Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Wjg1DaikiSyFgUVA-qqJ0tgD5yo.roa
File: Wjg1DaikiSyFgUVA-qqJ0tgD5yo.roa (raw, json)
Hash identifier: 51yte1sHJHKugQ7BQEDPGHPBHTyqVxnD9W6WHZPG+bE=
Subject key identifier: 5A:38:35:0D:A8:A4:89:2C:85:81:45:40:FA:AA:89:D2:D8:03:E7:2A
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01897FF5410782F5F063825CEC49DC6A3CA2
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Wjg1DaikiSyFgUVA-qqJ0tgD5yo.roa
Signing time: Sat 22 Jul 2023 23:35:26 +0000
ROA not before: Sat 22 Jul 2023 23:35:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50131
IP address blocks: 89.46.2.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:7f:f5:41:07:82:f5:f0:63:82:5c:ec:49:dc:6a:3c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jul 22 23:35:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a38350da8a4892c85814540faaa89d2d803e72a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7d:e0:5e:c1:5d:30:6b:64:da:d5:74:9e:e3:
bd:5e:38:75:83:d3:0e:5b:31:f5:ab:97:51:05:70:
ae:c9:2e:ef:80:d6:21:9c:59:d9:ed:b3:18:1d:a4:
d3:57:2f:b9:a8:dc:33:06:1d:3e:58:34:96:37:8f:
09:21:cb:c1:10:c0:ee:10:2c:fa:cd:a8:27:36:48:
70:d4:3f:4f:00:73:f2:56:a7:5f:95:4c:2d:25:5a:
86:54:42:33:51:bb:16:d2:ee:ac:e6:3a:38:90:15:
e5:b9:45:88:21:0f:9e:26:33:c3:bf:dd:d5:a7:4d:
3b:f4:be:7c:93:e4:15:69:5f:ef:9c:6a:06:b9:ab:
d9:46:cd:77:47:a5:3e:2a:fa:42:e5:af:69:5f:26:
18:c6:4b:22:4b:13:e9:7a:ed:9d:1f:be:a5:09:2c:
6e:c3:62:0c:d9:f7:fe:0d:7d:ae:e4:fb:bd:73:69:
51:fe:61:84:8f:c0:c1:07:f9:0f:fe:bd:22:04:c0:
5a:c9:f0:a7:b6:28:41:f7:e4:63:51:92:db:0f:87:
4f:0a:6a:e8:54:01:36:6d:dd:65:4d:3d:f5:74:ba:
c1:65:1f:e0:12:19:94:37:36:14:74:c6:e2:1a:a9:
30:8c:a5:ad:a7:b2:c7:1b:2f:d5:a9:bb:c5:18:bc:
ec:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:38:35:0D:A8:A4:89:2C:85:81:45:40:FA:AA:89:D2:D8:03:E7:2A
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Wjg1DaikiSyFgUVA-qqJ0tgD5yo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.2.0/24
Signature Algorithm: sha256WithRSAEncryption
74:04:59:fa:a4:5e:02:ba:f9:11:73:63:aa:db:59:a8:c9:9b:
15:9e:35:06:90:77:3a:81:51:a8:42:1c:a0:f5:71:06:5d:fb:
69:98:8e:98:08:b6:2b:b4:0b:57:08:ad:8e:d1:25:3b:fa:9e:
9e:d0:73:3f:c5:ab:ec:99:c1:22:26:7f:2a:49:78:e5:01:64:
6d:ad:a7:0b:5b:00:b0:4f:cf:d7:8a:2f:25:88:9b:37:f2:7b:
17:9e:9d:f2:47:5d:8a:66:de:73:bb:a2:a6:6f:d1:fd:82:a8:
5d:e5:f6:13:fb:ba:8b:69:26:0e:82:11:b2:71:7d:b0:5d:3a:
b6:96:df:c7:c5:fb:ce:3f:fd:a9:f4:5b:db:3c:c1:2e:63:ae:
24:95:78:06:4e:a1:56:9b:56:5d:d0:5b:b3:91:2d:28:79:92:
3c:19:dc:22:f6:1d:bf:10:25:b8:50:1c:be:91:97:ad:2f:d3:
91:3f:62:a3:d9:59:d5:b5:66:76:b7:bc:d5:8d:e4:8a:dd:7a:
88:9f:7a:2f:ee:47:de:d6:01:9f:e1:6a:13:be:3c:3d:9b:45:
f8:e7:a5:44:f4:db:3d:0f:68:24:10:fd:97:1c:f9:16:d7:79:
04:e5:c2:2a:45:6f:53:ef:32:8e:dd:a4:dd:1c:fc:0f:36:87:
25:2c:65:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:54:12 2024 by rpki-client on console-ams.rpki-client.org