Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/eVbuKQA2ky00sNNsDCQjuFD4vmw.roa
File: eVbuKQA2ky00sNNsDCQjuFD4vmw.roa (raw, json)
Hash identifier: NVFN6V/jFWoWGrWL/zepYOUAaaX9mFGSPsfy5TSFi2o=
Subject key identifier: 79:56:EE:29:00:36:93:2D:34:B0:D3:6C:0C:24:23:B8:50:F8:BE:6C
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0188663C8E55CB4D9163E696EE7A12C9BF89
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/eVbuKQA2ky00sNNsDCQjuFD4vmw.roa
Signing time: Mon 29 May 2023 06:40:24 +0000
ROA not before: Mon 29 May 2023 06:40:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212815
IP address blocks: 89.33.194.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Jul 2023 07:16:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:66:3c:8e:55:cb:4d:91:63:e6:96:ee:7a:12:c9:bf:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: May 29 06:40:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7956ee290036932d34b0d36c0c2423b850f8be6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b3:71:81:f7:3a:cf:c7:96:01:7a:ca:71:1b:
89:f2:55:89:e3:b1:fe:5e:ff:8d:8c:29:c0:0a:a4:
c3:1c:45:fc:71:31:9d:cc:51:9f:69:29:ab:67:08:
05:ab:ef:62:80:76:51:7a:9e:24:75:c5:02:67:49:
24:f3:a7:1f:61:97:19:a3:bb:6f:e0:88:a4:76:8e:
b0:c5:42:b2:7c:5f:18:75:f9:e9:35:ea:53:db:af:
22:cb:00:4d:80:aa:54:a6:0a:fb:63:6c:10:c9:16:
e6:7c:26:00:52:d7:bd:c1:5c:3e:67:35:c2:ee:bb:
90:64:24:01:d3:7f:e7:48:2a:f2:31:fd:56:e5:1f:
07:cb:9b:b4:91:89:49:7a:18:fb:c8:19:86:7b:4f:
9c:5b:82:40:06:21:d4:22:87:d1:17:88:a9:7f:07:
9c:d0:cf:ce:3d:79:13:2c:c1:7d:4c:13:f3:98:8b:
dc:29:f0:65:e8:4f:8d:a1:68:54:c6:3b:c1:75:a1:
99:71:d8:3a:45:45:4e:7d:48:13:a1:56:be:03:bf:
5f:00:8e:46:10:5a:44:b8:e7:40:56:25:a7:83:41:
36:90:77:91:a5:4d:78:1f:e0:04:c8:ea:11:6a:2e:
6f:1a:29:6a:2e:f6:f8:9b:3a:3f:a5:44:50:09:b6:
18:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:56:EE:29:00:36:93:2D:34:B0:D3:6C:0C:24:23:B8:50:F8:BE:6C
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/eVbuKQA2ky00sNNsDCQjuFD4vmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.194.0/24
Signature Algorithm: sha256WithRSAEncryption
64:fd:8e:82:50:33:34:59:0b:50:1f:f2:8f:50:5d:47:a7:55:
72:45:a1:c5:5c:6d:f6:78:e3:cd:6f:73:35:48:52:f2:ba:89:
86:3d:e2:19:f6:6f:26:a3:5b:a8:c7:64:9c:de:a2:a1:fb:08:
28:20:fd:02:4c:07:53:5d:07:97:0e:c2:82:ed:5d:e1:c6:6a:
f5:08:92:26:aa:5d:7e:c2:70:16:eb:b8:9c:02:ef:52:17:c4:
30:c3:43:a2:4d:8f:42:2a:8f:31:5c:94:61:45:b5:56:06:3a:
21:ca:b0:7f:30:65:35:14:41:70:f4:d8:17:3f:50:a0:42:44:
14:8e:86:7e:c9:cf:ae:1e:55:27:1d:84:c7:5d:37:19:9c:6e:
7a:e5:a3:d8:59:d5:2e:89:9a:eb:99:5c:e7:a4:72:40:d7:3d:
4e:2c:b9:b8:d3:5e:7e:3e:91:cd:f2:4f:09:9e:da:2c:34:66:
6e:8a:ad:d7:52:c7:b5:ee:91:e8:77:1a:a0:70:aa:34:f3:2f:
12:22:b0:02:c4:61:6f:dd:1e:66:4a:14:0a:e4:7e:e2:86:d3:
e0:df:5e:59:f0:c5:4f:fb:34:82:cf:a7:53:40:cd:2b:4b:13:
b2:d1:71:33:8a:db:87:45:e3:ae:e5:20:46:9e:eb:f3:3b:ed:
f7:7b:3f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:50 2024 by rpki-client on console-ams.rpki-client.org