Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/TUoiZ9dveI0NXBsP-JmVEovSYA8.roa
File: TUoiZ9dveI0NXBsP-JmVEovSYA8.roa (raw, json)
Hash identifier: 59yh1Vh1nw+qcUU16Crk2xexMcZxu2MxvEOGPypM878=
Subject key identifier: 4D:4A:22:67:D7:6F:78:8D:0D:5C:1B:0F:F8:99:95:12:8B:D2:60:0F
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018CB102C75777BDDE92EC5D93443866FD61
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/TUoiZ9dveI0NXBsP-JmVEovSYA8.roa
Signing time: Thu 28 Dec 2023 15:19:58 +0000
ROA not before: Thu 28 Dec 2023 15:19:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 996
IP address blocks: 89.47.125.0/24 maxlen: 24
89.34.224.0/23 maxlen: 24
89.34.224.0/24 maxlen: 24
89.34.225.0/24 maxlen: 24
89.34.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b1:02:c7:57:77:bd:de:92:ec:5d:93:44:38:66:fd:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Dec 28 15:19:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d4a2267d76f788d0d5c1b0ff89995128bd2600f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7d:88:1a:56:09:26:23:be:be:38:6d:24:cc:
da:26:d8:d7:20:09:48:98:db:f4:01:79:85:fa:f2:
44:16:2c:06:5e:c9:8c:80:c7:8b:eb:2a:51:56:fe:
ea:d1:a0:32:8b:7d:f8:7b:cd:86:5e:1f:f3:09:41:
ba:6f:d1:5d:e3:6b:32:fc:8d:32:59:a4:b0:ab:dc:
2e:f5:80:60:be:22:46:6e:56:13:36:49:35:55:32:
06:a2:ec:8d:d2:b4:cd:07:b6:5b:b9:38:88:0c:fa:
9d:0d:53:f9:6c:8a:5d:5f:ae:63:b1:4d:5b:98:90:
db:dc:d6:0a:ce:07:31:d9:fc:31:7f:22:4b:90:a3:
2a:65:95:2a:10:90:a4:89:dc:fa:a5:af:2c:93:d4:
e1:89:1e:4a:c8:cc:6b:33:a7:29:3e:3c:50:64:c3:
cc:82:2a:eb:96:3b:f9:57:0c:04:45:07:bc:66:bf:
43:8c:0b:c6:53:35:47:f2:4d:30:4a:d0:c4:19:aa:
82:3b:6f:db:c5:90:51:35:86:b9:29:e6:59:1a:f6:
1c:df:f2:17:5e:59:94:44:09:ba:9e:01:46:7c:aa:
4a:35:76:49:63:7f:68:76:be:40:23:05:28:da:40:
7d:9c:42:05:48:35:32:d5:fe:82:cf:4a:e6:c0:36:
65:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:4A:22:67:D7:6F:78:8D:0D:5C:1B:0F:F8:99:95:12:8B:D2:60:0F
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/TUoiZ9dveI0NXBsP-JmVEovSYA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.224.0/23
89.34.231.0/24
89.47.125.0/24
Signature Algorithm: sha256WithRSAEncryption
43:e8:c0:49:2b:93:ac:1d:42:8e:70:a8:df:32:42:3b:1a:62:
eb:a5:e1:01:1d:bc:e0:de:96:9f:70:c9:4d:f1:1f:73:3f:47:
6e:63:64:13:5d:31:f1:7f:8b:ba:41:d4:b2:d2:1d:f9:72:8d:
b2:40:fe:75:4b:cc:f9:83:f9:d2:ec:f4:66:e8:06:37:2e:3e:
ac:77:57:79:5e:11:ed:3a:06:cc:62:8d:6d:ed:5a:91:56:a0:
ae:99:91:21:80:67:2f:e9:1d:44:2c:76:f5:c2:0a:6b:3c:0f:
a5:b6:1d:0f:66:98:76:49:8d:12:0e:7c:ac:86:aa:ae:d6:44:
c6:ca:77:98:99:d9:a9:7a:14:a1:be:49:68:96:f9:c9:ab:23:
79:ce:d7:3c:8a:9d:36:b1:95:cf:d0:57:fe:ed:c4:10:81:e9:
53:72:1b:34:fd:65:9d:dc:6e:0c:19:06:45:9a:63:12:88:46:
15:cc:a0:db:93:80:89:21:eb:00:a7:d3:c2:0d:0b:15:ac:32:
f1:03:79:ae:01:f5:cc:91:40:93:59:c4:72:2e:44:00:91:ac:
dc:da:bf:e7:17:1b:fb:24:3b:bb:56:b8:10:6e:df:0c:b6:f5:
a0:e1:fb:58:87:93:1d:96:e6:ea:83:7a:27:0c:b0:f4:06:54:
d5:08:c1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:19 2024 by rpki-client on console-fra.rpki-client.org