Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Hf-jtgiQWJnGPD5FhINFteJJ61w.roa
File: Hf-jtgiQWJnGPD5FhINFteJJ61w.roa (raw, json)
Hash identifier: xhqrxhTFJO6tn9UFxYu8p/XOUUQ/CDi6rbVymnnpHhY=
Subject key identifier: 1D:FF:A3:B6:08:90:58:99:C6:3C:3E:45:84:83:45:B5:E2:49:EB:5C
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018A26D0BE808EEE5849532DCE8C1B934F20
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Hf-jtgiQWJnGPD5FhINFteJJ61w.roa
Signing time: Thu 24 Aug 2023 09:12:09 +0000
ROA not before: Thu 24 Aug 2023 09:12:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.42.82.0/23 maxlen: 23
89.42.80.0/23 maxlen: 23
89.42.92.0/24 maxlen: 24
89.37.119.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:26:d0:be:80:8e:ee:58:49:53:2d:ce:8c:1b:93:4f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Aug 24 09:12:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1dffa3b608905899c63c3e45848345b5e249eb5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:96:3f:fe:a5:a2:f9:23:dd:94:d5:95:5b:97:
db:fb:46:72:1b:b0:e3:e9:32:f9:bc:ad:7c:37:25:
75:25:86:1d:d6:c2:4e:5e:cb:2d:61:b9:d1:fc:a0:
b3:80:b3:06:3b:1e:44:95:9d:39:05:20:73:49:9a:
2a:5a:09:91:0c:20:7b:3e:2b:72:1f:cf:40:36:b9:
bd:c2:fb:1b:86:57:a3:d7:2e:9a:fe:62:92:60:71:
fe:64:cc:21:e0:8e:40:f7:44:f2:c5:bf:4f:f9:92:
92:8e:0d:bd:65:35:54:ab:00:f3:6f:ae:cd:55:a7:
00:44:37:0d:01:18:b9:d0:65:f2:72:86:58:72:88:
35:92:49:b0:fb:26:96:bd:84:d9:cb:2e:6f:c0:73:
59:02:7c:20:bc:4a:38:8c:1f:5d:70:9f:92:86:23:
40:cf:d0:a4:eb:4d:fb:ca:f3:81:be:41:21:b8:a0:
8f:d6:19:a1:fb:a4:b7:0f:47:91:12:2c:db:6e:d9:
6b:18:f7:7e:5e:e5:a8:4a:9d:f3:91:c0:ac:d4:9e:
5d:6f:b4:f0:a3:d9:f2:8b:a5:e0:58:d2:4e:78:2f:
ed:3a:32:1e:d5:4a:2f:30:8b:13:9b:c9:0b:b6:a3:
4d:f6:1a:03:8b:97:bc:da:13:de:0d:6e:44:3b:3a:
d1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:FF:A3:B6:08:90:58:99:C6:3C:3E:45:84:83:45:B5:E2:49:EB:5C
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Hf-jtgiQWJnGPD5FhINFteJJ61w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.119.0/24
89.42.80.0/22
89.42.92.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:cf:1e:c1:1b:ba:82:91:54:82:ac:af:08:3d:f1:b5:a5:95:
7c:8c:e3:33:c1:e2:46:fa:ab:98:85:24:7f:d3:58:71:9e:4f:
e0:ab:e8:9c:95:7f:1d:ed:93:3c:95:96:60:c8:b6:56:68:92:
c4:3d:92:b4:f9:36:99:82:33:eb:4e:d9:ab:e6:a7:15:d9:3c:
96:e0:38:6e:e3:a9:4d:57:c5:5b:ec:a1:d4:c9:60:f8:39:fe:
d8:e2:f3:45:de:87:3e:b6:5a:bc:e4:99:e0:f5:ba:80:c7:d4:
c6:3c:39:be:d9:a8:7a:a6:7d:c8:56:d1:ce:2e:ef:55:cf:6e:
89:df:fd:ce:0b:a4:64:25:fc:51:92:1c:ae:e5:b2:56:cb:fa:
2a:0c:9c:b1:4c:c8:a0:98:22:43:9d:ea:33:d7:b7:01:85:c9:
b8:07:40:b8:54:81:7d:58:3b:74:a6:15:32:65:f5:4b:21:84:
12:6e:b2:8a:76:c6:b7:08:72:56:cb:ca:ba:78:cc:a6:cc:58:
39:20:5c:4c:a1:5d:63:da:73:7c:4f:21:f6:81:fa:d4:ff:68:
da:5b:68:dd:5a:fb:52:0c:9e:bd:4f:01:94:d1:1a:fd:21:65:
72:d5:9c:09:cc:05:c9:08:eb:4c:65:31:e4:c4:24:0b:e9:8c:
ad:3d:1a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 24 22:30:10 2023 by rpki-client on console-fra.rpki-client.org