Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/NAUkAkAIN6-qVcoEeBMgZxzT07U.roa
File: NAUkAkAIN6-qVcoEeBMgZxzT07U.roa (raw, json)
Hash identifier: j4MP3EnYPGZzBUvtpAvmpFRxHhzQ/2bbNYy3J4rCkOE=
Subject key identifier: 34:05:24:02:40:08:37:AF:AA:55:CA:04:78:13:20:67:1C:D3:D3:B5
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0190EC558073833955E1D64AFB78EC6EC463
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/NAUkAkAIN6-qVcoEeBMgZxzT07U.roa
Signing time: Thu 25 Jul 2024 23:59:04 +0000
ROA not before: Thu 25 Jul 2024 23:59:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 05 Aug 2024 05:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ec:55:80:73:83:39:55:e1:d6:4a:fb:78:ec:6e:c4:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jul 25 23:59:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34052402400837afaa55ca04781320671cd3d3b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:89:b3:b6:71:9d:bb:87:49:78:26:60:b0:12:
52:a7:74:fa:db:0c:ef:b8:d1:58:f2:74:de:f5:c5:
83:1a:28:48:b5:12:00:fc:f8:ef:e9:7c:d4:db:5b:
93:b3:52:73:6a:ad:7d:d4:ec:9d:d9:b2:61:9d:4a:
71:69:62:00:3e:85:4f:89:cf:6a:a0:25:cc:97:c1:
62:1f:19:5d:7e:bf:dc:cf:cc:65:15:7c:38:68:d1:
db:19:72:f2:c6:6d:2a:9e:0b:87:d1:62:ad:39:11:
09:8d:74:e0:84:b5:86:3a:d3:80:6e:78:1e:87:26:
c2:71:31:f2:a9:b4:c3:b0:20:86:cb:6d:0e:9e:84:
ae:ba:61:ca:31:58:92:19:6d:c6:0c:7d:4e:06:48:
71:92:c2:90:ce:72:49:d3:86:cc:42:8e:9b:c1:b2:
da:38:47:02:17:f1:be:24:d4:cf:b9:02:db:d7:88:
67:76:dd:61:e3:96:80:7f:2e:ed:f5:6f:53:95:db:
b6:b5:29:e4:ec:06:87:cc:c7:72:38:70:15:dd:26:
9f:df:2b:26:49:45:b2:52:b0:3c:e9:e5:9d:0c:be:
ca:c7:a3:24:29:d1:1b:a1:63:c5:91:4d:e8:93:ec:
6e:1b:86:6a:a6:62:fa:13:6b:71:1a:07:00:84:41:
40:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:05:24:02:40:08:37:AF:AA:55:CA:04:78:13:20:67:1C:D3:D3:B5
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/NAUkAkAIN6-qVcoEeBMgZxzT07U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.81.0-89.42.83.255
Signature Algorithm: sha256WithRSAEncryption
09:c0:4d:52:08:f7:1b:9a:58:11:72:7d:7d:aa:6a:ce:86:48:
b7:04:f0:e0:d5:89:81:77:1b:c8:ad:1c:11:86:37:b9:1c:58:
c9:0e:0c:26:9e:81:fd:e8:7c:e6:c0:34:7b:65:4f:91:2e:94:
c9:ef:31:7f:bd:b1:db:34:46:e8:32:51:f1:3a:9f:81:ae:19:
61:cf:a1:e2:f1:d5:0f:db:d3:ae:60:b2:9a:e7:7d:72:19:d6:
0c:e0:4a:3d:a0:fe:99:d9:03:c8:45:3c:58:88:55:80:27:d2:
06:67:42:0b:d9:a0:7b:74:c9:c4:09:f0:9d:eb:2a:a6:fa:29:
b1:b1:34:d2:3f:4b:f6:76:99:8e:12:a3:bc:38:67:9b:cb:da:
d1:9b:41:68:3e:3d:67:26:47:a5:e1:30:5b:62:15:10:55:da:
3a:7c:cd:9d:2a:d0:ce:85:92:0f:5a:25:03:96:6c:a3:f1:97:
11:a7:eb:2b:1b:67:e5:9e:b4:6d:88:e3:7d:eb:33:3e:bd:89:
70:86:ab:72:9b:c6:0d:c8:93:48:d5:44:19:9d:3a:66:d4:42:
30:1c:ac:bc:60:c7:69:7a:dc:64:d7:11:61:3b:89:1c:c5:45:
02:17:51:e6:40:61:e6:d2:d3:29:3b:39:6b:a5:ac:f1:dd:e3:
70:91:14:db
-----BEGIN CERTIFICATE-----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Generated at Mon Aug 5 07:36:42 2024 by rpki-client on console-fra.rpki-client.org