Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/_e0JWXosjwkXv9ts9kKgGunh1wA.roa
File: _e0JWXosjwkXv9ts9kKgGunh1wA.roa (raw, json)
Hash identifier: 0TMwRUgPpuuZJ71/uEpxoSJiPahtjmqUUwMT8EOYRko=
Subject key identifier: FD:ED:09:59:7A:2C:8F:09:17:BF:DB:6C:F6:42:A0:1A:E9:E1:D7:00
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0189F46B6C2B09049D44B3B8F911873EA2EF
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/_e0JWXosjwkXv9ts9kKgGunh1wA.roa
Signing time: Mon 14 Aug 2023 14:20:28 +0000
ROA not before: Mon 14 Aug 2023 14:20:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.42.81.0/24 maxlen: 24
89.42.82.0/24 maxlen: 24
89.42.83.0/24 maxlen: 24
89.42.80.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f4:6b:6c:2b:09:04:9d:44:b3:b8:f9:11:87:3e:a2:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Aug 14 14:20:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fded09597a2c8f0917bfdb6cf642a01ae9e1d700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cc:15:bb:d4:8a:e0:e9:ae:a9:00:55:a4:ee:
ee:82:b2:86:42:1a:b1:2c:71:71:11:e6:37:c2:e3:
1c:c2:bc:81:93:d7:78:4b:2b:27:c6:47:f0:40:ed:
16:cb:74:e7:27:1c:32:7c:a6:4f:a0:06:4b:5c:5c:
52:c8:a7:a1:0e:79:62:30:2a:07:81:df:de:fa:b7:
58:2e:8d:cd:5d:5e:e3:89:5c:49:43:4e:28:1b:ce:
2d:45:89:08:f6:49:6d:71:69:00:2e:1b:23:de:ed:
03:6e:00:3f:61:2d:7d:28:9e:1c:01:a6:9d:b7:64:
c2:90:37:3f:8d:05:0e:07:61:aa:56:ea:22:90:99:
f9:91:04:58:b7:91:c7:56:1b:3b:b6:13:11:7a:d6:
2f:71:5f:c1:f8:82:2d:90:b4:10:22:d9:5d:9e:19:
21:f0:a7:21:62:01:07:eb:27:f9:a0:75:3d:e1:cd:
01:7f:39:56:82:74:6e:50:5c:6f:8c:8a:96:4e:a3:
32:82:1f:88:90:27:9f:0e:d1:17:95:9f:01:ea:d6:
a4:f0:fd:bb:e1:ff:fb:b8:64:f1:34:7f:e2:45:ef:
5a:e7:7c:ff:6a:05:d8:f5:4d:06:ea:a8:eb:c5:1f:
68:3a:dd:d4:39:81:9c:b3:45:13:3c:63:61:52:78:
8b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:ED:09:59:7A:2C:8F:09:17:BF:DB:6C:F6:42:A0:1A:E9:E1:D7:00
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/_e0JWXosjwkXv9ts9kKgGunh1wA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.80.0/22
Signature Algorithm: sha256WithRSAEncryption
69:9e:9b:f6:ae:9b:a3:18:39:c1:34:12:61:56:e5:a7:7c:51:
1d:63:68:75:84:db:ff:a3:19:0d:0e:0a:2f:2d:7f:c9:fc:f8:
ae:05:8a:c2:fe:e4:89:82:ae:82:62:4e:2d:28:c9:19:10:f6:
a6:51:59:03:bf:d7:34:c4:b2:40:41:48:e6:60:61:ed:e1:b2:
d3:0e:e0:03:61:f5:be:ef:de:62:ed:bd:cb:1c:c3:2a:00:9e:
c4:91:b1:8b:f8:f3:a5:5c:de:c9:87:ec:3f:fe:c7:7b:da:85:
77:99:b2:59:8e:9e:a0:ee:44:ba:c3:63:28:4e:3d:68:ee:57:
21:d5:e1:cd:9b:35:3d:57:8b:e1:a5:11:2a:f6:f5:bf:c6:c2:
d9:38:53:2b:bf:ed:b4:fb:0c:07:67:40:9b:e0:1f:d4:27:7e:
c5:cd:01:2f:44:e1:d7:0f:1c:81:02:76:bf:95:f1:f6:c4:ea:
d4:d2:1f:b7:35:f1:cc:9e:0e:eb:c1:6b:4c:8f:c3:37:3c:8f:
b5:5f:a0:1a:9a:02:9d:23:32:f0:34:23:c0:40:df:5c:58:39:
2a:c1:07:db:96:5a:69:40:c1:1d:75:05:7c:6b:e2:5f:e9:ba:
48:5d:48:2d:a1:c8:b5:f8:a9:92:d7:3b:11:82:be:e4:40:65:
ef:bd:c4:f8
-----BEGIN CERTIFICATE-----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Generated at Tue Aug 15 06:22:12 2023 by rpki-client on console-fra.rpki-client.org