Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/QoHjnPNtyfWeJYeiT06m_gpMaRI.roa
File: QoHjnPNtyfWeJYeiT06m_gpMaRI.roa (raw, json)
Hash identifier: u4dsiSobwLHLJDlGeQfvTFLsK80nTfBPBxdlfQdgoz0=
Subject key identifier: 42:81:E3:9C:F3:6D:C9:F5:9E:25:87:A2:4F:4E:A6:FE:0A:4C:69:12
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018981F7C9132D56E56F4C25664BFA7A4C5B
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/QoHjnPNtyfWeJYeiT06m_gpMaRI.roa
Signing time: Sun 23 Jul 2023 08:57:27 +0000
ROA not before: Sun 23 Jul 2023 08:57:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 89.33.195.0/24 maxlen: 24
89.46.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Aug 2023 05:57:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:81:f7:c9:13:2d:56:e5:6f:4c:25:66:4b:fa:7a:4c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jul 23 08:57:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4281e39cf36dc9f59e2587a24f4ea6fe0a4c6912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:90:1d:a8:f8:0e:e4:7b:ab:19:0e:cb:c2:28:
8d:15:21:99:bf:6d:fd:24:bf:e8:fc:83:e9:b5:ef:
11:64:b5:31:c4:3a:70:b5:9a:38:8c:42:ca:73:36:
df:ef:87:74:ea:6f:0a:59:e9:41:d1:4b:c6:8f:f6:
5d:84:9e:05:17:36:b3:47:a2:0b:e7:7c:16:b6:58:
8d:c1:bd:c9:7b:e4:ab:cf:03:ea:c8:59:35:79:1b:
db:1f:ca:46:5e:c0:b7:aa:bc:e1:46:57:92:fc:a7:
28:19:70:06:d7:b7:24:f8:34:71:73:ef:cf:bc:9a:
75:3d:fe:2c:9b:91:fa:81:7a:40:84:7b:b3:bf:27:
59:0b:48:87:36:7a:dd:45:40:bb:6d:32:1b:94:c2:
e5:97:16:71:29:5e:6c:e4:58:d3:19:a5:42:af:2d:
7e:30:28:72:3d:8e:de:32:2b:32:02:73:4b:89:bb:
d1:4a:8f:95:a8:86:5d:2b:c0:a8:ae:9e:d8:96:7f:
1b:6f:e5:ee:fc:a8:e8:e1:b1:57:c0:e5:bb:31:6b:
2a:52:7f:09:5b:16:54:ae:41:fe:46:7d:a7:03:c4:
55:d5:37:73:65:2b:13:aa:9d:96:9c:29:76:42:63:
13:7b:d2:1b:59:d3:a8:48:8d:3f:19:82:72:b7:a6:
4e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:81:E3:9C:F3:6D:C9:F5:9E:25:87:A2:4F:4E:A6:FE:0A:4C:69:12
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/QoHjnPNtyfWeJYeiT06m_gpMaRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.195.0/24
89.46.1.0/24
Signature Algorithm: sha256WithRSAEncryption
47:d4:2f:b7:b7:ae:af:37:14:96:bf:4e:de:17:68:6a:4e:a9:
f2:33:a4:69:b2:16:ee:bb:db:37:2b:3a:d5:4c:5b:50:9a:e5:
2c:8e:5c:49:0a:7e:c3:a0:d8:6f:d7:52:27:0b:bd:c0:bf:f9:
71:fc:25:66:cd:56:c4:e8:ae:7e:51:7f:d5:86:13:11:71:49:
95:91:a5:2c:6c:49:68:6c:26:80:3e:b2:ca:9b:85:3c:d4:5c:
56:c9:c1:6a:65:b0:e3:ed:aa:85:63:c7:07:d3:a4:85:c4:ca:
6f:6f:20:03:cd:91:27:3c:c7:74:b5:6d:a6:7d:15:93:23:87:
ba:70:5d:a9:96:a3:95:00:56:62:7b:76:cc:d4:8a:0b:21:d8:
fa:92:cf:19:d0:c9:19:b3:99:7e:16:8f:69:a8:bf:a7:de:e0:
b4:ce:1e:a2:2a:eb:05:60:4e:0c:f9:f7:f3:f6:d8:bd:88:13:
66:b6:91:51:e6:ed:09:a4:15:ce:c3:da:9a:da:da:76:17:b1:
7c:59:94:85:9c:66:6d:63:33:5f:21:31:27:4e:cf:65:4d:b7:
f5:73:59:3a:71:ed:e3:e1:0d:2a:c4:b0:60:4f:8d:4c:f3:0f:
99:16:08:3b:38:02:c7:e9:06:3e:c8:ac:62:48:67:3e:d3:ef:
b6:b4:65:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:50 2024 by rpki-client on console-ams.rpki-client.org