Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/UCH4hd1xpCTxkpv6xKR_NhkOQdo.roa
File: UCH4hd1xpCTxkpv6xKR_NhkOQdo.roa (raw, json)
Hash identifier: Ys5qF5yDOtAOcM6zt2xc7yRIwPxc3uuj3HWfWO8DEVU=
Subject key identifier: 50:21:F8:85:DD:71:A4:24:F1:92:9B:FA:C4:A4:7F:36:19:0E:41:DA
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018C1510A586F467A286FFE474218F030657
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/UCH4hd1xpCTxkpv6xKR_NhkOQdo.roa
Signing time: Tue 28 Nov 2023 08:34:21 +0000
ROA not before: Tue 28 Nov 2023 08:34:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216032
IP address blocks: 89.42.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Nov 2023 12:10:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:15:10:a5:86:f4:67:a2:86:ff:e4:74:21:8f:03:06:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Nov 28 08:34:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5021f885dd71a424f1929bfac4a47f36190e41da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f5:90:ab:5b:5e:55:03:57:20:4e:9a:e3:e1:
60:e8:0b:75:6a:67:42:e4:43:ae:68:57:5c:cd:f4:
8e:94:46:04:a2:d7:9e:4e:fb:6b:b0:52:57:e3:7e:
0a:66:da:5f:73:f3:7f:fc:38:63:a3:d8:1a:08:9c:
a6:b9:1b:e2:49:c1:8a:b3:af:8a:b1:29:e8:a8:16:
58:04:b6:a7:b7:7d:71:e4:c2:dc:a2:05:e2:7d:02:
ae:d4:17:64:49:04:fe:1b:4b:90:d7:c1:4d:b6:92:
04:06:43:f7:8c:1b:dd:ca:18:76:66:9e:ef:45:22:
2d:43:f1:36:53:6e:f8:72:77:ff:da:01:1e:69:4d:
ab:f8:6a:2d:bd:d6:2c:12:bc:2c:24:f5:dd:9e:e4:
6e:cb:f2:af:95:af:43:0d:28:2c:41:1d:f3:ef:ec:
40:f1:7f:01:40:f8:f2:5f:a4:ab:db:21:c5:bb:a8:
df:3f:19:c3:73:a5:8d:cb:1a:6a:e1:fc:57:ee:c7:
17:63:61:4b:57:55:ed:04:29:ff:cf:59:55:e6:83:
9d:80:d5:26:4d:de:02:65:63:17:cf:48:41:0e:02:
80:b8:bd:a7:63:07:5f:65:ee:8b:ef:5d:6f:68:65:
93:58:35:3a:d0:4f:0b:8a:b0:dc:53:a1:0c:7c:14:
67:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:21:F8:85:DD:71:A4:24:F1:92:9B:FA:C4:A4:7F:36:19:0E:41:DA
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/UCH4hd1xpCTxkpv6xKR_NhkOQdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.82.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:e8:b4:e3:df:2b:cd:df:89:8c:cb:5a:d9:af:79:54:bb:34:
3a:30:19:d2:ca:e6:b7:75:86:79:78:c9:00:c2:e0:22:91:53:
7e:1a:86:a0:45:1c:78:03:b3:fc:72:3e:ad:a1:23:1d:ed:1a:
f3:3a:04:d3:7f:85:10:4b:ba:12:45:62:03:07:50:ee:ca:8e:
49:b7:f8:94:d8:d8:80:11:df:e8:27:0b:b4:0c:91:e0:07:90:
03:8d:60:2d:b3:26:b6:e7:ae:fd:44:cc:9a:95:6d:af:10:2a:
9f:90:32:31:7f:b7:29:fd:27:b4:fc:c3:fd:8e:ad:52:90:82:
9e:7f:f3:d9:eb:4a:97:ec:5e:33:cd:14:6e:bf:c2:da:d1:d0:
36:49:cf:6b:40:77:4b:91:5b:1d:f4:cf:aa:3a:7e:d9:eb:42:
70:24:af:d9:b1:f6:8f:f4:f9:b4:14:32:2d:1e:26:e5:f3:81:
88:55:d1:75:07:e1:8a:1e:b9:99:18:bc:52:ae:86:68:ec:d7:
1f:ef:d0:6e:44:03:e1:f2:ac:39:ee:9b:a0:c3:6e:09:c9:b7:
6f:0f:fd:30:ab:94:8e:0b:a0:ef:29:3a:c4:95:e1:8f:64:d4:
b2:d7:7e:19:d8:68:ef:a0:53:62:15:8a:ce:35:06:cf:b1:e6:
14:26:55:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:50 2024 by rpki-client on console-ams.rpki-client.org