Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Kws9xQLSS_m95WRIBbFiAPa87ZE.roa
File: Kws9xQLSS_m95WRIBbFiAPa87ZE.roa (raw, json)
Hash identifier: PAZqCglbRJHWNE2qc4nb3MwQlGDWtFinLvDPLGKcNj8=
Subject key identifier: 2B:0B:3D:C5:02:D2:4B:F9:BD:E5:64:48:05:B1:62:00:F6:BC:ED:91
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018CC26D2D0A3733CD16C4F00CC638D78EC4
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Kws9xQLSS_m95WRIBbFiAPa87ZE.roa
Signing time: Mon 01 Jan 2024 00:29:44 +0000
ROA not before: Mon 01 Jan 2024 00:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200636
IP address blocks: 89.42.80.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Mar 2024 10:14:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:2d:0a:37:33:cd:16:c4:f0:0c:c6:38:d7:8e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 00:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b0b3dc502d24bf9bde5644805b16200f6bced91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:0e:4f:f4:cd:e9:05:6c:75:00:ec:8a:63:aa:
b9:a2:63:a3:45:2b:bf:a6:e2:3f:08:66:1a:bc:49:
35:31:24:bf:b1:5d:e3:ed:da:af:d2:86:43:70:4e:
15:65:0a:ef:86:f3:08:ed:f8:6e:dc:90:7d:cf:e4:
04:ea:9f:ff:28:1f:6c:a3:6b:49:3b:3f:60:6e:31:
57:be:f2:92:9c:26:f2:1e:29:14:8c:ca:d0:02:93:
aa:a4:99:fc:45:bb:ea:3b:66:92:fd:48:ef:44:32:
e8:63:a3:f8:7d:d4:d9:8d:a5:c1:d3:37:df:68:bc:
cf:b7:fa:29:21:35:66:f1:9d:4d:34:98:b2:8b:f2:
9b:93:81:db:a1:4c:3d:91:89:ab:58:b2:f5:02:90:
02:8b:ec:bd:cc:7f:3f:9b:94:0a:3b:3b:6e:a7:67:
83:93:0d:d7:f3:c5:b2:01:e9:ef:f8:6b:9f:c2:ff:
8d:56:18:4a:5e:9e:20:c0:a0:46:9f:dc:40:78:26:
99:fd:fc:68:a3:ef:8f:db:8c:23:3b:a9:5d:09:c9:
07:a3:00:70:5d:7d:bc:c6:68:8a:4f:aa:07:7f:f7:
4e:d6:1f:0b:a0:b5:ad:fd:93:5e:df:68:65:df:f4:
2b:9f:bd:4b:66:eb:45:69:04:52:d0:98:09:19:c5:
2d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:0B:3D:C5:02:D2:4B:F9:BD:E5:64:48:05:B1:62:00:F6:BC:ED:91
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Kws9xQLSS_m95WRIBbFiAPa87ZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.80.0/24
Signature Algorithm: sha256WithRSAEncryption
32:b1:8f:71:b1:02:fb:42:3e:81:d8:9e:7c:87:42:7b:0c:cb:
1b:ba:49:c9:21:fa:8d:1d:d7:43:74:9e:6e:6b:1a:a2:f6:4c:
95:e8:20:d7:ac:4d:32:de:0e:38:55:74:d6:24:d0:87:96:e1:
1d:91:8c:37:64:bc:78:47:92:86:e1:9c:a6:f9:f0:51:69:8b:
c9:5d:75:2f:b3:0d:2b:b2:cb:63:67:fc:3c:04:29:5d:31:e9:
7d:34:51:a1:04:0b:2b:b2:d9:f8:3e:10:88:21:cf:06:85:8e:
72:32:94:1a:ab:64:d1:ef:eb:e5:eb:22:8b:20:a8:ec:bd:d8:
25:5e:ee:3a:b0:84:21:20:a5:7d:85:16:a8:01:0a:cb:6b:ab:
89:c0:4a:ce:f8:7d:25:f8:3a:4b:6c:29:2d:df:5e:10:87:12:
c4:be:e2:03:59:da:6b:e4:9e:18:cc:f9:0d:6a:10:64:c9:85:
e4:4e:08:43:e7:74:9c:07:b8:7f:2d:3e:7e:56:d0:72:3c:3e:
f3:ed:60:79:5f:f8:90:bc:9a:51:b8:ad:ed:61:e4:07:ac:3c:
8b:a5:50:0e:99:5e:52:2c:31:a4:40:0b:5d:b1:b1:0f:42:30:
ef:25:75:cb:a3:53:be:4a:f7:f9:55:30:55:48:2b:dc:fa:9f:
4d:8b:93:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:49 2024 by rpki-client on console-ams.rpki-client.org