Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/YXwnB9VwTPS3fG1A6agXHXrHkwI.roa
File: YXwnB9VwTPS3fG1A6agXHXrHkwI.roa (raw, json)
Hash identifier: 5lzMGSLVaMYdNSpdyZcbXdk+/TLMLVVtEoLPjjGeQCg=
Subject key identifier: 61:7C:27:07:D5:70:4C:F4:B7:7C:6D:40:E9:A8:17:1D:7A:C7:93:02
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01927AA8227F30CCD0B4CF58B099C912D59B
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/YXwnB9VwTPS3fG1A6agXHXrHkwI.roa
Signing time: Fri 11 Oct 2024 08:18:12 +0000
ROA not before: Fri 11 Oct 2024 08:18:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 25 Oct 2024 06:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7a:a8:22:7f:30:cc:d0:b4:cf:58:b0:99:c9:12:d5:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Oct 11 08:18:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=617c2707d5704cf4b77c6d40e9a8171d7ac79302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:29:fc:3e:df:1b:18:45:2c:fa:40:55:02:07:
7d:80:2a:66:8c:6a:77:dd:b6:3f:00:95:eb:ff:cb:
91:6d:b9:6b:ab:8e:d3:97:0e:11:38:f8:d1:54:9b:
3b:18:1a:44:5d:ce:67:ef:f1:7b:85:79:59:80:4b:
b6:17:ac:7d:82:e8:80:71:08:4a:b5:3a:04:8a:50:
19:6f:65:10:ce:be:d7:b1:e2:15:f3:23:dd:1b:33:
cb:6b:a9:b1:b0:5c:22:55:72:49:9e:73:84:6b:d1:
36:4b:ca:2c:32:8c:96:12:60:5f:42:47:66:3b:23:
f2:f7:f1:ff:2c:d9:5d:0f:3f:e0:29:4f:50:af:1a:
7f:10:2c:19:af:a4:43:0a:76:f5:8a:35:51:28:86:
43:e5:2d:5e:b8:47:fb:39:e8:76:15:b1:ba:6a:fa:
f6:9b:15:8a:55:34:a4:12:c7:9f:0b:e5:0c:d7:dc:
c8:44:ee:3b:73:e5:1b:03:24:a8:0f:e8:a3:97:7c:
54:9a:ce:09:01:1b:c7:86:64:dc:30:03:99:45:4d:
ee:48:36:d2:85:81:85:87:66:35:b4:16:aa:3a:bb:
23:cf:3d:e1:e6:cb:e4:91:91:93:31:98:02:96:fb:
34:ce:c6:65:09:56:a0:0e:91:42:7d:41:bf:93:46:
89:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:7C:27:07:D5:70:4C:F4:B7:7C:6D:40:E9:A8:17:1D:7A:C7:93:02
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/YXwnB9VwTPS3fG1A6agXHXrHkwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.81.0-89.42.83.255
Signature Algorithm: sha256WithRSAEncryption
2c:96:92:2a:48:8f:cd:9e:6b:43:52:4b:23:64:ed:9f:c8:c8:
7d:87:32:d1:c6:45:3a:5e:37:b3:2b:d4:18:4a:6c:a2:ee:51:
19:4c:2f:36:41:1b:cb:e7:dd:47:c3:ec:ee:4c:79:52:bb:d7:
9a:df:15:65:0f:fb:d9:88:f2:77:aa:b1:2e:4d:cc:57:7e:b1:
e2:ce:57:ce:78:9c:07:83:fe:3b:92:b2:1b:28:39:56:c0:92:
95:f1:6f:90:4d:71:d6:f3:71:5c:8a:cb:7b:83:f2:e2:e5:80:
7d:39:84:8d:82:22:a6:3c:d7:07:7d:72:9b:9f:7b:39:fd:0b:
d9:08:64:a8:50:95:d2:ea:d1:30:e7:68:69:ef:6a:50:23:62:
7e:25:cc:ac:14:78:8c:26:e4:2d:74:99:1d:49:d6:37:f7:58:
0f:1f:d4:b7:9c:0f:76:0f:aa:a0:2b:85:34:4a:1c:19:89:20:
b5:c2:11:c5:f5:da:88:63:9e:cb:08:75:23:4d:7c:35:2c:78:
62:7e:51:f4:72:fa:78:68:af:5d:7b:84:9a:58:55:fe:11:98:
1b:09:90:4c:32:d6:9d:46:e7:7c:9c:ed:a6:49:4a:0e:73:29:
9a:f9:8d:be:8b:e8:f8:58:f7:5d:b3:47:8f:99:54:46:7e:85:
21:37:ab:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 07:15:03 2024 by rpki-client on console-fra.rpki-client.org