Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/J8F0Od_5Qqa3jMsoZ8bkO-SolGM.roa
File: J8F0Od_5Qqa3jMsoZ8bkO-SolGM.roa (raw, json)
Hash identifier: quhULyaKrE7EJnbg1gOmiAhvdOrkC+C7yq40q/O9QJI=
Subject key identifier: 27:C1:74:39:DF:F9:42:A6:B7:8C:CB:28:67:C6:E4:3B:E4:A8:94:63
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018C72204420E7A08A857FBE2498B98543D0
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/J8F0Od_5Qqa3jMsoZ8bkO-SolGM.roa
Signing time: Sat 16 Dec 2023 10:16:06 +0000
ROA not before: Sat 16 Dec 2023 10:16:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
89.42.80.0/23 maxlen: 23
89.46.3.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:72:20:44:20:e7:a0:8a:85:7f:be:24:98:b9:85:43:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Dec 16 10:16:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27c17439dff942a6b78ccb2867c6e43be4a89463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:19:e0:c6:dd:40:79:16:e0:1b:d3:f0:16:f3:
4b:a4:e7:af:fa:d0:ff:8a:19:e0:b2:16:dd:8d:fc:
e5:85:4a:77:be:ba:24:ef:78:d4:a2:37:1a:51:cf:
b2:89:53:1e:29:76:57:21:29:25:89:d7:fa:52:7d:
f1:23:63:e6:20:5d:59:1f:4c:f2:d7:52:a2:69:bb:
81:66:31:50:fd:58:c3:c4:fb:cd:4c:97:06:51:76:
4b:d7:dc:b7:2b:94:81:67:06:5b:b8:de:ec:13:72:
0f:90:aa:f1:a4:d1:76:d7:9e:09:80:6f:6f:f3:a0:
83:5f:c0:fb:43:2b:6e:e8:43:44:be:70:d0:80:41:
be:32:94:cb:e3:51:b2:c1:d2:b5:8f:1b:e3:2f:be:
83:71:28:9f:b7:33:5c:78:c6:94:1a:d4:98:a8:06:
52:6b:22:b4:a9:a4:45:d2:43:af:b6:0a:37:26:21:
00:93:41:4b:b1:9a:e0:dd:c9:c2:a8:87:89:30:ed:
fb:37:07:1f:88:6f:c5:d1:75:4e:75:72:1e:0c:7e:
5c:66:b1:cd:82:5e:db:35:ae:5a:58:64:54:d2:04:
4c:c0:e9:e3:2c:6c:35:7b:27:08:1e:5d:96:2a:42:
37:36:1d:0b:bc:95:23:0f:5a:45:a3:30:1e:8c:c5:
e0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C1:74:39:DF:F9:42:A6:B7:8C:CB:28:67:C6:E4:3B:E4:A8:94:63
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/J8F0Od_5Qqa3jMsoZ8bkO-SolGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.80.0/22
89.46.3.0/24
Signature Algorithm: sha256WithRSAEncryption
35:9e:57:82:97:45:3c:9f:22:87:2f:1f:e9:15:6a:08:a6:f6:
26:55:7d:15:ac:c0:a1:70:e6:84:b0:6e:d8:f6:bd:e5:6f:5c:
cf:50:18:10:50:41:23:90:2f:a4:72:77:0b:24:5c:2a:86:ab:
b3:54:c0:4f:40:46:a5:61:c9:68:04:f9:1e:01:0c:16:51:c2:
33:10:fc:a2:00:fe:5e:29:79:8b:54:00:31:94:92:65:a6:2b:
46:a2:87:9c:59:4c:96:9e:4a:20:3b:42:ae:2e:8c:aa:12:72:
2a:13:d9:54:f3:c8:91:71:6f:2b:b3:cc:b9:3f:c5:66:31:63:
ed:2f:fb:66:98:f8:d2:53:b9:69:7d:14:b4:cd:60:00:b5:6d:
7e:58:d6:f4:49:26:ae:51:34:23:2c:12:4a:e0:4d:90:ab:21:
f6:f7:ed:6b:26:f7:74:5d:ba:e4:5e:b1:84:ee:ac:f2:53:6f:
b7:f7:2b:c4:38:52:bf:a2:ca:1e:94:73:68:2b:97:ba:0b:4a:
58:5f:24:51:95:d9:c1:db:d8:88:b9:94:ac:b4:ad:f1:b8:54:
9b:df:5b:7f:60:66:14:49:46:bf:17:b1:eb:b1:77:00:a6:49:
99:01:f2:b6:84:14:13:39:db:c2:d2:e6:e9:35:ac:16:7d:f3:
60:86:c2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 17 18:59:58 2023 by rpki-client on console-fra.rpki-client.org