Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/V9sNSxLUFweG8ePU-8cuWyPZpMk.roa
File: V9sNSxLUFweG8ePU-8cuWyPZpMk.roa (raw, json)
Hash identifier: WAMySKoWWozHFDvYvwyOrbjkjEnRO6Gh+3hBymZzp34=
Subject key identifier: 57:DB:0D:4B:12:D4:17:07:86:F1:E3:D4:FB:C7:2E:5B:23:D9:A4:C9
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018CB19F555BBAF3B65D54B3D7921601DD3A
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/V9sNSxLUFweG8ePU-8cuWyPZpMk.roa
Signing time: Thu 28 Dec 2023 18:10:58 +0000
ROA not before: Thu 28 Dec 2023 18:10:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 89.42.81.0/24 maxlen: 24
89.42.95.0/24 maxlen: 24
89.47.127.0/24 maxlen: 24
89.34.228.0/24 maxlen: 24
93.113.181.0/24 maxlen: 24
89.46.0.0/24 maxlen: 24
89.43.143.0/24 maxlen: 24
89.43.140.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b1:9f:55:5b:ba:f3:b6:5d:54:b3:d7:92:16:01:dd:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Dec 28 18:10:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57db0d4b12d4170786f1e3d4fbc72e5b23d9a4c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:de:be:5c:25:ef:a8:b0:91:74:a0:fe:d8:61:
13:23:18:6e:4e:21:e5:f7:02:4e:e8:bd:1a:ce:ab:
f3:75:96:97:14:78:98:ee:e1:53:b8:14:bb:58:a0:
4f:e5:34:a6:83:4c:91:7a:12:31:b4:d5:5a:3d:85:
1a:67:15:2f:cb:c2:e9:a6:4c:0f:75:34:93:9d:de:
d1:ae:8a:62:70:d1:3a:cc:47:4d:17:f5:3f:3d:44:
cd:cb:ad:89:db:1e:91:6b:8a:15:0e:17:46:c5:70:
43:51:93:e5:00:ee:0b:ab:e2:cc:4b:74:28:61:e2:
93:1b:6d:ab:ea:1f:56:3a:72:d6:11:93:a4:f9:b8:
7e:38:54:80:f8:db:d1:27:06:a4:69:80:43:be:6a:
3b:86:db:f7:41:96:1e:13:b9:93:e5:cc:45:e2:fe:
c4:90:4c:23:ca:ad:10:6b:d0:48:2b:73:34:e5:f5:
90:c7:e8:ea:2a:82:9e:fe:53:03:c2:b8:5c:95:8c:
74:a9:39:2d:b6:c5:9e:14:89:7f:6a:fb:79:7a:ea:
79:a6:eb:21:47:19:88:5d:6e:46:85:e8:f9:e7:06:
03:86:5a:0b:52:e5:e7:ac:cf:e6:52:f4:ed:6e:f4:
4c:9b:cf:7c:ca:e6:fa:3d:7b:f3:e2:02:d2:7a:06:
75:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:DB:0D:4B:12:D4:17:07:86:F1:E3:D4:FB:C7:2E:5B:23:D9:A4:C9
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/V9sNSxLUFweG8ePU-8cuWyPZpMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.228.0/24
89.42.81.0/24
89.42.95.0/24
89.43.140.0/24
89.43.143.0/24
89.46.0.0/24
89.47.127.0/24
93.113.181.0/24
Signature Algorithm: sha256WithRSAEncryption
05:7a:c0:35:fb:64:c0:ee:62:c0:ef:5c:56:fe:58:80:fc:f4:
90:66:94:e9:38:6d:eb:0f:e6:75:28:c1:33:ba:0e:eb:63:63:
31:2a:bf:b6:4b:a9:d1:52:f6:bc:38:ae:8e:c7:d2:1e:ca:4d:
c8:9b:22:5a:d9:75:13:36:1a:02:fb:fc:be:f5:bc:51:86:22:
0c:6b:a3:53:4f:52:8e:c2:20:bb:02:a4:29:87:a8:fe:7d:73:
7c:c2:88:b1:5e:45:9e:d4:f4:56:05:d3:1d:ff:29:d7:a8:06:
15:85:0e:e8:1b:13:0e:7a:0d:5e:85:5e:c6:93:78:c9:a8:62:
1a:8e:bd:db:0a:ff:6e:c9:f7:9d:99:91:81:2a:e5:30:2d:ba:
61:9a:54:4b:1e:2f:d1:0e:25:e0:1b:31:ab:e4:09:2f:24:ed:
92:64:fd:ac:23:5a:e0:f7:ca:a1:29:52:9b:cd:99:b2:d9:c7:
1d:1b:47:15:30:a5:34:22:61:5c:d7:d2:60:12:d1:cf:84:8e:
c9:51:61:df:91:3f:10:16:4e:7c:29:d8:db:2a:02:bd:d7:e5:
bc:0f:8d:9c:c9:65:04:f7:72:cf:19:6e:ea:10:ac:22:29:11:
ea:65:d6:0a:4a:d2:b5:a0:76:9b:4f:c9:e2:21:ea:3b:b5:25:
16:eb:24:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:50 2024 by rpki-client on console-ams.rpki-client.org