Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/TyVzSAsYE-wMkryz_rdUCTuR048.roa
File: TyVzSAsYE-wMkryz_rdUCTuR048.roa (raw, json)
Hash identifier: 3X0RBBes8V/YEldF982S2QcH9ppd8SDfzfEdvC6EQ6o=
Subject key identifier: 4F:25:73:48:0B:18:13:EC:0C:92:BC:B3:FE:B7:54:09:3B:91:D3:8F
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018987ACF93251D4302353A0B9219C7FF7C1
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/TyVzSAsYE-wMkryz_rdUCTuR048.roa
Signing time: Mon 24 Jul 2023 11:33:27 +0000
ROA not before: Mon 24 Jul 2023 11:33:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213250
IP address blocks: 89.42.88.0/24 maxlen: 24
93.119.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Oct 2023 13:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:87:ac:f9:32:51:d4:30:23:53:a0:b9:21:9c:7f:f7:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jul 24 11:33:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f2573480b1813ec0c92bcb3feb754093b91d38f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:97:f4:62:9c:56:c7:81:8a:32:e9:50:84:3f:
91:26:ab:5b:db:c2:94:7e:4a:47:3b:49:0d:05:46:
0b:48:de:71:3b:29:e0:99:c2:15:a7:33:09:9d:ef:
63:82:53:64:0b:05:d5:ba:a6:74:a6:95:c4:8e:c0:
6a:3f:b7:30:e3:95:06:77:66:c1:ae:65:68:1c:e2:
5a:48:fd:f1:3d:a0:8f:4e:82:43:29:7f:3b:c5:af:
41:3e:ae:17:75:28:d1:1c:91:ca:0f:b6:81:e7:91:
0a:98:9d:a5:a0:a4:ce:67:8b:86:58:04:22:95:ef:
07:73:31:53:50:5d:11:07:95:be:54:ac:70:4c:59:
45:56:8f:61:be:1a:f2:5e:eb:08:60:fc:dc:8e:35:
35:8f:9a:c5:35:0b:3c:72:06:a4:33:be:3a:2c:62:
15:4c:be:c4:cc:ce:c1:fb:da:08:60:f9:48:04:7e:
e8:20:02:e1:cb:69:9c:d1:cc:35:84:3b:03:87:3d:
69:29:84:a5:65:0c:9f:3b:c6:ab:3a:db:3e:a2:a2:
85:33:2d:3b:68:01:48:92:b7:97:d5:99:16:a9:35:
64:1a:9a:fd:68:49:a8:ed:01:5f:7f:0c:c5:95:43:
e8:79:49:99:66:a7:32:bc:73:32:ad:aa:fa:48:c7:
d6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:25:73:48:0B:18:13:EC:0C:92:BC:B3:FE:B7:54:09:3B:91:D3:8F
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/TyVzSAsYE-wMkryz_rdUCTuR048.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.88.0/24
93.119.107.0/24
Signature Algorithm: sha256WithRSAEncryption
35:42:28:fd:1c:5e:79:71:8f:21:08:58:9d:98:95:8e:52:b0:
6a:9e:5d:ff:13:d9:f9:62:58:44:c8:2e:dc:5c:2b:45:bb:50:
46:8d:f2:a2:22:46:2c:e2:79:6d:59:2a:e2:89:50:97:bd:47:
89:c7:df:b8:4d:a9:32:de:87:3e:2f:4f:3d:16:24:25:e7:bb:
93:46:19:5f:57:3c:9a:50:6b:b8:f9:39:46:09:c0:2f:3b:7a:
28:2f:42:03:0a:e9:07:6d:6c:28:c8:bf:25:69:e7:a5:f4:e2:
7b:30:b0:64:99:de:be:1b:3a:5d:d6:2b:99:a5:5f:5e:8d:c7:
d8:b0:5b:78:60:c1:00:67:43:ec:83:bb:fd:85:56:3b:cf:5a:
d5:35:f5:90:ff:53:73:ef:96:6a:26:4c:d1:31:79:fd:3b:c7:
18:9b:0e:37:9e:be:e1:af:63:47:cd:3b:c8:97:21:29:bf:95:
bd:7b:76:30:d2:0c:89:f4:02:38:d6:63:10:a3:7b:a4:9f:3f:
9c:ad:a8:6a:55:0e:c0:53:11:c3:cd:d2:3d:2e:bc:1b:07:3c:
92:5a:b3:af:aa:f9:e3:d8:f8:ac:58:c0:ce:e6:a0:b2:19:38:
3e:5f:2c:15:5b:5b:56:8e:52:97:8c:7d:58:66:00:0f:de:c1:
55:6c:73:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:19 2024 by rpki-client on console-fra.rpki-client.org