Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/aIVEAFbN2OHAiyrB_5bsnLJ1GnU.roa
File: aIVEAFbN2OHAiyrB_5bsnLJ1GnU.roa (raw, json)
Hash identifier: 4s3oCPPiCC/K3WROpTPVH8ccdppeWc0VoCAjj/ZRwFM=
Subject key identifier: 68:85:44:00:56:CD:D8:E1:C0:8B:2A:C1:FF:96:EC:9C:B2:75:1A:75
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018B5B250C7B3D1BEE9078012EFA755EB91A
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/aIVEAFbN2OHAiyrB_5bsnLJ1GnU.roa
Signing time: Mon 23 Oct 2023 06:07:16 +0000
ROA not before: Mon 23 Oct 2023 06:07:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 89.42.90.0/24 maxlen: 24
89.33.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Oct 2023 23:29:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5b:25:0c:7b:3d:1b:ee:90:78:01:2e:fa:75:5e:b9:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Oct 23 06:07:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6885440056cdd8e1c08b2ac1ff96ec9cb2751a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:39:f0:7b:c3:02:08:7f:87:00:47:60:53:2b:
4b:29:35:b3:46:c3:95:df:88:02:2e:60:19:60:59:
5c:c1:1f:7c:66:b5:06:ef:00:44:4b:4c:4a:22:43:
69:20:4c:0c:8d:db:f4:5f:cf:ea:8f:c8:b8:a8:3b:
75:6d:4c:7c:f3:1a:cd:ad:e1:63:b0:c9:a2:4a:d6:
27:88:ee:4f:97:c4:b0:67:14:2f:d2:cd:3e:35:91:
ed:df:99:8b:a5:ad:08:01:b5:a5:40:60:f8:b6:47:
42:64:fb:57:1f:fa:b9:2f:00:a0:ce:e0:12:49:e8:
e6:97:1a:23:48:e8:2f:f0:ad:82:50:65:76:c7:3d:
15:32:b4:b4:e6:c7:1f:8e:f8:1b:be:a8:b7:66:cb:
50:cf:63:e7:c3:97:51:d2:71:69:96:97:cd:b5:57:
cb:76:75:82:63:03:f3:15:75:02:fc:7f:4d:0a:c3:
0d:ae:31:a1:94:8c:0f:aa:74:f6:65:31:45:54:82:
34:11:93:96:ae:2c:fe:b8:77:66:13:9f:d3:72:53:
8a:75:01:16:9e:40:66:e2:0e:3b:65:8c:3f:fd:a3:
3f:8f:c1:f3:92:98:af:a5:c7:14:e1:66:a1:9e:f8:
4e:99:b6:4d:ec:72:ec:f2:54:1c:b3:ba:1c:d2:35:
7b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:85:44:00:56:CD:D8:E1:C0:8B:2A:C1:FF:96:EC:9C:B2:75:1A:75
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/aIVEAFbN2OHAiyrB_5bsnLJ1GnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.195.0/24
89.42.90.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:b4:93:bf:55:62:8a:a6:3a:b9:69:6c:7f:b9:c3:6c:09:c7:
b2:31:a6:6f:c9:be:86:08:a8:6e:18:88:40:a0:27:f9:73:ba:
86:1b:6c:8b:c7:de:a3:92:08:1a:b0:18:59:19:06:df:1f:4c:
ec:01:cf:56:2e:13:37:b0:35:7a:75:e6:7e:15:b6:94:99:08:
77:d5:e3:54:af:c8:a2:cd:1c:2c:f7:5b:2b:0e:ce:0f:10:28:
bd:52:25:bd:e7:85:e1:47:15:3c:7e:b9:2a:4a:31:b4:5f:04:
53:e3:1f:38:88:89:47:bd:9e:1b:80:62:a1:06:2e:2e:48:45:
f4:bb:0b:00:93:9b:62:e8:a6:4a:ab:cd:87:9f:b5:2a:d4:3b:
3e:94:c0:af:b0:fd:5a:8a:cf:a3:58:13:8b:06:81:74:5f:9b:
71:6b:57:0d:dd:29:ed:e5:59:f3:42:a7:cd:a1:7c:26:4e:76:
7a:28:1b:ee:ee:bb:42:b1:b7:b5:83:49:47:94:c9:31:d2:e5:
94:ec:79:bd:20:22:35:08:38:72:15:47:7b:99:cf:d1:14:52:
bd:d9:74:91:c3:07:ec:a2:79:2c:42:c4:58:44:7c:a1:15:e2:
e5:3c:64:26:9a:e8:ea:e7:b6:94:32:81:a6:12:fb:ec:fb:e4:
17:27:46:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:19 2024 by rpki-client on console-fra.rpki-client.org