Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Wr_h1As71POs8rvP22P7ctG0Mts.roa
File: Wr_h1As71POs8rvP22P7ctG0Mts.roa (raw, json)
Hash identifier: 9E/u8X6eva5N19aqkIkw+G4qUiYgISoO87fHKhK68Hs=
Subject key identifier: 5A:BF:E1:D4:0B:3B:D4:F3:AC:F2:BB:CF:DB:63:FB:72:D1:B4:32:DB
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018BDD073F4D860E142CCBE576F2F61021A9
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Wr_h1As71POs8rvP22P7ctG0Mts.roa
Signing time: Fri 17 Nov 2023 11:25:21 +0000
ROA not before: Fri 17 Nov 2023 11:25:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 89.42.95.0/24 maxlen: 24
89.34.228.0/24 maxlen: 24
93.113.181.0/24 maxlen: 24
89.43.143.0/24 maxlen: 24
89.43.140.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Nov 2023 14:39:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:dd:07:3f:4d:86:0e:14:2c:cb:e5:76:f2:f6:10:21:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Nov 17 11:25:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5abfe1d40b3bd4f3acf2bbcfdb63fb72d1b432db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:cc:b1:f3:71:34:43:55:64:51:dd:e8:b8:5a:
0f:f1:19:e0:24:cb:b6:41:6b:d2:23:a7:0a:b7:d3:
21:5e:68:1f:9f:ef:2f:53:bb:64:b1:bd:8f:6d:8a:
af:15:bb:5b:78:33:80:b3:e1:1a:f5:f7:4c:ad:2e:
a2:ee:7d:9a:e6:3f:74:ab:96:a8:67:33:97:2c:9a:
7e:fb:fe:b9:b4:4f:88:99:8b:2b:b4:17:eb:d6:c4:
71:65:e2:66:88:df:c4:3b:57:01:1b:1d:57:32:24:
d3:2a:e4:09:e6:89:b1:61:44:f8:71:5a:25:2a:41:
25:fd:cc:8a:a5:92:bd:14:70:3b:46:af:03:d1:50:
b0:ae:71:eb:6c:bf:44:44:1c:d7:12:9f:c0:b4:9d:
10:1e:ce:50:0c:2a:4e:d2:30:10:9c:ba:ae:71:5c:
e4:14:30:0f:c8:c0:85:10:6e:b8:47:e5:87:fe:98:
1d:2e:64:84:8d:b4:bb:4e:e2:b3:cc:a5:60:99:f0:
da:8e:45:12:24:0c:e4:df:8a:8c:6e:f0:33:00:83:
60:45:7e:92:6a:e7:e1:ac:1c:01:7d:8c:a6:54:4e:
83:69:2f:c9:93:04:0f:26:1c:fd:95:a5:71:89:9b:
31:9e:30:cd:b7:7f:fa:f4:32:0b:2b:cb:ff:51:88:
8b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:BF:E1:D4:0B:3B:D4:F3:AC:F2:BB:CF:DB:63:FB:72:D1:B4:32:DB
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Wr_h1As71POs8rvP22P7ctG0Mts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.228.0/24
89.42.95.0/24
89.43.140.0/24
89.43.143.0/24
93.113.181.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:f4:4a:f9:34:cc:ad:a9:36:35:4c:01:d8:c7:b6:b1:0d:20:
2d:29:aa:43:2d:73:c6:4c:40:31:3d:4b:e3:b2:9c:3a:bc:42:
36:8e:52:46:58:f2:c1:fc:4d:bb:61:56:8a:14:ba:f2:78:99:
ba:cf:3c:86:d6:79:24:27:5b:84:1e:b6:94:d9:aa:77:3f:e4:
27:c5:37:15:8e:61:fb:c3:5b:97:ee:ac:bc:51:04:f4:69:6a:
d6:fc:a9:f1:9b:f6:f4:65:69:28:01:17:34:1f:ed:1f:81:ce:
96:68:7d:02:f5:f1:87:ff:7a:c1:8c:5d:a4:86:c9:6c:9f:d3:
c0:86:ea:15:75:26:96:2a:7b:68:f5:9e:29:e1:8a:0f:66:19:
fc:ba:03:27:66:4d:a4:e2:6e:08:0b:86:57:a9:ef:b9:37:44:
a8:7c:d9:db:67:f2:9c:db:2c:68:02:0f:2e:ac:ce:6d:a0:96:
66:b8:53:b7:27:0c:6d:0e:42:61:04:66:e8:e2:3d:e5:4d:6f:
60:c1:7b:e5:c9:dd:d0:02:32:bf:08:50:26:c9:9f:69:5e:0f:
d6:8d:fa:97:a7:23:ac:aa:ab:31:a2:de:b1:3e:0a:f8:e3:6b:
c7:5c:de:34:6c:ba:08:72:10:1b:7c:5b:a9:bd:ba:4e:09:10:
50:07:1d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:19 2024 by rpki-client on console-fra.rpki-client.org