Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Ng-2TUwuTcVAoHINPpuBxjTN_Vo.roa
File: Ng-2TUwuTcVAoHINPpuBxjTN_Vo.roa (raw, json)
Hash identifier: hJejJP9LaGS5uHGmNEv1WKK84DsvtPKmk5fq+VFA7Lo=
Subject key identifier: 36:0F:B6:4D:4C:2E:4D:C5:40:A0:72:0D:3E:9B:81:C6:34:CD:FD:5A
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018DD4B7713214D116EAC1EE52B6D6C7E1D2
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Ng-2TUwuTcVAoHINPpuBxjTN_Vo.roa
Signing time: Fri 23 Feb 2024 06:46:48 +0000
ROA not before: Fri 23 Feb 2024 06:46:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
89.46.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 24 Feb 2024 06:58:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d4:b7:71:32:14:d1:16:ea:c1:ee:52:b6:d6:c7:e1:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Feb 23 06:46:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=360fb64d4c2e4dc540a0720d3e9b81c634cdfd5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ae:34:61:5f:e7:51:e5:11:15:4c:91:43:6b:
ba:56:41:60:27:c3:0a:f0:ac:55:1f:91:db:c9:88:
23:3e:07:e0:5e:9d:95:79:f2:ed:f5:0f:48:29:d6:
71:ce:7b:1e:14:b9:6a:dd:c1:bf:0a:be:4d:c4:1d:
00:4c:94:5e:81:01:e8:41:1b:b8:9b:30:40:b9:f0:
6e:40:6d:84:9e:0a:f9:b0:70:00:5e:f3:0b:d5:ab:
a3:29:2a:42:82:17:f2:4a:ae:71:89:02:3e:ed:49:
4d:98:37:5d:81:22:2b:f6:7d:4f:ff:80:2f:4c:84:
bd:d8:f5:cc:b1:61:b0:fd:65:ac:35:a3:8d:07:f6:
7e:bf:99:32:4d:2b:b5:f3:97:ba:70:45:52:6b:fc:
4d:5e:9b:a8:9d:24:f2:6d:d9:55:8c:4a:c6:a2:80:
4a:b1:78:48:de:fb:57:74:5b:60:7c:82:56:d6:72:
b3:5f:23:9a:31:2f:0a:d4:4e:1e:e8:b3:68:8c:09:
4c:94:d2:8b:e2:63:78:82:58:9b:a6:25:89:42:9e:
8e:05:ff:1e:37:d3:80:7a:06:06:c8:12:bc:00:29:
90:d5:cc:de:ae:22:dd:3d:9f:78:39:cb:c6:49:31:
3a:c0:d6:fb:0d:0a:a3:d6:5a:ac:2d:a0:9c:e4:83:
c2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:0F:B6:4D:4C:2E:4D:C5:40:A0:72:0D:3E:9B:81:C6:34:CD:FD:5A
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Ng-2TUwuTcVAoHINPpuBxjTN_Vo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.81.0-89.42.83.255
89.46.3.0/24
Signature Algorithm: sha256WithRSAEncryption
16:4a:70:88:68:e2:cb:d0:e6:eb:71:b8:ac:6f:fe:60:3f:43:
30:40:22:b0:8b:76:3d:22:95:35:c0:6b:8f:cf:2c:bc:67:27:
3f:59:27:93:19:aa:2d:0c:71:32:1c:81:15:93:4b:4d:db:cc:
44:79:89:42:d9:14:12:48:cc:98:e0:85:2b:70:a0:4a:c3:38:
2b:52:70:4e:d1:b2:4a:1c:00:8d:83:94:54:77:6d:53:e6:a6:
54:b3:be:1b:42:f3:d6:9a:86:f9:2d:63:ef:24:2b:43:64:55:
7c:50:c5:8f:a8:31:3e:99:40:97:6c:bd:b4:c1:34:f6:00:7e:
7b:9f:a7:c4:6b:07:f7:24:6b:1e:40:56:e4:44:a7:3c:5b:c0:
cf:39:bf:9b:af:4a:6a:3b:ca:7e:f7:c6:72:44:26:2f:f6:eb:
93:d0:76:b0:c4:ac:fa:93:80:14:76:b8:41:fb:7e:8f:b8:b1:
d4:53:6a:0d:d2:78:07:ec:d7:e7:96:48:41:76:61:6a:ca:b0:
f5:f3:fa:d9:6d:87:38:52:41:fb:3c:a7:c6:ae:5c:9e:07:28:
a1:f2:b1:49:8d:c1:f2:42:e8:e8:bc:94:5b:a2:56:a9:a5:f9:
4a:c7:17:51:f0:ca:b0:3c:96:42:2f:47:26:33:f8:43:8c:53:
40:19:fa:c1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Feb 24 09:38:09 2024 by rpki-client on console-ams.rpki-client.org