Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/c8KdkwKmOeZjV9K3DLOQw0ENyW0.roa
File: c8KdkwKmOeZjV9K3DLOQw0ENyW0.roa (raw, json)
Hash identifier: NZeIbQ0M9pmV+Hp9m3h4vWYuGpHSlyzrBERzkE2a8AI=
Subject key identifier: 73:C2:9D:93:02:A6:39:E6:63:57:D2:B7:0C:B3:90:C3:41:0D:C9:6D
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018AA845A209F85473C8C12FD1ADAAC7984B
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/c8KdkwKmOeZjV9K3DLOQw0ENyW0.roa
Signing time: Mon 18 Sep 2023 12:30:50 +0000
ROA not before: Mon 18 Sep 2023 12:30:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 89.42.85.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a8:45:a2:09:f8:54:73:c8:c1:2f:d1:ad:aa:c7:98:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Sep 18 12:30:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73c29d9302a639e66357d2b70cb390c3410dc96d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d3:ba:61:53:e6:c8:03:16:49:98:24:7c:b4:
76:81:d0:49:4a:f3:2f:ac:85:93:c8:d5:fb:dc:5f:
0e:ef:97:5e:86:84:70:f6:a3:41:01:c3:1b:19:8a:
20:fa:62:3a:e7:5b:7b:21:ac:41:77:09:98:f6:77:
df:9d:1a:7a:00:c0:06:3b:cd:9d:81:04:d6:d8:af:
fb:65:37:9c:c0:cf:fe:96:2d:c8:9a:ef:19:39:1b:
8f:ec:e6:a6:be:f5:20:64:d7:c7:37:b1:3b:e0:b4:
f7:aa:e7:47:0c:04:f3:21:59:fc:bf:8f:01:41:c8:
7b:e6:17:e8:8a:e4:db:1d:27:c5:d7:13:2e:24:9d:
b2:bc:f9:ce:0c:cf:6d:3f:bc:18:a6:61:1f:a3:8c:
27:47:b1:84:87:82:14:78:74:5b:60:c6:5c:cb:bf:
cf:e6:73:24:4f:53:a1:24:e9:03:ed:94:5c:11:31:
e8:68:b6:9c:47:6b:6a:94:5b:b4:e3:05:49:61:d2:
df:fd:d1:5c:19:97:84:9f:cb:b0:6f:23:9e:3a:e5:
33:25:1b:e6:9e:47:92:a8:ce:b0:21:40:d0:07:e7:
55:a2:0b:ef:92:5d:ef:63:3d:b9:d3:8a:e1:ef:2e:
84:23:aa:8f:cf:69:4e:6b:14:5d:1e:74:85:1b:17:
84:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C2:9D:93:02:A6:39:E6:63:57:D2:B7:0C:B3:90:C3:41:0D:C9:6D
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/c8KdkwKmOeZjV9K3DLOQw0ENyW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.85.0/24
Signature Algorithm: sha256WithRSAEncryption
56:ce:3b:e4:a9:fa:76:15:b5:5b:a7:b9:99:ea:14:ac:3c:eb:
39:42:c0:f5:28:74:2c:f3:22:99:a7:52:f7:3f:2f:fd:38:0a:
30:fe:e5:a6:d8:9c:24:fe:66:d9:5f:71:66:e4:98:30:73:f1:
c0:88:27:fd:05:06:f0:e1:7b:29:ab:f7:39:18:a9:03:f2:9f:
4e:27:56:71:f5:bc:4f:97:c4:e4:5d:b5:1e:4b:ed:96:3e:ea:
e1:8d:4c:d7:a9:44:c2:f3:47:44:20:2e:f5:61:2d:a2:cb:74:
a1:a1:d9:b4:81:38:9d:82:04:de:be:21:81:30:00:50:a9:7d:
5b:6e:f8:26:1c:07:55:9f:e2:58:bf:e2:76:aa:20:77:08:af:
9e:a4:80:33:23:03:67:72:11:71:90:56:1f:dc:e8:07:1b:27:
a0:07:71:c5:9f:8e:f8:5f:aa:63:ff:1a:dc:d2:51:5c:b0:f9:
23:00:5b:0b:d9:f7:74:7a:3a:6d:33:66:06:2b:ee:38:1f:5d:
1e:0c:bc:61:88:02:e8:b4:7f:b9:b7:2e:4a:6e:f3:8f:fb:04:
3b:92:65:b9:fe:16:c6:c2:01:c9:3b:26:cf:15:19:4c:ad:9c:
c7:7a:49:83:5f:26:dd:26:bf:36:b8:c0:1f:6b:eb:bb:46:5f:
06:a2:1d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 16 11:14:41 2023 by rpki-client on console-ams.rpki-client.org