Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/QXQZDHTWD7jGsYVsMgJJM29y1tM.roa
File: QXQZDHTWD7jGsYVsMgJJM29y1tM.roa (raw, json)
Hash identifier: 3qvf06pbLc/Nec+vMUbgY0mM9VS6zJLJXBcTi/JLoKM=
Subject key identifier: 41:74:19:0C:74:D6:0F:B8:C6:B1:85:6C:32:02:49:33:6F:72:D6:D3
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018CC9286B7D4869553270A742DFD5B90896
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/QXQZDHTWD7jGsYVsMgJJM29y1tM.roa
Signing time: Tue 02 Jan 2024 07:51:58 +0000
ROA not before: Tue 02 Jan 2024 07:51:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
89.37.196.0/24 maxlen: 24
89.33.195.0/24 maxlen: 24
89.46.3.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:28:6b:7d:48:69:55:32:70:a7:42:df:d5:b9:08:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 2 07:51:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4174190c74d60fb8c6b1856c320249336f72d6d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ad:c0:7c:82:8d:53:16:5e:1b:5b:56:3e:fb:
12:fa:64:fd:ad:c5:6e:a0:ea:c8:84:78:c9:6d:fa:
5f:d0:06:b8:ee:60:31:95:5b:35:a1:47:85:1f:78:
96:b2:8c:49:4c:42:80:67:13:4d:e2:d0:20:6c:2a:
6a:65:ec:47:2d:cf:d3:c5:72:2e:ac:a6:34:25:8f:
2e:f1:23:01:ed:15:d7:07:20:fd:03:96:c3:10:07:
e1:bc:4f:55:ee:cb:3f:eb:f9:cf:8d:a7:b1:87:72:
74:b7:9b:a1:2c:3c:70:a6:8c:f0:fb:d5:14:c9:94:
56:23:8a:7a:49:7b:dd:6a:66:50:41:b1:03:18:28:
55:6d:82:9c:4b:6b:0b:b6:08:e2:0d:7b:d5:ce:a6:
d5:40:e3:56:70:3a:8b:db:10:7b:c5:b9:00:e2:21:
9c:ea:4c:07:9f:55:46:7e:a9:41:33:7e:9a:8b:2f:
b5:cd:60:9c:12:99:41:bd:e4:61:c6:92:47:28:2c:
0f:eb:82:dd:6b:a8:4e:0c:fd:c9:1a:3e:e0:45:fd:
d4:cc:6e:ea:9d:d6:e5:a4:a7:c3:62:c6:85:53:bd:
2d:8f:c0:98:9b:98:67:fe:6b:6b:be:64:2a:19:bb:
8b:f0:dd:cb:d6:07:31:43:3b:77:50:23:69:df:f9:
62:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:74:19:0C:74:D6:0F:B8:C6:B1:85:6C:32:02:49:33:6F:72:D6:D3
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/QXQZDHTWD7jGsYVsMgJJM29y1tM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.195.0/24
89.37.196.0/24
89.42.81.0-89.42.83.255
89.46.3.0/24
Signature Algorithm: sha256WithRSAEncryption
49:7d:2f:7b:40:ac:e5:9b:64:f5:b4:d5:09:6e:e4:0c:fc:d3:
15:a7:3c:10:6f:66:76:4e:fb:15:a6:0a:87:21:f2:f9:4e:a5:
62:a2:ad:99:31:c0:d2:a1:e7:d1:1b:77:ac:4c:5b:71:f5:48:
7f:39:a1:83:0d:e7:67:8f:ea:3f:6a:73:c6:59:f0:26:20:24:
fe:60:f8:4f:2e:3e:27:d1:8d:34:43:c8:2a:2c:f2:e0:f0:d4:
21:84:6a:fa:3c:1a:8d:c0:59:a2:0b:2f:dd:8c:7e:7e:ad:21:
eb:51:96:89:03:15:7e:8d:9e:2c:85:f4:0d:55:35:76:a8:4f:
9d:7e:cb:86:eb:3a:39:1e:59:94:2f:a3:6d:7e:ef:bc:b9:53:
ed:2d:b3:08:6a:35:a2:6d:c8:1f:bd:b7:99:38:56:34:db:c5:
9d:31:30:a2:59:d0:8f:14:6f:ff:6b:f9:d2:9c:2e:aa:1e:5a:
c5:29:8c:f7:9c:9d:a7:f0:ce:40:2c:ed:bc:39:71:b1:80:9d:
56:fb:86:bc:48:96:34:ea:05:10:8a:1a:25:19:fa:dd:19:3a:
71:0f:d1:16:03:8b:0d:ad:35:83:e7:70:9e:d1:ae:a9:12:be:
d6:9c:c0:92:82:55:53:60:86:09:1f:d7:f4:cf:58:f7:1b:89:
c4:1e:82:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 3 13:03:15 2024 by rpki-client on console-ams.rpki-client.org