Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/H1kRivojb7AzBjsGOk2fA84k_t4.roa
File: H1kRivojb7AzBjsGOk2fA84k_t4.roa (raw, json)
Hash identifier: GmYDzqesvP5WaIFSt6FtM9r01OiULtWSK3PSHu8PwZ4=
Subject key identifier: 1F:59:11:8A:FA:23:6F:B0:33:06:3B:06:3A:4D:9F:03:CE:24:FE:DE
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0189B9E375508782A354D2387B168A804C03
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/H1kRivojb7AzBjsGOk2fA84k_t4.roa
Signing time: Thu 03 Aug 2023 05:33:58 +0000
ROA not before: Thu 03 Aug 2023 05:33:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203511
IP address blocks: 89.33.192.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Sep 2023 06:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b9:e3:75:50:87:82:a3:54:d2:38:7b:16:8a:80:4c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Aug 3 05:33:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f59118afa236fb033063b063a4d9f03ce24fede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cc:79:db:b8:7d:20:6b:18:39:57:bb:0e:63:
c3:de:79:e4:29:9b:fa:62:f1:e0:76:80:3f:cf:57:
0a:c4:0b:22:44:60:f3:df:fe:dc:8c:94:76:18:b1:
89:ef:ff:69:ad:af:ba:1a:6f:07:eb:18:56:5a:7e:
2c:a6:74:b6:f1:92:7c:84:95:3f:72:de:de:9b:ba:
8d:30:61:96:1d:45:e0:37:25:01:0c:af:f8:6a:68:
4b:34:70:32:3f:f1:22:bc:45:b5:27:c3:a4:f1:a4:
dd:8e:4a:84:bd:fa:99:96:4f:4c:ef:17:19:60:1d:
2a:a9:d3:5b:92:7d:9a:65:04:fd:4b:12:43:36:cf:
4f:6c:b0:3e:d6:db:98:ae:f3:18:03:0d:6a:69:32:
f5:58:4f:13:a2:68:5e:0b:cc:4d:7c:47:8a:b2:b4:
59:68:2f:ee:23:e6:a1:8e:92:f5:64:c1:25:8b:ec:
c1:75:b8:a5:3d:db:ad:8b:d8:35:a3:b0:41:2f:80:
ca:96:e6:48:0b:f6:6b:cb:b7:22:d8:39:b2:57:85:
7c:96:7e:71:5e:2f:70:13:68:ec:18:1e:d6:bd:45:
6c:1c:a1:c4:4e:16:1d:48:c5:fa:fa:68:6a:ed:b6:
67:3d:29:0d:61:32:77:0e:6f:e2:53:78:a0:73:8f:
e7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:59:11:8A:FA:23:6F:B0:33:06:3B:06:3A:4D:9F:03:CE:24:FE:DE
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/H1kRivojb7AzBjsGOk2fA84k_t4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.192.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:09:b1:a1:09:8e:1c:28:ad:74:af:22:f8:5a:8f:83:1b:3c:
05:bf:ce:4d:be:2b:1e:46:64:d6:40:a6:c7:b6:01:06:12:64:
91:0a:a2:6e:52:c0:89:60:c8:a8:7a:f6:15:83:0d:3c:bb:38:
12:28:87:dd:99:6b:4e:92:c2:28:1c:c8:21:fa:9f:f0:9a:57:
88:31:15:59:cc:79:a9:9a:8d:6f:6f:a3:c1:d6:ff:9e:7b:7b:
8f:4a:6b:02:3e:af:ab:24:8e:fc:49:49:fd:1e:f9:11:f6:99:
fd:24:ae:c8:19:4a:83:ab:ff:33:2e:00:d4:8f:1e:06:26:06:
be:58:d8:c3:f8:dd:1b:a5:24:24:03:17:ec:af:6b:4e:eb:a3:
2d:db:ea:9a:8c:1a:d7:4d:7d:b0:f3:24:ee:b6:70:ed:45:53:
ac:2b:fa:0a:cc:28:f3:63:1d:a7:d8:dc:ac:64:db:42:0b:77:
78:68:71:c1:6e:9e:3b:d3:bc:ec:84:34:f8:8a:43:cd:25:1f:
30:04:43:79:b3:af:d4:fc:d6:0e:9c:62:76:d0:48:d2:19:38:
3c:49:fc:33:90:31:06:53:d6:46:c5:5a:66:3c:d6:0c:8a:70:
48:59:07:7a:05:69:8b:4c:c7:16:63:4c:de:28:07:1b:fe:94:
c1:5f:c8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:49 2024 by rpki-client on console-ams.rpki-client.org