Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/ftxteJVV1OZHsVMJIbnr28wZsyI.roa
File: ftxteJVV1OZHsVMJIbnr28wZsyI.roa (raw, json)
Hash identifier: T7I6/hAj32060b7a6kZvzIQLkIOVdzLtCHykowrE8EM=
Subject key identifier: 7E:DC:6D:78:95:55:D4:E6:47:B1:53:09:21:B9:EB:DB:CC:19:B3:22
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018AFAC33CF9DCAFBA30A3EAD6C6BFFAC3AE
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/ftxteJVV1OZHsVMJIbnr28wZsyI.roa
Signing time: Wed 04 Oct 2023 12:56:53 +0000
ROA not before: Wed 04 Oct 2023 12:56:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.42.82.0/23 maxlen: 23
89.42.80.0/23 maxlen: 23
93.119.105.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fa:c3:3c:f9:dc:af:ba:30:a3:ea:d6:c6:bf:fa:c3:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Oct 4 12:56:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7edc6d789555d4e647b1530921b9ebdbcc19b322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:41:aa:0e:36:87:a7:d6:d1:84:ff:c8:df:53:
1b:0d:e0:a9:2c:6b:60:c0:c2:3c:ae:82:23:a8:69:
47:89:70:7f:97:23:5a:51:6a:32:7a:03:90:56:81:
3b:4e:9a:63:f4:25:f9:ed:4b:df:f4:13:8f:b0:90:
b7:71:77:27:2f:81:d6:6a:cc:41:5d:a0:47:c6:06:
ad:0e:44:1b:dd:c6:c9:c3:f3:cb:20:08:0b:19:8b:
5a:a1:4e:f0:67:a8:3f:03:8a:b0:d0:f1:ad:d7:81:
06:5d:77:ac:16:6c:68:bd:28:67:4c:9e:e1:8e:5d:
c4:49:df:d8:a7:80:c7:dc:90:1d:aa:08:91:5f:b8:
cf:f9:4e:47:11:ed:83:87:62:30:9a:65:70:77:54:
cd:48:22:68:15:eb:4b:99:58:29:23:78:3c:aa:a3:
cd:60:23:72:e8:93:29:6a:7e:a2:8b:bf:f7:15:61:
9c:96:22:a7:46:fb:9d:19:be:cc:cc:f1:14:49:48:
27:a6:4c:f8:cb:4e:d7:48:2d:4c:cf:a3:9e:5e:87:
17:2f:01:ca:94:02:b9:e9:db:d7:a6:06:da:72:e9:
4c:ce:22:5f:75:c8:f5:7f:0d:73:d0:56:0f:1f:8a:
d4:01:f0:13:6c:2a:5d:a1:ef:b0:26:f5:64:e6:3d:
d1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:DC:6D:78:95:55:D4:E6:47:B1:53:09:21:B9:EB:DB:CC:19:B3:22
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/ftxteJVV1OZHsVMJIbnr28wZsyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.80.0/22
93.119.105.0/24
Signature Algorithm: sha256WithRSAEncryption
73:6e:a4:78:7f:ee:f3:50:58:90:8f:88:ee:7b:cc:64:a9:e7:
ca:f9:fa:db:ba:da:f0:7f:57:81:7d:98:6f:ad:e3:45:db:3a:
b9:3e:0d:67:69:ac:f7:89:3a:d4:21:83:db:a6:1a:ad:39:50:
af:ed:ee:20:42:a1:75:f3:84:fb:6a:79:71:02:9d:35:df:c3:
47:59:be:56:0e:3d:0a:e9:c8:c1:ac:34:e2:5b:61:c2:1a:c6:
40:81:c0:62:58:a8:ba:47:60:64:3f:cf:b1:c0:b2:f5:ea:8d:
e0:99:f4:89:24:b2:9d:ed:a1:9f:10:db:4e:b4:98:cc:e9:93:
39:f3:7f:f8:8b:1f:c7:d0:91:62:81:fe:cf:41:b1:27:9a:bb:
8e:12:01:2c:ef:f6:4e:ec:cf:63:5f:52:08:0f:ee:16:61:02:
61:9b:97:dc:2a:7b:87:00:f3:81:46:01:e5:d4:c6:35:b6:73:
2e:e5:8d:92:16:28:3d:06:6f:49:8d:d3:8c:0c:0e:c2:44:cc:
36:4a:be:af:c2:53:5d:48:5f:9d:79:a5:12:c5:ab:b8:00:a9:
55:e3:ad:0c:bd:70:f4:2c:65:ab:b2:0d:f7:1c:d2:ba:91:bd:
78:26:74:5e:d6:e8:fd:7b:01:7e:ed:23:2b:c0:32:ed:ba:39:
0a:ed:e6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 9 11:17:33 2023 by rpki-client on console-ams.rpki-client.org