Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/_qy4CmN2VFf4IvkrPl0ly6sH-5w.roa
File: _qy4CmN2VFf4IvkrPl0ly6sH-5w.roa (raw, json)
Hash identifier: XBL1rX6UlzVWNiWfSfHXJYlHheVSce3bmiB8iKkakss=
Subject key identifier: FE:AC:B8:0A:63:76:54:57:F8:22:F9:2B:3E:5D:25:CB:AB:07:FB:9C
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018AA800F7CE83C89EFFA133CF0376B1AF4F
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/_qy4CmN2VFf4IvkrPl0ly6sH-5w.roa
Signing time: Mon 18 Sep 2023 11:15:50 +0000
ROA not before: Mon 18 Sep 2023 11:15:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49468
IP address blocks: 89.42.84.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a8:00:f7:ce:83:c8:9e:ff:a1:33:cf:03:76:b1:af:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Sep 18 11:15:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=feacb80a63765457f822f92b3e5d25cbab07fb9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:73:53:69:3f:d3:e5:cc:0e:40:43:fb:22:05:
f9:f8:8e:46:b3:06:53:86:22:5e:dc:c9:75:15:c1:
04:1f:c3:0a:a7:1c:42:0d:38:8d:0f:7f:5b:5d:6b:
e6:22:ab:09:e1:17:29:f7:18:fa:44:93:b6:55:92:
ab:2f:ea:4e:db:22:fa:71:5c:66:ac:5d:99:8c:43:
af:a5:7a:51:05:3d:91:bf:a4:98:94:2d:b6:45:97:
2f:cd:bf:7c:2a:36:e8:6d:95:f2:d8:1d:d3:66:a2:
c6:a9:3f:5e:b2:4c:05:f6:0a:6c:1e:f8:b3:d6:53:
14:d0:61:49:9a:7e:b0:55:0b:ae:12:51:11:00:7a:
e0:84:e9:48:01:9e:e0:ae:4f:29:15:2e:c7:2d:e6:
78:af:8c:b1:29:b1:e3:de:25:8a:e1:56:11:95:68:
96:0d:3e:bb:48:8d:32:d0:b9:3d:77:0b:a6:6d:27:
8c:05:93:ea:a8:aa:67:57:66:08:21:1a:2f:f1:56:
43:88:89:16:e6:fe:ad:22:59:f0:3a:59:dc:95:4e:
ea:c5:4e:95:2e:37:b0:b2:34:15:e8:99:18:f9:58:
9f:4e:38:9d:b1:b2:ca:1d:25:47:c6:fe:92:8d:22:
4d:e1:6a:41:a1:2b:9d:bb:74:ec:cb:7b:d4:70:ce:
eb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:AC:B8:0A:63:76:54:57:F8:22:F9:2B:3E:5D:25:CB:AB:07:FB:9C
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/_qy4CmN2VFf4IvkrPl0ly6sH-5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.84.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:a4:06:48:09:3d:d4:53:0e:4b:2f:ad:0a:95:b4:04:89:d6:
db:86:d5:77:57:3f:f8:76:c5:f8:2f:be:11:5b:db:48:55:a4:
ab:e3:72:73:74:ac:6d:62:eb:2c:12:75:95:a7:b0:6b:9a:7b:
b0:cf:fd:e6:80:37:5e:10:db:83:f5:c2:68:75:74:be:5d:46:
c3:0e:a1:a7:86:44:71:63:50:3f:c0:3e:9c:db:b3:ee:26:80:
e6:9f:e2:a1:cd:7c:7e:e0:28:2c:11:1a:fd:0c:3d:3f:65:de:
24:a4:38:d5:50:c8:ac:06:3f:10:94:81:ec:61:62:71:11:c4:
4d:c1:a2:ad:5f:b7:9c:cd:8e:96:51:5a:69:18:ec:a2:d1:82:
72:95:3e:52:0a:ae:b1:1c:93:4b:59:bd:eb:e3:93:0e:2e:c8:
7c:9a:cc:0f:4e:a6:f3:d2:16:59:f3:47:cb:64:64:9b:fb:35:
a2:b1:f5:f5:91:10:e2:a8:11:d0:ec:dd:85:ae:65:a1:23:60:
c4:de:81:fe:ab:09:40:6b:67:ad:a7:41:67:5b:81:6b:ee:c0:
9a:cb:47:8e:c0:7c:18:98:76:83:d0:18:9e:30:70:91:42:70:
8e:7b:fb:0a:75:61:c0:13:35:de:54:b4:cc:1b:da:a4:95:c5:
09:76:e4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 18 08:10:53 2023 by rpki-client on console-fra.rpki-client.org