Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Zs9JswjlM5BpXqlsaK1RRsKFfxw.roa
File: Zs9JswjlM5BpXqlsaK1RRsKFfxw.roa (raw, json)
Hash identifier: uAJsdWW38RnGgQn8q8jwi7/Q6p2x/EvvV+WKrJ3nIJ0=
Subject key identifier: 66:CF:49:B3:08:E5:33:90:69:5E:A9:6C:68:AD:51:46:C2:85:7F:1C
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0189BF12F8DAA10046009DA13D234EB0FCAD
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Zs9JswjlM5BpXqlsaK1RRsKFfxw.roa
Signing time: Fri 04 Aug 2023 05:43:58 +0000
ROA not before: Fri 04 Aug 2023 05:43:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14445
IP address blocks: 89.42.91.0/24 maxlen: 24
89.42.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Aug 2023 22:05:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bf:12:f8:da:a1:00:46:00:9d:a1:3d:23:4e:b0:fc:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Aug 4 05:43:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66cf49b308e53390695ea96c68ad5146c2857f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8e:3a:09:4e:0e:08:aa:a1:0d:ac:2b:db:e7:
28:19:cd:6b:7b:30:22:dd:81:e9:99:50:73:e0:e9:
67:c6:1c:a0:cf:9d:b3:9c:f8:87:64:b3:9b:00:3a:
c9:14:90:bc:f7:ec:ba:26:8c:81:1b:0f:5b:44:b8:
6b:72:33:af:cf:fc:93:80:e1:ab:7e:49:83:72:85:
4e:4b:df:c5:19:a0:03:39:a6:7d:47:f1:91:4f:40:
0f:38:e4:89:28:c6:be:94:8b:47:e9:0d:a3:69:6e:
e5:29:a4:ee:ab:45:b8:01:ce:01:99:6b:aa:be:7e:
0b:bd:80:43:77:f1:9b:2c:c0:bf:61:7c:e6:c1:a8:
b5:4d:c9:45:e7:05:8d:3c:18:f5:aa:7d:5c:04:dc:
ba:97:2a:a1:12:0c:de:06:d0:9b:aa:6b:95:b1:84:
fc:6e:60:da:38:a0:c4:7c:32:e7:5a:4f:a1:25:bb:
a3:d9:0f:7b:c5:78:e0:83:9c:cf:59:4b:f0:17:a0:
97:58:69:98:d0:18:1b:f6:8b:e1:43:3d:fd:95:49:
9d:dc:a8:a8:b3:ae:90:4d:f4:46:a6:4f:42:b9:fb:
a0:cc:1d:7c:ae:20:cc:cf:ae:c6:cf:ae:ec:d7:dc:
5c:81:e9:1a:12:62:74:48:01:5a:57:80:88:d7:d5:
7c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CF:49:B3:08:E5:33:90:69:5E:A9:6C:68:AD:51:46:C2:85:7F:1C
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Zs9JswjlM5BpXqlsaK1RRsKFfxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.91.0/24
89.42.94.0/24
Signature Algorithm: sha256WithRSAEncryption
79:8d:54:a3:3e:12:9a:7f:99:5e:c4:52:61:b4:8b:cc:8c:9e:
e7:11:7f:44:ec:8a:43:22:6d:3e:02:44:93:3c:f3:93:49:e9:
58:6a:1c:dc:8a:3f:21:f4:60:6f:44:12:0f:e9:b2:39:ed:5e:
bb:c5:36:ec:ff:1c:46:b7:f8:86:70:a7:de:3b:46:34:20:7f:
0c:18:2b:7a:f4:21:f2:1e:2b:3a:55:4b:f3:d6:34:85:76:3c:
92:1e:f4:39:21:63:5e:8a:3c:fb:28:67:4e:0b:b4:32:f7:98:
e7:27:28:53:40:1b:41:85:2c:72:01:5c:b0:27:79:b5:b6:78:
32:eb:1f:23:9b:61:09:47:4b:57:11:1f:be:f7:2b:41:db:6e:
b4:59:ed:2d:02:69:5a:d1:4a:fb:27:65:61:96:54:0a:95:8d:
be:7d:4e:3e:1b:47:2c:8f:bd:8d:17:65:47:80:ae:f7:ef:07:
2b:5d:30:47:0e:d4:3c:c1:cc:c5:fe:fa:4f:97:2f:dd:50:71:
c4:82:b8:10:1c:87:d0:6c:35:e8:30:5b:f9:0a:2d:01:03:c9:
fc:22:9e:64:d1:c3:fb:3d:ba:06:69:f4:78:16:54:6b:91:7a:
01:9b:46:2a:cf:7a:98:ea:3b:6d:8c:33:b5:1e:91:f9:08:b3:
db:4e:2a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:50 2024 by rpki-client on console-ams.rpki-client.org