Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/LbBuU8H_J6JNRTvYS5WP5JOxdgs.roa
File: LbBuU8H_J6JNRTvYS5WP5JOxdgs.roa (raw, json)
Hash identifier: wNuDKLy0Se6el6XTnGnndjQnyY6Q6Zwa1AVVvdJlKAQ=
Subject key identifier: 2D:B0:6E:53:C1:FF:27:A2:4D:45:3B:D8:4B:95:8F:E4:93:B1:76:0B
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018B46C412A0ADE9FACA82FEB3A21798E5C7
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/LbBuU8H_J6JNRTvYS5WP5JOxdgs.roa
Signing time: Thu 19 Oct 2023 07:08:56 +0000
ROA not before: Thu 19 Oct 2023 07:08:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60949
IP address blocks: 89.42.84.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 22 Oct 2023 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:46:c4:12:a0:ad:e9:fa:ca:82:fe:b3:a2:17:98:e5:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Oct 19 07:08:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2db06e53c1ff27a24d453bd84b958fe493b1760b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:06:20:b0:1f:6b:8a:f2:e4:65:6c:23:fe:f7:
6f:19:92:20:1a:43:9f:c4:0f:04:da:b8:57:f0:71:
5c:43:25:78:36:92:55:5e:c3:23:87:40:c3:9b:ce:
59:b8:99:10:26:68:73:3f:62:19:12:01:b9:31:d9:
b8:3f:4f:c5:c7:09:1d:72:9c:dd:21:6e:99:01:f3:
4c:f3:af:3e:d2:bd:ab:3c:a9:6f:15:31:2e:bf:19:
b7:c5:87:b6:85:76:38:8c:ec:99:dd:a1:28:32:cc:
39:5a:9a:a4:34:3c:b2:58:57:d3:c2:d7:48:06:8d:
72:3f:c6:48:9c:0c:f7:fe:5a:75:d2:92:ce:02:f7:
ca:7b:cc:e4:92:e1:ed:73:f5:8a:42:61:e5:60:0a:
62:8b:b9:f9:67:35:1a:cc:d9:4e:c7:7d:8f:e0:b1:
b3:a0:c1:52:21:49:8c:c1:bd:f4:d5:c0:6f:aa:81:
2d:26:be:5e:35:cd:31:ea:7f:25:43:29:f4:5b:e0:
41:07:f2:ee:ad:8e:1c:c2:97:b0:a7:c7:72:f3:dc:
25:16:28:85:5e:9f:0e:61:df:e3:9e:e1:ce:98:02:
55:85:3a:02:2d:22:fb:b4:12:45:fb:90:0e:a0:b3:
2f:dc:4f:09:75:16:2e:74:28:4e:ac:f7:07:f9:6d:
86:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B0:6E:53:C1:FF:27:A2:4D:45:3B:D8:4B:95:8F:E4:93:B1:76:0B
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/LbBuU8H_J6JNRTvYS5WP5JOxdgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.84.0/24
Signature Algorithm: sha256WithRSAEncryption
03:f7:d8:81:05:a4:75:d9:08:5b:b8:bc:8e:b8:84:40:d8:99:
a5:53:88:10:a8:0c:7d:66:f7:c2:bb:ce:94:2f:d3:cd:dd:47:
e8:75:8e:16:27:b2:ef:9f:de:03:c8:ed:36:4d:6e:0d:42:0c:
de:5e:78:5d:13:a8:ad:3c:f3:96:d4:54:08:51:f7:f9:25:2c:
d6:13:4e:cf:de:68:15:fe:e0:79:dc:62:74:5e:81:e3:7f:4d:
ca:19:b6:9f:6f:0c:7a:32:b1:c9:6a:81:9d:0e:a3:c4:0b:73:
df:75:b6:52:8d:f9:1e:22:cf:51:7f:48:3b:d6:06:1f:5e:3c:
04:35:ce:9a:fe:42:93:99:11:aa:03:62:66:75:29:8a:1f:4d:
af:29:89:46:65:a5:da:c7:93:2f:7b:98:b1:8b:ac:4f:64:5e:
ec:bc:76:b2:ac:a7:42:ca:82:80:e4:d1:dc:27:f2:6c:b3:f9:
a4:94:83:01:d9:e1:d5:18:34:38:68:7a:9b:ae:28:a0:f6:bf:
58:04:67:11:66:fc:70:e5:fa:eb:f8:91:a0:a6:fa:18:c6:79:
45:9f:8c:df:63:41:6b:33:ad:a2:6b:14:69:58:44:90:8e:2d:
19:94:6d:1f:08:70:93:14:fe:e8:fb:1d:45:f1:81:a3:65:22:
b7:41:e8:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:49 2024 by rpki-client on console-ams.rpki-client.org