Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/L0awbzauelxx7lIWtafL8CPkDao.roa
File: L0awbzauelxx7lIWtafL8CPkDao.roa (raw, json)
Hash identifier: qY4r0JVLPKL49pOLQJer27F67f5d8yAorP1/IB1pNis=
Subject key identifier: 2F:46:B0:6F:36:AE:7A:5C:71:EE:52:16:B5:A7:CB:F0:23:E4:0D:AA
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018D66000F24B219D3870A837BEDAA172F2D
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/L0awbzauelxx7lIWtafL8CPkDao.roa
Signing time: Thu 01 Feb 2024 18:48:16 +0000
ROA not before: Thu 01 Feb 2024 18:48:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
89.46.3.0/24 maxlen: 24
89.47.118.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Feb 2024 07:37:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:66:00:0f:24:b2:19:d3:87:0a:83:7b:ed:aa:17:2f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Feb 1 18:48:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f46b06f36ae7a5c71ee5216b5a7cbf023e40daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4a:d5:fa:f7:aa:2a:2b:5a:6a:97:f9:9f:b6:
8c:df:98:9f:bc:ef:7e:44:ae:fb:eb:c0:b5:b0:91:
78:e6:8c:08:ae:ca:0d:f8:a3:fe:83:97:2d:7c:26:
08:a1:d4:40:3b:90:23:cc:0a:ec:65:cd:1a:82:d5:
0a:14:16:57:a9:5c:52:89:c7:0c:d8:a3:9f:b4:44:
ca:d0:11:7c:93:1b:3a:03:c2:c9:21:b5:8a:5d:1b:
6c:08:4a:56:d5:b8:b7:f1:ae:03:c5:36:ef:6d:ed:
48:50:95:c7:16:b2:28:c2:e5:ff:2c:f4:3a:dd:7b:
3b:9e:65:97:53:81:26:c7:ec:0a:71:a7:70:65:47:
09:28:c8:ad:91:b4:5f:8c:0e:f2:d5:a2:8f:41:6f:
86:b2:fd:15:21:2a:87:f1:50:33:e4:cb:66:6c:f9:
67:1a:e8:96:60:ce:3d:b2:c1:ea:fb:c4:e0:2c:6d:
05:61:99:19:fb:8c:b5:69:38:79:91:32:6f:b9:32:
f4:7f:17:42:63:13:f1:86:4a:80:b6:ae:c1:5a:2e:
f9:c5:42:ea:41:5a:ec:b8:a8:27:6e:08:45:1f:bb:
71:09:4a:18:f0:46:9a:05:a3:a2:ea:4c:be:64:d3:
62:e9:4e:8f:b1:a0:63:3f:32:0e:72:8f:6f:e9:2e:
c7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:46:B0:6F:36:AE:7A:5C:71:EE:52:16:B5:A7:CB:F0:23:E4:0D:AA
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/L0awbzauelxx7lIWtafL8CPkDao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.81.0-89.42.83.255
89.46.3.0/24
89.47.118.0/24
Signature Algorithm: sha256WithRSAEncryption
51:b4:81:6a:aa:75:fe:03:07:00:b0:3f:ce:b2:b4:fd:4c:1a:
0d:4c:56:18:8b:8e:31:5e:c6:9d:03:6e:45:27:35:61:cf:bd:
52:23:6c:e7:3f:bf:81:81:d4:02:cb:d1:8f:04:d4:6a:99:5f:
9f:23:f3:59:86:6a:8b:0c:90:26:d1:ec:ed:34:2b:0c:63:f4:
85:ef:20:12:b3:20:3a:79:62:aa:6f:ab:1b:44:e6:aa:e2:bc:
94:3a:df:79:9a:12:1f:87:f8:a1:61:14:5b:40:5d:a1:99:b9:
31:37:9d:09:8e:50:34:5b:c0:4e:5a:6f:8d:18:70:62:60:9d:
13:a9:39:7f:44:72:11:21:cd:e4:34:1c:cf:f3:71:b8:35:71:
3f:22:90:f7:01:b3:d6:ad:5e:1b:72:32:39:9f:50:02:8f:95:
d7:69:04:53:a7:7e:9e:16:0e:7d:01:51:65:f9:d9:d9:ad:d4:
d6:f5:e8:26:d5:14:f0:c2:26:d5:e9:79:7e:4d:49:5e:28:a1:
59:59:11:1c:1c:4f:5a:51:e8:94:3a:8e:2b:c8:b8:e6:fe:b6:
28:8a:80:b3:f3:70:64:af:5b:e1:84:3b:7a:e1:c5:fb:5c:a3:
51:ea:14:b0:73:c6:e3:76:d1:cd:78:c7:a7:69:70:4f:39:c6:
a4:e1:d1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 2 12:05:20 2024 by rpki-client on console-ams.rpki-client.org