Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/blmuMirrVW0qCpHEvYhAaaM6KHg.roa
File: blmuMirrVW0qCpHEvYhAaaM6KHg.roa (raw, json)
Hash identifier: /DXWMmUU58f/a0b8rwO9pwrA+gRIRGs0go5dZO7o87A=
Subject key identifier: 6E:59:AE:32:2A:EB:55:6D:2A:0A:91:C4:BD:88:40:69:A3:3A:28:78
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0191BDD0CAD48C39246C126E7650C6D7B2A6
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/blmuMirrVW0qCpHEvYhAaaM6KHg.roa
Signing time: Wed 04 Sep 2024 16:14:22 +0000
ROA not before: Wed 04 Sep 2024 16:14:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 26 Sep 2024 05:25:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:bd:d0:ca:d4:8c:39:24:6c:12:6e:76:50:c6:d7:b2:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Sep 4 16:14:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e59ae322aeb556d2a0a91c4bd884069a33a2878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4f:63:0d:23:b2:09:c8:b7:56:2b:2b:2d:e6:
38:93:76:40:be:39:11:9c:5d:55:da:a6:7b:c6:ad:
e2:97:03:62:4f:21:91:98:81:26:44:db:77:79:49:
d3:19:95:7b:fb:f1:ea:91:c8:2b:85:78:0d:aa:07:
fe:ce:9a:cc:a1:c1:62:c4:cd:f8:be:c4:db:37:7b:
4a:e0:1a:35:d7:ea:e1:35:86:44:c1:f3:88:77:a8:
96:9b:82:4f:a3:05:e2:09:39:1c:bc:5e:94:ce:8c:
5a:59:78:28:24:3d:1d:30:8d:81:a8:2c:5f:b6:d7:
09:0e:35:32:5c:d9:76:14:7e:cd:a3:9f:a2:44:d8:
7a:9e:64:d0:39:5e:62:39:1f:5e:cf:26:34:91:db:
44:0f:34:c7:c3:d1:67:9b:31:40:8d:00:4c:9d:cf:
51:ca:91:90:de:d0:5b:cb:1e:d9:35:15:bd:d8:f9:
90:46:39:b0:9f:32:4e:6f:72:4b:f5:1f:df:13:01:
d9:c3:27:9d:89:d7:02:ed:cf:86:7c:d0:23:67:76:
93:20:9b:b3:d6:2d:25:fb:82:47:38:4f:36:05:d5:
3f:aa:57:a7:06:a0:3f:bc:a2:c3:9d:92:ea:e5:18:
b4:aa:4c:22:50:3d:bb:c7:4f:b1:36:54:8a:69:ed:
1d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:59:AE:32:2A:EB:55:6D:2A:0A:91:C4:BD:88:40:69:A3:3A:28:78
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/blmuMirrVW0qCpHEvYhAaaM6KHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.81.0-89.42.83.255
Signature Algorithm: sha256WithRSAEncryption
53:c1:90:e4:80:39:9d:ff:6c:71:a8:4a:0f:d7:db:e0:73:41:
f5:19:b3:f9:0e:bf:17:51:30:31:fe:80:d2:08:ad:93:f9:40:
38:be:3b:7d:58:2c:d1:ec:71:46:83:8a:8d:ac:1d:37:cb:74:
98:ea:73:ac:fa:99:d9:7f:ca:74:a0:ab:1b:58:f9:58:19:4a:
53:b1:cc:54:37:73:54:d2:61:5b:68:16:1b:be:d8:c8:6e:b1:
80:be:43:72:b5:0e:f3:e2:c3:1d:40:6d:8b:48:ee:e7:45:08:
d4:37:92:e3:d2:45:35:33:28:c0:ad:8e:cc:c9:d4:69:26:e5:
7b:59:b6:86:d0:c3:54:05:41:f0:35:37:87:fb:5a:cc:61:e7:
30:26:5f:f3:99:a3:fe:d4:fa:49:7b:06:02:a5:5e:52:62:d9:
b5:e2:6c:a2:27:06:fa:16:b7:b3:b5:ea:c2:7e:1c:da:b1:c2:
2f:26:8f:66:ea:97:13:2b:90:78:4c:ea:33:a2:78:82:8b:f6:
09:4d:08:02:ee:09:c2:49:84:0c:c9:b9:25:84:1c:31:b5:09:
62:c0:b0:9d:f2:eb:41:76:c0:dd:e8:5f:51:e7:be:b7:15:e0:
81:98:de:a0:c0:93:70:ae:ba:0e:35:48:f2:c0:18:70:af:89:
96:16:15:dc
-----BEGIN CERTIFICATE-----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Generated at Thu Sep 26 06:01:41 2024 by rpki-client on console-fra.rpki-client.org