Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/K8Wv8YrYw7dHF5xaArNM_PiFVrs.roa
File: K8Wv8YrYw7dHF5xaArNM_PiFVrs.roa (raw, json)
Hash identifier: JI/3OcRQQo/P8MZc0fDWtHgnl8XYrQn8WqZ5e8h1ccg=
Subject key identifier: 2B:C5:AF:F1:8A:D8:C3:B7:47:17:9C:5A:02:B3:4C:FC:F8:85:56:BB
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019011F6F0E67076854E58A3BBD14D662261
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/K8Wv8YrYw7dHF5xaArNM_PiFVrs.roa
Signing time: Thu 13 Jun 2024 14:18:34 +0000
ROA not before: Thu 13 Jun 2024 14:18:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 24 Jul 2024 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:11:f6:f0:e6:70:76:85:4e:58:a3:bb:d1:4d:66:22:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jun 13 14:18:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2bc5aff18ad8c3b747179c5a02b34cfcf88556bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7c:6b:17:96:d5:61:bf:9c:35:ab:86:73:5e:
6b:f5:60:90:23:f4:1d:11:4d:58:e4:1e:71:a4:02:
e8:82:13:ab:ce:73:a1:ab:61:01:c2:26:6c:d2:f2:
73:84:7b:84:9d:ac:b5:b1:48:8c:9d:2a:d8:22:54:
6a:de:6e:37:44:30:06:40:db:1b:9e:d9:58:28:5b:
ce:20:05:ac:82:7f:2d:45:39:cc:b1:a7:7a:24:97:
7f:34:4e:45:53:f9:e2:a1:24:c4:06:83:3c:bd:a5:
18:22:97:00:52:e4:3c:49:ba:c3:47:56:4f:31:2b:
c6:a5:64:e8:1a:17:b7:83:dc:f6:7b:bd:77:6c:82:
47:19:95:42:e5:44:fd:41:f4:55:b3:84:d5:29:71:
13:48:be:a7:a5:86:9f:36:9d:21:ec:2c:70:d4:0a:
83:59:e9:c1:d3:25:54:90:7d:18:af:0f:c5:4a:4f:
00:bc:f6:98:88:f2:c4:62:d6:b3:9f:df:9b:56:d1:
2b:e6:83:e1:76:da:fc:7e:e0:92:38:4c:c8:34:53:
d8:01:0a:32:af:4c:cc:0c:81:da:c6:4b:f8:3b:a9:
30:f9:f9:5c:6d:bf:fb:1f:b7:68:c9:80:b0:1b:04:
cc:f4:54:19:5e:e0:f5:7d:29:b5:c0:ef:d3:40:a6:
1f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C5:AF:F1:8A:D8:C3:B7:47:17:9C:5A:02:B3:4C:FC:F8:85:56:BB
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/K8Wv8YrYw7dHF5xaArNM_PiFVrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.81.0-89.42.83.255
Signature Algorithm: sha256WithRSAEncryption
3d:3b:2c:0a:8e:8b:2e:eb:1f:48:43:ca:57:b4:f5:4e:88:12:
0d:90:57:28:c5:8b:d2:9f:7d:d3:2c:c5:d2:8e:66:72:8b:6a:
eb:a2:fb:cd:4d:cb:1f:df:98:11:87:f5:bd:38:d0:e6:aa:3c:
b7:86:1d:3b:de:3b:4f:ae:28:74:3a:23:90:50:93:60:a8:87:
66:e8:1f:31:53:b1:0e:3b:ba:ed:2a:07:94:f1:b6:be:27:6c:
f1:ed:37:c2:3e:df:7d:07:01:a3:f7:e6:b1:bb:84:3f:ed:19:
36:89:c4:a8:52:cb:bf:31:ca:5e:00:85:bc:c6:e7:3c:31:b8:
f8:9f:81:d4:f1:a9:fa:48:ea:f0:af:4e:ff:54:7b:e7:cb:87:
fa:67:17:04:cd:0e:07:d4:a5:8b:e9:53:07:c7:ce:57:b7:56:
17:6b:96:cd:0d:d0:16:da:8f:e6:eb:48:ee:50:bc:b4:e6:31:
35:6b:5e:66:0e:bb:f9:f7:9c:fb:11:12:43:4e:6d:bd:ab:fc:
16:7e:29:04:0b:20:32:9c:c5:02:80:66:15:b4:60:a1:ca:f2:
29:04:28:91:a1:92:1d:3a:ef:a2:c9:1c:d7:82:a7:45:60:4d:
45:b1:80:58:a9:c9:e2:20:37:2c:60:28:75:64:55:05:6c:42:
15:7d:34:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 24 07:50:30 2024 by rpki-client on console-ams.rpki-client.org