Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/KGjcJejmpWL3ar2fpgAhNbM3xJQ.roa
File: KGjcJejmpWL3ar2fpgAhNbM3xJQ.roa (raw, json)
Hash identifier: 9B4HWY0zrPE9ef0Tx2EgPBgxMS0wjMYXrKJTBSXXqFQ=
Subject key identifier: 28:68:DC:25:E8:E6:A5:62:F7:6A:BD:9F:A6:00:21:35:B3:37:C4:94
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018A021C047BFC13F6B3A9500690D407DB53
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/KGjcJejmpWL3ar2fpgAhNbM3xJQ.roa
Signing time: Thu 17 Aug 2023 06:08:25 +0000
ROA not before: Thu 17 Aug 2023 06:08:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30644
IP address blocks: 89.42.81.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 24 Sep 2023 19:20:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:02:1c:04:7b:fc:13:f6:b3:a9:50:06:90:d4:07:db:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Aug 17 06:08:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2868dc25e8e6a562f76abd9fa6002135b337c494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b0:f4:e9:62:ee:d9:34:ba:a7:2c:88:e1:43:
95:e9:77:b6:9a:5f:54:74:fc:53:0c:44:09:59:48:
49:b0:29:d8:5b:a5:8e:99:c9:23:3a:ff:42:b0:b6:
40:d4:6f:a5:c6:7b:e6:21:aa:de:36:ae:ff:03:d6:
f2:c0:1b:ed:1c:b7:02:a0:64:50:e8:76:cb:c3:de:
ad:3d:50:23:40:74:c8:af:8e:22:73:30:d8:bb:c9:
bc:3e:bf:71:47:5a:3d:b3:41:e7:7b:e7:0b:83:38:
cd:7a:6b:25:48:5a:a3:4c:82:c3:ac:06:2d:a7:c5:
17:c2:62:1e:2f:b0:64:04:dc:a0:2a:f8:24:3c:b6:
cc:80:ff:c7:db:f4:79:59:5f:c2:1f:ea:12:06:00:
a2:83:b7:7a:5b:a0:68:7e:ee:13:5b:58:fd:a6:c9:
11:df:86:68:aa:36:37:1f:63:65:42:4a:e8:36:ce:
fa:66:e0:a5:5e:8b:42:94:aa:b8:bc:80:d6:15:ed:
d0:e6:dd:2d:cc:74:69:c5:52:1b:b1:ef:df:8b:1e:
31:86:d2:31:c1:ee:85:04:88:98:ff:24:b1:6f:a8:
55:2f:5c:b8:fc:56:0f:c5:be:1f:c9:ec:0d:23:89:
a5:af:9a:48:c8:2c:49:17:f8:59:be:8e:d4:51:48:
76:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:68:DC:25:E8:E6:A5:62:F7:6A:BD:9F:A6:00:21:35:B3:37:C4:94
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/KGjcJejmpWL3ar2fpgAhNbM3xJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.81.0/24
Signature Algorithm: sha256WithRSAEncryption
39:b0:42:81:2a:e0:90:2c:b7:e9:b4:31:f7:bf:6f:b9:fc:0b:
0d:c8:9a:25:8d:01:55:f6:7b:3f:24:3a:6a:87:d6:b4:a3:18:
f6:43:50:b9:0a:b2:17:8b:a2:f4:50:06:c7:17:f9:28:31:d6:
f1:23:56:28:ab:e6:88:3c:d8:2d:7b:4c:91:9b:b0:2b:b6:72:
8b:3b:c0:2f:24:4c:62:94:c4:76:6f:4b:52:42:78:f6:5a:5a:
57:7d:bd:f0:42:86:9d:7f:18:aa:bb:1c:49:12:ca:0c:30:91:
03:f6:be:0d:f8:69:fa:3f:e1:56:80:31:82:dd:56:94:33:a9:
e1:b5:3b:f4:0d:5f:85:fb:88:7e:93:a8:c9:56:40:87:52:52:
5a:e7:b0:d7:e4:96:ad:65:21:96:41:6c:40:17:9e:12:d9:56:
59:71:75:90:be:88:9a:5a:0d:1b:18:3a:e8:13:ec:64:ac:4f:
b1:a2:ab:ab:fc:b1:ab:70:23:d6:5a:ad:a7:95:ed:bf:5c:1c:
e9:03:30:3c:1d:9b:0a:2a:20:a0:85:6e:e4:e7:7a:4c:b5:c2:
ee:96:40:96:a4:4d:16:43:44:3a:3a:2f:43:c7:3f:a8:75:8b:
98:9d:f8:f3:91:ff:de:ff:42:c8:83:c1:d6:8b:f3:70:f2:6e:
e3:76:c6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:49 2024 by rpki-client on console-ams.rpki-client.org