Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/GS3Jk2IDAalOY1K3NBOnFQQ9Yt0.roa
File: GS3Jk2IDAalOY1K3NBOnFQQ9Yt0.roa (raw, json)
Hash identifier: Aq3low8fjvV+yI+dCTJ8dZUII1IW6GtkpmiStA5onKA=
Subject key identifier: 19:2D:C9:93:62:03:01:A9:4E:63:52:B7:34:13:A7:15:04:3D:62:DD
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0189D3B93A73453531803192CB9E5669BBDB
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/GS3Jk2IDAalOY1K3NBOnFQQ9Yt0.roa
Signing time: Tue 08 Aug 2023 05:57:58 +0000
ROA not before: Tue 08 Aug 2023 05:57:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 89.42.90.0/24 maxlen: 24
89.33.195.0/24 maxlen: 24
89.46.1.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d3:b9:3a:73:45:35:31:80:31:92:cb:9e:56:69:bb:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Aug 8 05:57:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=192dc993620301a94e6352b73413a715043d62dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:cf:fe:9d:6e:9b:71:83:5f:a6:aa:b9:f1:96:
99:e2:e3:0b:84:fa:f7:a6:ab:35:78:0e:95:e1:a8:
ee:89:4a:73:bf:f5:c4:79:be:9c:02:17:52:d6:ef:
02:b1:bd:b8:8b:0b:a8:68:da:bb:3e:99:9e:9b:53:
9e:0b:21:81:76:67:9a:57:0d:6d:76:bc:1c:05:21:
6a:2f:76:e0:bf:9b:e4:38:e0:7c:25:9a:09:f4:69:
93:ac:59:be:77:51:cf:dd:81:b8:60:18:07:dc:44:
5b:7f:f6:5b:7d:c1:8b:bf:23:08:98:f7:92:78:dc:
01:6d:49:e3:cd:86:e5:12:30:94:fd:9e:3a:20:77:
56:7c:b1:54:12:45:1f:b9:c5:c4:cf:f8:34:c7:90:
dd:e8:ce:fd:4d:bd:fb:48:fb:00:98:e9:9c:75:20:
cb:7a:4f:6c:be:e2:d4:4f:5c:c5:51:aa:a7:7d:c5:
4a:90:03:7c:b2:c1:c8:2a:49:e2:6d:a0:a8:86:2f:
ff:e0:bd:88:82:d3:27:44:85:22:9f:e7:02:ab:24:
47:d0:f0:52:c0:ab:93:00:67:9f:2f:29:45:bf:08:
d6:8e:68:6d:2b:76:d1:92:05:4c:03:6e:dc:4c:e0:
c5:66:65:fe:7f:f6:2a:9f:07:e6:8d:fd:86:74:8b:
11:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:2D:C9:93:62:03:01:A9:4E:63:52:B7:34:13:A7:15:04:3D:62:DD
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/GS3Jk2IDAalOY1K3NBOnFQQ9Yt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.195.0/24
89.42.90.0/24
89.46.1.0/24
Signature Algorithm: sha256WithRSAEncryption
77:bf:5d:b8:49:c2:9f:16:58:22:8a:f3:4f:66:1c:c2:71:72:
84:1c:3a:b0:f0:c8:7b:4b:3e:4c:31:0d:7f:eb:23:50:23:44:
f4:91:11:c3:95:d1:8d:c9:95:b0:e2:8e:8e:f2:f4:14:ef:e0:
f0:e0:e6:84:6f:e3:38:06:76:8f:c5:3d:3c:0e:2f:a6:e9:cc:
ee:c7:68:06:6a:9c:97:13:aa:ee:ac:15:90:a2:ba:ab:94:71:
7c:f4:47:6e:b0:7a:70:ba:98:70:02:c6:b5:94:b7:50:a9:ab:
74:ec:fc:28:1c:a4:fe:7d:2b:ed:ce:31:b5:22:d2:f5:a0:b6:
fb:f7:f2:db:a7:7d:f0:b7:1e:bc:29:44:19:de:55:74:76:a7:
67:3d:f5:c2:ed:8c:51:b1:0e:d2:13:fa:e5:07:b6:c8:96:38:
f3:14:b9:78:db:95:fc:be:49:63:04:92:0c:48:28:05:31:f4:
f4:e8:b9:ba:06:88:fe:75:34:8b:14:c8:f6:09:b5:69:4f:f8:
85:08:19:15:e1:c0:27:ce:35:11:69:cf:e4:8a:0d:5a:74:c6:
45:df:49:5c:aa:2c:a4:2e:ad:61:d2:0b:86:fe:5b:9d:af:83:
1a:49:be:74:6b:6c:e1:08:2e:a5:4c:58:28:df:05:95:5f:51:
2b:51:1f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 23 06:45:14 2023 by rpki-client on console-ams.rpki-client.org