:
98:99:dd:1a:0d:8e:93:a7:0a:82:5f:a8:50:bc:8a:c2:00:69:
59:31:2e:c9:88:23:08:a7:29:17:98:a2:7c:89:15:61:c8:ca:
12:e9:6b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:49 2024 by rpki-client on console-ams.rpki-client.org