Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/PztPlM5lPytObYpeAv3okR5CWI8.roa
File: PztPlM5lPytObYpeAv3okR5CWI8.roa (raw, json)
Hash identifier: ilj392sS3iJxdkvHJyS0Op1Qp5FWSa5d1/6oJNf4+eQ=
Subject key identifier: 3F:3B:4F:94:CE:65:3F:2B:4E:6D:8A:5E:02:FD:E8:91:1E:42:58:8F
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018F3A7CEDAD33287D4372CEF81EBFB276E5
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/PztPlM5lPytObYpeAv3okR5CWI8.roa
Signing time: Thu 02 May 2024 18:06:56 +0000
ROA not before: Thu 02 May 2024 18:06:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
89.46.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 May 2024 19:32:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3a:7c:ed:ad:33:28:7d:43:72:ce:f8:1e:bf:b2:76:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: May 2 18:06:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f3b4f94ce653f2b4e6d8a5e02fde8911e42588f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e1:e1:89:78:96:b4:4b:29:fc:d2:ba:57:18:
4b:ce:82:a2:94:46:e9:96:79:ab:b0:1a:f1:e7:7d:
aa:0a:05:3f:d2:b7:2d:5c:04:eb:24:92:86:c7:f7:
bc:87:dd:6a:21:03:09:9c:cb:e5:56:1d:e0:14:50:
02:60:75:23:cb:84:24:36:4a:76:0b:ec:a7:c0:36:
f5:31:b1:5f:39:e4:21:0d:07:57:99:3d:a1:19:c4:
9f:78:40:2e:26:e5:bd:15:db:18:9f:3e:20:d3:b2:
8e:50:fe:4d:32:7f:c7:c8:85:ed:1f:74:7e:54:81:
ab:b0:ce:34:18:1d:38:d6:18:06:dc:fb:b3:75:d5:
8a:38:ee:bb:23:50:d5:bf:54:d2:26:b3:f3:d2:5d:
8b:a1:22:bb:54:eb:6a:c5:c8:22:f4:75:14:af:f0:
fa:d6:76:f8:2e:0d:11:17:bd:14:eb:24:49:87:24:
8a:ec:79:d4:dd:69:b9:d6:5b:44:a9:83:f6:8f:b1:
45:c0:d3:ab:0b:30:13:db:9f:85:85:b0:03:84:e4:
5c:0f:e4:44:47:8d:4e:5c:07:ba:3c:bb:85:6a:c5:
b6:5a:a4:34:0f:7d:85:17:f8:92:c4:f2:0a:65:ad:
fa:5d:d3:fe:c0:06:57:d1:05:d3:3c:17:07:1f:7e:
b0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3B:4F:94:CE:65:3F:2B:4E:6D:8A:5E:02:FD:E8:91:1E:42:58:8F
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/PztPlM5lPytObYpeAv3okR5CWI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.81.0-89.42.83.255
89.46.3.0/24
Signature Algorithm: sha256WithRSAEncryption
57:fc:99:d0:88:56:af:d4:ac:f0:5b:06:f7:6a:7a:af:ae:31:
11:2c:c9:ee:6c:de:4d:55:80:9c:56:c4:bd:12:34:15:28:fb:
ee:c3:5b:aa:1a:4d:60:ba:8d:16:18:98:02:7b:03:61:b1:5c:
2d:90:5f:3a:8d:a0:2c:08:54:7c:8e:fb:97:52:d7:d9:94:22:
95:47:66:7f:6f:04:d0:98:90:a8:44:b9:5a:7a:3b:77:f4:31:
8e:dc:52:2a:cd:f3:27:b6:f2:8d:51:93:61:27:74:10:0d:ee:
2b:ef:2b:9e:15:14:43:5d:72:d5:ea:54:73:3b:c6:27:26:18:
13:2a:c8:07:19:11:eb:7c:6c:7c:5c:e6:a9:27:1e:6d:de:f4:
47:43:ce:fe:f3:91:04:a3:3c:ee:44:04:81:9c:92:8b:c9:45:
8e:04:2e:30:6b:b3:88:bd:47:b2:c2:5c:0f:8c:b2:09:88:0f:
ee:e5:17:e8:c9:23:08:31:64:41:4a:4f:71:8a:62:fe:0a:32:
63:b8:6c:77:28:dc:ba:a1:32:fe:25:1a:5d:49:e5:78:77:f4:
91:11:e4:e9:7b:7a:e2:66:c3:15:0e:81:2f:41:fb:57:f7:a6:
0c:04:7b:c3:c3:b4:e5:49:ae:d1:85:1d:c7:9f:1c:f6:a3:fb:
9e:f4:c2:01
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 8 23:05:07 2024 by rpki-client on console-fra.rpki-client.org