Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/WV8uuQh0KO-2XRdrl3xZRsiJHLY.roa
File: WV8uuQh0KO-2XRdrl3xZRsiJHLY.roa (raw, json)
Hash identifier: 1UmtRe7J3FFSMQfRXmJchiv6JxRH+l9ZAk0ycAguvpo=
Subject key identifier: 59:5F:2E:B9:08:74:28:EF:B6:5D:17:6B:97:7C:59:46:C8:89:1C:B6
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018AF19E36272AAC2C844727012C01D9DDAA
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/WV8uuQh0KO-2XRdrl3xZRsiJHLY.roa
Signing time: Mon 02 Oct 2023 18:19:51 +0000
ROA not before: Mon 02 Oct 2023 18:19:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.42.82.0/23 maxlen: 23
89.42.80.0/23 maxlen: 23
93.119.105.0/24 maxlen: 24
93.119.106.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f1:9e:36:27:2a:ac:2c:84:47:27:01:2c:01:d9:dd:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Oct 2 18:19:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=595f2eb9087428efb65d176b977c5946c8891cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:39:75:96:5c:13:8b:a1:82:a7:c4:a9:00:6f:
35:c3:5e:3a:3f:d5:63:9a:fa:32:b9:84:29:8a:5e:
0b:2c:b5:6e:a7:31:1c:bc:9d:39:86:74:14:4b:90:
2a:bf:dd:78:17:9b:71:c3:44:f2:e0:1b:78:3b:7b:
a9:ad:6d:a7:b6:23:18:ad:b2:20:c4:d9:03:65:19:
d9:cb:15:76:7b:b2:5e:d2:52:77:2d:26:ee:f4:f4:
e1:5a:ba:38:b1:93:65:a0:89:6b:19:a9:94:9d:fd:
7a:d0:5b:b5:61:ad:13:ca:6a:09:43:16:72:bf:32:
ba:98:e2:f5:2e:e3:ed:99:75:fd:4d:2f:cd:b7:cd:
54:dc:53:95:a4:db:ba:61:ed:d8:c9:06:68:e5:2e:
50:ba:92:97:fe:1e:f3:31:1c:1c:32:e8:9a:75:c4:
69:84:9e:6f:fb:15:91:ba:1f:a2:d1:2e:b3:19:26:
53:32:73:a4:40:9f:42:6d:46:2e:a7:93:64:fd:aa:
be:5f:ab:46:cf:ed:7c:bf:2e:e3:17:d4:2a:76:4e:
ad:73:17:8d:de:99:ec:cd:b9:47:1c:56:5c:e0:32:
19:b1:f9:9c:ce:d0:9f:7d:bd:09:cd:c9:34:be:50:
33:df:b6:51:98:7f:ef:fa:d7:9c:fd:f9:83:f2:d1:
5d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:5F:2E:B9:08:74:28:EF:B6:5D:17:6B:97:7C:59:46:C8:89:1C:B6
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/WV8uuQh0KO-2XRdrl3xZRsiJHLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.80.0/22
93.119.105.0-93.119.106.255
Signature Algorithm: sha256WithRSAEncryption
2d:11:ca:b2:11:39:a2:4f:27:45:02:cc:a0:96:33:3b:35:18:
f0:8e:ed:de:56:4f:47:bc:af:2d:fb:bd:59:3d:62:24:8f:d1:
c6:8b:ea:40:cf:0d:81:f3:ad:5a:c3:7f:b1:c3:df:a7:f3:43:
b6:e9:c8:1b:7f:b0:81:21:c3:87:49:39:b4:6e:7a:14:7b:d5:
70:65:d8:9b:82:ed:ec:6d:84:ad:d1:5b:de:30:c8:e2:73:21:
65:e2:5a:41:1c:73:66:a4:ba:c2:d4:02:09:88:c8:9d:7b:20:
22:1a:17:3f:7f:11:3b:b8:40:b5:85:38:37:02:84:7d:39:a7:
c2:a6:ee:7a:ec:4f:12:84:b9:76:00:25:72:3d:48:d4:a2:e6:
17:f2:94:b0:29:a1:c2:86:89:02:28:fb:88:5f:8f:8f:b4:23:
42:a5:a8:4e:9c:a0:11:25:54:7b:6a:19:d4:a0:81:49:41:55:
f5:d5:11:14:da:a4:7e:d0:cc:8e:ce:24:c6:71:90:81:f2:eb:
d7:cd:09:70:3f:66:83:75:4d:a5:82:15:b4:fc:74:fd:84:76:
d5:41:de:89:a0:8f:c3:8d:77:ef:f4:30:b1:61:7d:b6:b3:8c:
48:76:26:80:24:dc:17:13:46:fa:3f:a0:4c:cf:58:37:ba:45:
75:44:6a:29
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Oct 4 13:38:49 2023 by rpki-client on console-ams.rpki-client.org