Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/e-UJK7LHkf6kOPuJgvk0P17xnjk.roa
File: e-UJK7LHkf6kOPuJgvk0P17xnjk.roa (raw, json)
Hash identifier: n1bRlOZLhY21ZXlK0uCbv876CKmN17yZAsCLWENHwdw=
Subject key identifier: 7B:E5:09:2B:B2:C7:91:FE:A4:38:FB:89:82:F9:34:3F:5E:F1:9E:39
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018B3816E525B3785751316FC112F4EB2214
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/e-UJK7LHkf6kOPuJgvk0P17xnjk.roa
Signing time: Mon 16 Oct 2023 10:45:06 +0000
ROA not before: Mon 16 Oct 2023 10:45:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.42.82.0/23 maxlen: 23
89.42.80.0/23 maxlen: 23
93.119.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Oct 2023 14:20:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:38:16:e5:25:b3:78:57:51:31:6f:c1:12:f4:eb:22:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Oct 16 10:45:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7be5092bb2c791fea438fb8982f9343f5ef19e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e0:a0:f0:08:1a:17:49:a6:c7:c9:f2:27:cd:
70:67:6d:67:be:f6:da:0d:e4:73:47:87:53:10:e0:
70:ee:52:42:19:ba:f2:39:3b:e1:1c:8d:2c:2a:2e:
56:b1:d9:f2:e5:0e:32:25:dc:ea:13:af:5d:46:d6:
a3:35:92:96:e1:d5:3e:32:97:2a:d8:ab:0c:24:15:
03:98:4e:4a:ba:6c:1d:10:43:ba:49:a4:76:ad:6a:
e8:5a:e1:5f:f6:3f:32:79:d3:15:cd:53:d9:36:0e:
49:fa:ea:87:9c:76:91:10:e2:31:50:1b:c9:84:5c:
36:00:57:6f:81:da:19:72:fe:d0:5b:cb:74:9e:7b:
b5:1e:2c:83:5d:21:4f:28:b3:d8:61:23:f6:08:3e:
6a:00:c6:97:ba:8c:75:74:56:c8:43:3d:28:87:a3:
70:61:d9:23:0c:6a:12:ff:a0:94:02:1b:51:8f:02:
b0:3f:7c:40:bf:b5:3e:0b:8a:66:d3:b7:6f:8d:e9:
43:68:7e:78:e1:65:46:da:56:d4:60:1d:8a:99:a9:
b9:bd:56:2b:ca:a9:2c:7b:7c:8f:e9:9e:5a:3d:0c:
ae:53:07:c0:2d:4f:42:a4:70:46:11:f1:cf:54:9e:
9c:1a:1a:e7:42:70:67:fb:42:94:fd:36:1f:ac:91:
96:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E5:09:2B:B2:C7:91:FE:A4:38:FB:89:82:F9:34:3F:5E:F1:9E:39
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/e-UJK7LHkf6kOPuJgvk0P17xnjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.80.0/22
93.119.105.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:87:66:5e:f2:88:b6:bb:0b:99:bf:ea:1d:b8:a1:25:41:2c:
d1:9c:1e:d5:80:8f:94:e8:33:52:ec:4d:6c:1d:54:59:d4:86:
27:48:3d:9b:ae:ca:15:da:28:46:21:7f:c7:c4:7f:dc:22:50:
53:8d:b7:0b:3d:3d:6b:ef:a8:22:60:38:36:31:60:3f:9a:de:
2c:05:f7:83:79:85:08:ac:51:b9:1a:43:fb:b4:49:d0:5c:87:
32:22:95:7e:d4:8b:6a:48:98:56:8b:6b:fc:03:4f:e9:58:21:
6d:69:7f:4f:f4:ef:df:03:83:ba:1e:8a:21:0f:f2:32:1b:bf:
b1:74:47:ff:c7:f5:20:6b:25:b3:60:f7:27:ce:cb:48:eb:66:
a6:db:1d:9e:ee:e2:09:f9:ac:04:f1:48:7a:e1:0f:e0:a9:69:
c5:80:5b:c7:f2:45:04:00:67:ee:5b:8f:07:ec:34:5e:2f:e9:
5c:c9:0a:87:fe:f3:82:42:4c:24:d3:7a:37:2a:32:27:a6:08:
51:7a:0a:bb:42:33:b1:17:d4:e9:1e:8a:39:1f:8d:2f:57:30:
7f:4e:ce:d1:ed:1a:1c:7c:23:32:10:13:10:5d:90:e7:a2:61:
64:d0:7a:e4:66:3d:cc:9c:54:90:9e:7f:ea:8d:b1:7a:df:78:
f5:43:91:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:50 2024 by rpki-client on console-ams.rpki-client.org