Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/cXJ_O61d4pux4wNxmDuy_Rx7fvE.roa
File: cXJ_O61d4pux4wNxmDuy_Rx7fvE.roa (raw, json)
Hash identifier: hm1JN/VA4ef67HvwvXg6ncP8mmtUPu4Hf576/aO7aXw=
Subject key identifier: 71:72:7F:3B:AD:5D:E2:9B:B1:E3:03:71:98:3B:B2:FD:1C:7B:7E:F1
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018ECD72A76B3DBF7690782F0A8A1437D6E8
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/cXJ_O61d4pux4wNxmDuy_Rx7fvE.roa
Signing time: Thu 11 Apr 2024 13:57:06 +0000
ROA not before: Thu 11 Apr 2024 13:57:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
89.46.3.0/24 maxlen: 24
185.101.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 14 Apr 2024 06:25:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:cd:72:a7:6b:3d:bf:76:90:78:2f:0a:8a:14:37:d6:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Apr 11 13:57:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=71727f3bad5de29bb1e30371983bb2fd1c7b7ef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3f:8e:c5:f4:9b:f4:ea:2a:59:6a:36:4d:60:
01:26:0b:31:ba:7c:81:4a:e4:11:3f:20:fd:51:0b:
01:81:8c:26:c7:3f:d7:2f:62:57:21:5e:ac:f1:94:
10:85:5e:f4:6d:7e:0a:ec:8c:e3:8f:7b:0c:79:c2:
1d:68:28:52:1b:68:27:22:f6:47:f8:b1:8b:06:1a:
7d:d5:0c:09:b3:0d:6b:62:c9:9e:dd:47:df:76:06:
5b:16:e6:0c:7b:1e:2c:dd:cb:aa:a0:ad:de:6a:78:
a7:fe:58:1d:7d:7d:10:0d:5c:9d:5c:c7:e5:dc:72:
9d:b7:3e:31:f9:5f:15:14:fc:a4:ef:fe:5b:6d:f9:
b8:85:02:e2:24:58:76:09:e4:4f:be:b9:a8:58:79:
e0:c8:8b:82:6e:e4:8c:ae:61:6f:87:f8:d7:9a:d6:
26:3c:08:b1:ba:b9:40:0c:b3:cb:64:45:db:13:26:
23:a1:cb:35:3d:52:31:26:97:c4:3e:d7:00:56:cd:
0f:81:d9:bd:29:a7:fd:6e:f0:82:63:ee:b3:41:03:
5c:5c:72:f9:b4:bc:73:e2:b2:ac:82:12:61:2b:8b:
76:74:df:89:92:a9:18:6b:47:1c:47:52:70:43:12:
3c:7a:27:41:0a:06:9c:93:9e:ea:82:cb:ea:e4:f3:
59:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:72:7F:3B:AD:5D:E2:9B:B1:E3:03:71:98:3B:B2:FD:1C:7B:7E:F1
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/cXJ_O61d4pux4wNxmDuy_Rx7fvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.81.0-89.42.83.255
89.46.3.0/24
185.101.105.0/24
Signature Algorithm: sha256WithRSAEncryption
61:05:dd:da:8c:04:4f:51:12:99:3e:96:60:20:e6:0f:ab:18:
a6:66:f1:84:e3:69:87:52:1f:9a:d6:80:f6:cc:c2:84:42:d8:
6c:80:2e:f0:cb:95:9a:c3:d8:de:e1:3f:59:88:eb:9e:97:30:
09:3f:a9:7b:59:e7:0a:96:f8:b7:78:7d:93:18:cb:fb:f9:da:
23:32:e8:cb:76:99:8b:3c:9b:a4:2e:66:da:30:7c:6c:f2:28:
ec:be:7f:14:f7:50:01:7b:d4:71:d2:a1:d9:b4:80:58:b1:f3:
52:66:6d:d7:16:f8:a1:ea:2e:40:27:44:a3:5b:ce:c5:0b:45:
07:f6:b3:49:28:f3:fa:0e:c6:3a:29:50:14:46:f1:ce:c0:19:
d5:3e:3a:87:28:63:13:58:7b:9b:39:f0:fe:c7:5f:16:9a:bb:
00:8f:fc:4c:23:6d:b2:df:f7:60:79:61:8e:8c:37:ee:b0:4c:
a8:db:44:ce:c1:be:2c:97:b1:21:7a:0b:2b:a2:e2:ed:1a:2a:
be:db:2f:d7:93:6a:0e:1a:ea:01:a4:8e:d5:26:b6:90:db:33:
16:33:49:b5:38:1d:7c:3e:6e:9c:ba:7d:cd:43:40:73:9c:72:
97:1e:a1:34:5b:ed:ff:c4:cc:75:80:a6:53:5d:e7:b5:53:50:
62:ac:3e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 14 07:21:07 2024 by rpki-client on console-fra.rpki-client.org