Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/VE3M3RUB-NcbMgOYU2A0w0zmIoo.roa
File: VE3M3RUB-NcbMgOYU2A0w0zmIoo.roa (raw, json)
Hash identifier: O9+zYCnpwhJkykFSC21oyAf49Nvn/foP3I74zV/jZTg=
Subject key identifier: 54:4D:CC:DD:15:01:F8:D7:1B:32:03:98:53:60:34:C3:4C:E6:22:8A
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018B692BBE8C620A96A8B312353EDCBAE794
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/VE3M3RUB-NcbMgOYU2A0w0zmIoo.roa
Signing time: Wed 25 Oct 2023 23:29:16 +0000
ROA not before: Wed 25 Oct 2023 23:29:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 89.42.90.0/24 maxlen: 24
93.113.183.0/24 maxlen: 24
89.33.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 25 Nov 2023 09:48:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:69:2b:be:8c:62:0a:96:a8:b3:12:35:3e:dc:ba:e7:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Oct 25 23:29:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=544dccdd1501f8d71b320398536034c34ce6228a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:72:5e:f1:25:ff:42:0f:fd:cf:27:88:03:25:
ba:fc:f8:3d:d9:ff:9f:ba:ea:15:a1:e9:0b:9b:01:
f3:94:29:c6:76:1c:74:5c:8f:89:aa:42:97:d7:b1:
0a:82:66:4a:83:73:cb:5f:52:20:e9:f3:92:7e:4d:
7f:48:97:80:d6:a8:91:47:9e:8b:7f:75:47:fb:e1:
b0:2a:c9:79:05:5b:f4:a0:61:eb:b3:6e:7a:ab:fb:
de:d8:18:55:5c:fb:d3:2d:eb:1d:37:98:e0:12:62:
b1:03:fd:a5:c3:2b:09:9f:2a:5a:4d:5c:50:38:1e:
86:21:d3:79:81:3e:01:8b:18:06:b2:54:7d:5e:a1:
f2:92:46:d0:c1:c2:c0:51:3f:2a:b2:b6:03:59:2a:
61:7b:17:a5:50:cb:0a:66:fb:ab:88:79:d0:f0:39:
4e:1a:25:7f:8a:43:e4:82:e4:b0:75:2d:d2:92:9a:
fc:23:40:06:88:d8:e7:5f:00:1f:0d:22:af:ff:ea:
71:42:46:5c:de:61:71:76:61:bd:a9:f9:d9:80:ad:
19:8a:6c:47:64:a9:c4:ba:68:2b:52:75:91:bb:3c:
61:7b:4e:29:71:ce:36:52:f6:b6:e3:86:ee:0f:2c:
cc:44:c6:71:fb:a5:e9:52:fa:13:bd:0f:3f:92:b6:
4d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:4D:CC:DD:15:01:F8:D7:1B:32:03:98:53:60:34:C3:4C:E6:22:8A
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/VE3M3RUB-NcbMgOYU2A0w0zmIoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.195.0/24
89.42.90.0/24
93.113.183.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:cf:b7:64:b8:a2:39:08:ec:f3:a5:cd:43:f1:47:dc:59:bb:
ae:ed:48:ab:7e:33:99:9d:28:c1:50:d9:86:08:de:5a:d3:b3:
2d:90:51:6a:b7:d9:40:d4:e3:ea:9f:e4:9f:27:1c:da:d2:88:
9c:df:39:36:aa:cf:9f:49:b8:8d:c4:2c:7e:b0:e8:f4:ee:67:
57:e3:4e:36:b8:12:3e:3d:24:4c:a5:56:db:4a:f9:ab:67:99:
20:ca:9e:f5:34:88:61:8e:35:d0:6e:93:54:cb:1a:ac:77:e9:
7c:75:78:ce:77:4c:45:f2:91:1d:f8:f2:6e:24:88:26:44:85:
21:30:bd:73:91:dd:61:7c:bf:ce:a2:66:87:bf:fc:b7:5b:db:
6d:16:94:d4:06:12:ee:e3:6c:9a:6f:0d:19:fa:d9:2c:96:01:
e9:96:d4:b6:f2:f5:55:f3:70:4e:00:de:4a:7f:56:29:aa:4a:
11:2d:a5:3b:4a:81:74:34:96:66:3c:e9:28:bc:12:97:16:6a:
de:9c:88:f6:5e:fb:38:10:8a:1c:0d:29:9c:d9:c4:b8:84:84:
e5:17:92:93:d3:15:91:e5:b1:bf:a2:fc:cc:14:00:1c:dd:3e:
ad:19:b6:3f:ac:c9:b8:00:dc:61:4c:e9:62:ba:cc:b7:97:a8:
9a:95:96:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:50 2024 by rpki-client on console-ams.rpki-client.org