Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/bQe2mXmpbCykv7hdasMWMkGXVMI.roa
File: bQe2mXmpbCykv7hdasMWMkGXVMI.roa (raw, json)
Hash identifier: ZHShXMkC/eehaFBS7OKosf2l2rOdWT9aenMkNA9Xyoc=
Subject key identifier: 6D:07:B6:99:79:A9:6C:2C:A4:BF:B8:5D:6A:C3:16:32:41:97:54:C2
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018D645A01102276DB71F6E2D7B834DDD075
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/bQe2mXmpbCykv7hdasMWMkGXVMI.roa
Signing time: Thu 01 Feb 2024 11:07:16 +0000
ROA not before: Thu 01 Feb 2024 11:07:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61135
IP address blocks: 89.42.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 04 Feb 2024 14:51:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:64:5a:01:10:22:76:db:71:f6:e2:d7:b8:34:dd:d0:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Feb 1 11:07:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6d07b69979a96c2ca4bfb85d6ac31632419754c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:03:3a:fc:64:6b:2a:bd:a9:83:e1:7b:d8:3c:
17:73:5e:f4:89:8b:3e:a1:23:9e:bc:3f:a0:70:22:
4b:61:67:92:d3:8b:47:57:bf:cc:5c:79:65:18:da:
74:5d:9a:63:51:a1:2e:56:07:41:c5:43:ae:3e:c3:
4f:fb:32:2d:4d:4f:91:94:57:e2:da:a0:28:05:e7:
9d:29:fd:30:f3:7d:3a:5f:9c:61:2b:ac:42:81:d0:
f3:af:be:67:5a:65:90:db:02:c2:50:19:37:20:c9:
9c:37:64:49:e8:8d:cd:19:66:d5:fd:98:71:64:46:
52:b6:80:b6:8e:72:cf:3c:39:64:58:1f:4b:2f:88:
81:5f:e9:6e:37:21:c2:ab:12:a1:b8:d9:57:7d:56:
f1:2a:0a:af:b3:c8:62:4b:4a:fe:40:6d:86:0f:8c:
16:1a:8e:b4:55:c3:52:0a:5a:09:75:87:68:f4:8c:
d5:37:7c:46:4d:97:bd:91:8a:98:83:17:a6:32:30:
84:f2:e8:ba:f4:66:fd:e7:79:11:dc:45:6f:80:73:
cf:78:bc:3b:a6:17:77:62:2b:9e:e1:9e:b0:6f:8d:
cf:e8:b9:05:77:f6:cc:d8:5c:8f:be:5d:81:67:d7:
7a:3a:23:1f:c9:ea:e4:65:eb:4f:12:f9:eb:46:03:
f1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:07:B6:99:79:A9:6C:2C:A4:BF:B8:5D:6A:C3:16:32:41:97:54:C2
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/bQe2mXmpbCykv7hdasMWMkGXVMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.82.0/24
Signature Algorithm: sha256WithRSAEncryption
57:a6:f3:24:7c:4b:b0:ef:46:94:f5:ac:dc:f3:88:61:ce:0c:
46:80:8e:32:46:c1:7e:ba:46:12:2f:0d:28:38:b0:21:96:92:
bf:dc:d6:bf:dd:8c:f9:2a:46:22:96:72:17:43:82:21:65:75:
0e:8c:9c:b1:b6:e0:18:a7:f2:e2:38:e7:a7:d3:8e:cd:ef:da:
c6:9f:39:64:77:ab:5d:8e:90:c0:82:e4:40:69:53:a8:1e:5a:
fb:4f:b9:ae:82:c6:59:ef:3a:e0:bf:b8:d4:30:f7:0f:83:6f:
4b:50:c9:24:e2:41:e9:63:58:71:d9:60:d1:eb:32:e6:10:44:
1a:a6:02:e7:32:53:53:2b:cb:54:f8:a7:e7:d8:72:1d:29:5d:
21:82:53:d5:12:1e:25:98:fb:1c:2e:a6:34:30:dc:55:79:b1:
74:dd:0a:56:fe:d0:8e:35:37:ac:dc:3b:94:6b:51:5e:57:72:
ec:e3:2f:e5:4d:53:bb:91:44:03:5c:6f:44:ef:8d:7e:1d:ed:
a3:18:19:78:02:ec:56:93:64:7f:60:cf:a5:14:66:74:d0:7d:
79:f3:16:26:b9:65:c9:69:71:72:85:8a:60:b6:06:0b:24:37:
28:75:aa:c5:fd:1f:bc:91:82:38:72:30:f2:e7:24:60:ae:58:
dc:b8:50:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 4 20:01:30 2024 by rpki-client on console-fra.rpki-client.org