Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/HDLuUs2Om_LJi55mi7Cy7M3cv3c.roa
File: HDLuUs2Om_LJi55mi7Cy7M3cv3c.roa (raw, json)
Hash identifier: 8Ax216a4NT6GIXaUgbwf5Gn1WKJfGx2R8mkMm2PCGhQ=
Subject key identifier: 1C:32:EE:52:CD:8E:9B:F2:C9:8B:9E:66:8B:B0:B2:EC:CD:DC:BF:77
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01896950224AFCEF7B5421132D3B1274AE1A
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/HDLuUs2Om_LJi55mi7Cy7M3cv3c.roa
Signing time: Tue 18 Jul 2023 14:03:26 +0000
ROA not before: Tue 18 Jul 2023 14:03:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54339
IP address blocks: 89.42.80.0/24 maxlen: 24
89.42.81.0/24 maxlen: 24
89.42.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Aug 2023 06:15:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:69:50:22:4a:fc:ef:7b:54:21:13:2d:3b:12:74:ae:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jul 18 14:03:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c32ee52cd8e9bf2c98b9e668bb0b2eccddcbf77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:3e:22:cc:c4:3b:dc:f1:4a:54:ce:92:58:1e:
2f:6a:ed:37:d3:87:7b:aa:0c:69:6a:85:8d:49:74:
b1:a8:7b:81:bf:77:e4:61:f2:a6:72:09:cf:70:cc:
03:db:ec:70:05:2d:8c:59:44:72:3b:ec:bf:aa:00:
27:0a:8d:81:75:d0:bf:d9:80:19:07:86:78:3e:a6:
ee:9a:78:82:22:e4:22:0d:d9:31:7c:3f:01:74:cd:
a8:e4:17:a1:0d:83:c4:c9:0f:58:7c:e2:5c:55:37:
c4:d3:ce:74:6b:44:9a:bb:05:0b:e5:50:44:ce:c1:
c6:d6:7e:ab:95:d8:7b:83:70:07:3d:24:3a:1d:b4:
d9:c9:03:ad:70:69:55:87:27:ce:f7:94:4a:59:90:
83:be:07:37:f9:d4:a5:1f:61:df:a9:a0:d0:4e:e8:
72:6e:dc:72:6d:81:ae:48:74:cd:77:e1:81:61:b1:
9b:f0:8d:fa:18:ac:91:08:38:9d:dd:2f:97:f5:15:
0f:1e:ee:c8:4a:19:82:00:4f:59:b3:18:49:ca:f0:
cb:53:fc:72:c3:6d:e9:87:00:c3:ed:64:7e:af:19:
ba:db:02:4c:36:34:f0:45:26:ec:b2:e2:a2:9e:56:
0b:0d:e8:26:b3:9a:d4:6d:82:60:72:8b:64:57:a7:
ef:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:32:EE:52:CD:8E:9B:F2:C9:8B:9E:66:8B:B0:B2:EC:CD:DC:BF:77
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/HDLuUs2Om_LJi55mi7Cy7M3cv3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.80.0/23
89.42.89.0/24
Signature Algorithm: sha256WithRSAEncryption
86:1b:e3:f2:14:b8:a5:b5:cf:ca:06:05:50:87:73:57:6f:3f:
11:7a:12:08:5b:d7:f7:51:d1:66:48:2a:7f:b6:a6:cc:08:98:
23:62:b5:b6:9d:0a:a9:1c:a3:6a:5b:15:0b:18:6e:e8:d4:fa:
a7:6c:5b:e9:60:86:26:a8:74:ad:b9:46:38:ac:ee:90:b7:f4:
18:4b:59:41:38:86:08:5a:7d:31:a8:09:5c:81:72:e6:a2:da:
24:c9:55:cc:ce:63:9a:0f:fa:a1:05:2f:55:a8:93:3c:5b:42:
38:aa:e9:4f:26:cc:c3:d6:d6:b0:9d:82:1c:08:46:14:14:bc:
75:d8:17:eb:47:7a:b2:15:70:ec:f6:22:4b:75:5b:01:8c:e3:
1f:3e:55:3e:59:41:f5:a7:48:eb:c2:f1:0b:61:24:a4:96:40:
62:a2:2c:e6:7d:df:a5:84:c5:cc:3d:8c:47:98:2b:04:40:b3:
23:97:34:f1:cd:08:61:fb:06:cc:40:37:0c:d5:7f:62:e7:1a:
86:0d:d5:09:ad:dd:f9:68:bd:51:e6:53:d4:a2:6f:77:2b:de:
cb:c3:bf:7e:a7:d0:33:12:f2:f0:60:ac:c6:e1:00:6e:21:f4:
2f:e8:58:3c:c2:a9:54:5a:8f:3a:5e:ab:23:fe:76:1b:22:c4:
26:27:72:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:19 2024 by rpki-client on console-fra.rpki-client.org