Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/I1TTJG0o9GsyOISfRJ7DT8nADMw.roa
File: I1TTJG0o9GsyOISfRJ7DT8nADMw.roa (raw, json)
Hash identifier: p9+wdTdz9nUMc1w1cZ/DsFm9gAFQBlkf8Xfhn9ydOWU=
Subject key identifier: 23:54:D3:24:6D:28:F4:6B:32:38:84:9F:44:9E:C3:4F:C9:C0:0C:CC
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018CC26D308E1310204C01332EA4F2C7F445
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/I1TTJG0o9GsyOISfRJ7DT8nADMw.roa
Signing time: Mon 01 Jan 2024 00:29:44 +0000
ROA not before: Mon 01 Jan 2024 00:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216032
IP address blocks: 89.42.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Jan 2024 07:50:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:30:8e:13:10:20:4c:01:33:2e:a4:f2:c7:f4:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 00:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2354d3246d28f46b3238849f449ec34fc9c00ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d5:ef:f7:79:6c:3e:9f:c7:a0:b8:b9:a8:7e:
cb:0b:a0:f7:a9:05:7c:00:16:f1:6b:9b:39:9d:08:
41:17:07:d4:38:61:e5:ec:f3:2c:d2:c9:ad:82:1d:
b8:fb:e5:e7:0b:e7:89:04:fa:f9:c8:33:cc:e4:0a:
fc:65:d7:63:6c:e2:34:18:86:95:34:e4:7d:29:a6:
ff:2e:51:94:9b:2b:c3:ad:93:c2:06:66:03:a8:d6:
0e:43:31:e2:8f:89:bb:31:7a:f7:84:5f:f5:05:0c:
ba:c7:ee:d3:c8:a1:e9:fc:0f:67:ee:5d:25:49:14:
61:94:87:00:05:c3:66:e8:21:82:de:6a:6b:19:93:
ca:ea:75:cf:9b:ae:18:57:ac:1d:22:ee:02:a4:fd:
55:eb:96:b1:b2:2b:3e:c1:62:dc:f8:00:14:55:be:
9d:1c:27:90:a8:94:6c:a3:1b:c7:34:53:20:69:29:
58:43:5a:a6:de:4c:54:be:6c:92:5a:f7:ef:1b:c5:
9e:06:53:f5:ff:21:ef:87:8f:ee:98:57:cd:2d:e8:
52:49:a7:cc:92:71:f8:32:8e:6c:73:5c:a5:cc:c4:
8f:d5:0e:a0:51:14:6f:fa:9a:cb:d2:9e:62:0f:d1:
85:fa:74:ca:0b:3e:fa:90:01:aa:de:8c:15:fb:a8:
ba:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:54:D3:24:6D:28:F4:6B:32:38:84:9F:44:9E:C3:4F:C9:C0:0C:CC
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/I1TTJG0o9GsyOISfRJ7DT8nADMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.82.0/24
Signature Algorithm: sha256WithRSAEncryption
13:1c:10:22:bd:e7:e8:65:7c:99:ca:d6:48:35:b9:d5:30:19:
f5:70:6d:e4:ce:95:db:93:1a:6f:7d:b3:c0:3e:c6:11:89:cc:
d7:13:ad:87:83:fc:97:49:82:4f:6c:6b:d1:6d:45:56:69:a0:
93:ed:e9:85:e7:ae:0c:53:9f:79:ee:f4:b4:48:cc:f5:69:90:
87:3c:47:02:f2:ff:7b:df:3f:a9:01:7d:ae:8b:24:8a:ca:af:
25:eb:f7:ca:12:2f:4f:35:58:8f:94:d6:d4:1d:fc:75:fd:d6:
d8:46:68:20:8f:99:09:b6:f2:52:0c:66:04:e3:0b:29:8a:59:
f5:70:6e:ee:fd:25:d0:97:a2:0f:14:b0:68:77:b2:67:4f:59:
52:70:5b:2a:45:0e:fb:0e:7e:8c:49:22:01:54:0b:25:82:16:
0e:bf:30:3b:d1:46:cb:58:6b:fc:a4:01:aa:70:a4:a3:b3:fc:
1b:d8:ee:86:1a:51:6d:d5:a2:49:52:26:1c:dc:37:e5:56:c6:
9b:26:f3:09:d4:12:9c:4e:89:fd:6c:23:ef:3b:00:3a:9c:8e:
80:8d:b0:b7:3f:6f:67:31:d1:8e:ec:74:da:3b:c8:9f:12:e7:
4c:34:35:ac:9b:6f:3a:13:b5:fd:8a:33:98:ef:98:c2:54:72:
5d:dc:e1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:49 2024 by rpki-client on console-ams.rpki-client.org