Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/b34eiNuLT-ircVY5xoYUtJMMxGc.roa
File: b34eiNuLT-ircVY5xoYUtJMMxGc.roa (raw, json)
Hash identifier: yVgQ5V+nrP9vsTf91Xf7LxuL5HULYF0U4NsNby4kt8A=
Subject key identifier: 6F:7E:1E:88:DB:8B:4F:E8:AB:71:56:39:C6:86:14:B4:93:0C:C4:67
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0190E858B156B8AF6995715400909BE8D02B
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/b34eiNuLT-ircVY5xoYUtJMMxGc.roa
Signing time: Thu 25 Jul 2024 05:24:05 +0000
ROA not before: Thu 25 Jul 2024 05:24:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
89.42.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jul 2024 23:59:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e8:58:b1:56:b8:af:69:95:71:54:00:90:9b:e8:d0:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jul 25 05:24:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f7e1e88db8b4fe8ab715639c68614b4930cc467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5f:e4:92:98:05:c4:c6:b6:07:0b:2c:30:01:
0b:22:d3:d8:78:ea:a5:14:66:d1:6b:78:0e:24:07:
e1:06:d5:0d:2a:a0:5c:c7:ce:e5:2f:f2:58:0a:a1:
e5:fc:67:5f:02:c2:eb:dd:f3:4f:37:23:a4:45:ad:
1e:5c:33:cb:49:a5:64:de:a8:5f:b3:bc:4a:0d:6a:
a6:8b:0b:d1:26:03:19:ac:a4:9b:6c:11:e8:48:1f:
19:bb:90:da:8b:67:3e:40:cb:8f:d7:da:fb:89:72:
07:fe:37:11:ef:b7:a1:3a:10:06:ac:1f:d4:93:8e:
83:b6:41:8a:93:5b:a6:91:14:27:41:42:0b:9d:6c:
00:63:47:9c:1d:89:ad:00:a5:81:1f:c8:b4:50:4f:
57:4f:43:2d:28:7c:af:58:59:94:cf:75:7f:fb:fd:
73:65:35:e8:c5:f5:50:de:1b:ea:28:9a:4b:bb:8c:
84:9a:52:04:f1:70:f1:32:6d:74:01:64:92:ca:31:
98:cc:5a:4a:9a:9b:ec:e9:40:f8:a6:cc:34:62:9b:
3c:2c:2b:58:ef:b7:33:ca:b6:12:32:f9:0f:10:b4:
d8:71:2d:c6:1e:bc:92:c9:d0:fb:c3:43:06:4f:93:
93:48:01:34:18:7b:8e:1d:84:3b:97:6a:c7:c4:3f:
b9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:7E:1E:88:DB:8B:4F:E8:AB:71:56:39:C6:86:14:B4:93:0C:C4:67
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/b34eiNuLT-ircVY5xoYUtJMMxGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.81.0-89.42.83.255
Signature Algorithm: sha256WithRSAEncryption
00:cf:ec:0a:4c:04:c0:e2:81:05:9f:4e:98:c3:62:71:a5:23:
2a:b2:65:24:2f:ab:26:44:fb:94:85:fd:80:a2:cb:b1:b0:f1:
1d:88:6c:dc:c9:bf:36:7f:90:9d:25:a7:87:fa:93:5a:8c:bd:
11:39:af:69:29:de:4e:12:14:c0:96:8b:7a:a2:d6:17:cc:70:
2c:13:76:90:01:47:ab:3b:55:6c:ad:de:20:8e:e1:3e:1d:cb:
f3:45:c5:17:d1:f6:ab:67:4c:95:4a:18:93:bd:26:8a:58:b4:
32:18:0e:11:29:52:87:11:f8:d4:35:2d:5d:74:d3:0e:9c:4b:
c9:4e:0a:85:9f:32:fd:cc:60:b9:c1:d6:64:d0:2a:fb:72:8f:
90:65:06:30:49:c8:9e:8f:2c:80:42:a9:23:c1:db:68:57:0b:
7e:5a:70:84:07:13:6d:d2:20:51:67:49:8f:da:7c:e1:66:43:
40:dc:6d:b4:02:8c:50:c9:aa:41:2a:ef:bb:15:d3:df:0a:33:
77:d5:65:bd:5f:d2:8d:a1:83:2e:ea:3e:52:5b:59:de:0c:b9:
90:32:d4:08:88:60:2e:d1:bc:5f:5b:a1:d9:25:e0:06:48:d3:
17:42:20:a8:a0:b1:1f:c2:94:81:34:23:1a:9b:92:65:66:ec:
fb:b0:34:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 02:54:10 2024 by rpki-client on console-fra.rpki-client.org