Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/_FKDjLLvB9C44jkRVLjt_X8vjG8.roa
File: _FKDjLLvB9C44jkRVLjt_X8vjG8.roa (raw, json)
Hash identifier: DOpTVsxjs7bcOyT2gbSLfEbje8OE1esTgwFRx2LIOLc=
Subject key identifier: FC:52:83:8C:B2:EF:07:D0:B8:E2:39:11:54:B8:ED:FD:7F:2F:8C:6F
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018C863E1B1E71522F5849E5FA1DB7124A48
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/_FKDjLLvB9C44jkRVLjt_X8vjG8.roa
Signing time: Wed 20 Dec 2023 08:01:06 +0000
ROA not before: Wed 20 Dec 2023 08:01:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
89.46.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Dec 2023 07:08:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:86:3e:1b:1e:71:52:2f:58:49:e5:fa:1d:b7:12:4a:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Dec 20 08:01:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc52838cb2ef07d0b8e2391154b8edfd7f2f8c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d3:89:33:46:18:e7:6d:ad:77:c0:58:e5:b0:
61:3f:9b:73:c3:c4:fd:8c:70:55:01:25:4d:ae:74:
53:82:af:f5:e9:20:5e:7e:73:47:70:c6:35:50:e3:
ff:74:e6:c4:30:0f:bf:c4:2d:d2:85:46:f8:26:ed:
2e:f7:11:51:4b:d9:97:b9:36:b1:38:9a:e0:fa:0c:
3b:87:6b:19:cb:cd:81:b4:06:8d:8a:3f:74:9c:cc:
4f:ec:70:bf:89:50:c4:51:c6:0e:bf:df:ae:23:b3:
a4:0a:f0:f0:dd:59:48:ee:77:a2:3f:7a:a9:63:a7:
a6:c2:71:a5:34:e1:de:97:72:49:bc:54:e6:b5:4d:
77:fe:ea:d7:4a:68:df:be:6f:a4:6e:f3:f6:6c:3a:
33:ba:ea:a1:4c:b1:cf:30:b9:00:38:e5:19:d8:ef:
04:26:43:7a:cd:a4:a4:27:57:a0:ed:69:4a:4f:4a:
3a:9a:9e:e9:98:aa:3f:75:86:80:66:b1:89:bf:58:
f0:bf:1a:2f:32:00:bb:a8:df:89:6a:9b:72:82:9b:
9c:6f:d6:ce:e6:47:12:e0:30:44:28:bb:de:6d:f5:
e6:2c:08:5e:89:27:ca:f1:5b:19:b6:a0:a0:93:9f:
85:bd:aa:fa:ba:d8:6e:1b:7b:c0:87:38:79:36:82:
1f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:52:83:8C:B2:EF:07:D0:B8:E2:39:11:54:B8:ED:FD:7F:2F:8C:6F
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/_FKDjLLvB9C44jkRVLjt_X8vjG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.81.0-89.42.83.255
89.46.3.0/24
Signature Algorithm: sha256WithRSAEncryption
06:d5:2d:3c:71:3c:40:c1:47:3e:41:53:ce:63:02:dd:77:ec:
23:8f:ab:36:ad:90:e9:ee:76:12:aa:fd:c6:a7:fe:91:d3:4a:
8d:8e:e4:2a:9e:bf:d9:34:a8:72:e7:2e:fb:51:42:3e:42:85:
63:22:9f:69:f6:86:48:e5:9c:37:d7:be:fc:05:7a:a8:c8:2d:
b0:07:aa:de:07:a8:3e:66:87:bd:f4:9c:97:bf:8d:e0:55:c7:
1e:e3:d0:1d:54:0e:98:e9:e1:2e:ad:0c:85:1d:ab:7a:b3:7f:
b7:4c:7a:ca:72:df:0c:5b:af:9d:1f:a8:ca:3b:08:eb:91:57:
f7:14:78:f8:9d:43:d9:37:2a:07:a2:ed:c3:1e:d1:e0:6e:41:
58:4e:c0:82:cb:8a:e7:e7:f3:66:c1:06:ba:90:3c:21:8f:66:
bb:8b:bd:21:2b:d2:e9:4d:61:b9:08:aa:bf:99:ec:33:28:4a:
a4:1d:b0:aa:5a:2f:05:40:c2:88:57:cb:9c:4c:21:fb:4b:73:
88:ce:67:cc:ba:9c:08:15:6f:b7:5a:45:59:81:70:12:84:07:
65:dc:97:8d:16:97:d5:0f:90:0b:30:ed:55:09:24:ec:b1:88:
9f:a6:e1:de:91:5d:61:8d:51:f7:6a:13:b9:09:22:37:3a:fe:
94:b4:e1:84
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:50 2024 by rpki-client on console-ams.rpki-client.org