Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/iwtcV8uAPSlaI342eu4jEO5CfOk.roa
File: iwtcV8uAPSlaI342eu4jEO5CfOk.roa (raw, json)
Hash identifier: jcYG3PAjcYB+lfwbnKs3ZIbpIfHkD17aCOlQV/o5LzM=
Subject key identifier: 8B:0B:5C:57:CB:80:3D:29:5A:23:7E:36:7A:EE:23:10:EE:42:7C:E9
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018D3B09C2A9B7997778F52F2EE6F33CB091
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/iwtcV8uAPSlaI342eu4jEO5CfOk.roa
Signing time: Wed 24 Jan 2024 10:35:11 +0000
ROA not before: Wed 24 Jan 2024 10:35:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
89.42.142.0/24 maxlen: 24
89.46.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 Jan 2024 11:11:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3b:09:c2:a9:b7:99:77:78:f5:2f:2e:e6:f3:3c:b0:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 24 10:35:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b0b5c57cb803d295a237e367aee2310ee427ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d4:fe:29:05:f4:11:1e:0c:10:e4:e0:30:ee:
4d:0d:02:8d:1c:a7:1c:32:1b:bd:47:d2:bb:33:b1:
40:7a:88:39:1b:22:94:87:9a:0c:16:3e:ba:b0:01:
07:6a:34:04:47:4f:ed:30:87:88:38:7a:22:1c:43:
5d:0b:68:31:e7:ef:9d:9b:27:fe:c0:bf:6d:62:10:
03:58:8c:c5:4a:ee:7d:f8:8e:8c:d5:b4:3a:c2:10:
b9:ff:c8:a9:07:0b:f6:66:80:ec:f2:0a:15:b7:4a:
1f:6b:f2:b7:95:f1:c6:2b:16:e0:29:d3:7b:99:60:
0a:ba:fc:40:c7:37:49:55:e2:76:81:7f:5c:74:3c:
29:a4:23:36:00:c7:82:fc:8b:50:c8:62:3e:31:a9:
09:b3:8e:f2:e4:1f:68:a5:5a:33:40:27:20:d6:4c:
c2:2d:79:39:91:50:cd:1b:75:2c:5a:c3:da:c9:29:
42:59:c4:46:9e:d0:ef:a7:84:7d:eb:e3:31:55:5c:
70:b3:d3:3a:40:ba:88:f9:bb:32:3b:ce:d5:0a:86:
7f:ca:33:7f:ef:2c:39:55:41:1c:c8:51:09:a1:bb:
a3:ad:c6:2b:fe:17:21:24:f7:82:09:58:1c:85:ce:
ff:f2:c0:30:e3:1d:80:a3:58:d9:2b:d3:d9:20:c1:
49:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:0B:5C:57:CB:80:3D:29:5A:23:7E:36:7A:EE:23:10:EE:42:7C:E9
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/iwtcV8uAPSlaI342eu4jEO5CfOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.81.0-89.42.83.255
89.42.142.0/24
89.46.3.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:8b:1a:85:4c:bb:a5:82:05:0a:4e:d7:ce:05:b5:cb:52:50:
78:8f:84:95:65:aa:cc:89:c6:c0:a3:87:3b:c3:75:16:a2:f7:
49:3d:7f:2e:71:9e:dc:b3:21:9e:dc:9e:49:87:5e:05:ed:8e:
dd:cf:ce:fe:98:f3:2a:02:b9:41:7e:bc:a6:8d:5d:f5:28:13:
67:30:fd:f4:09:d1:a6:f0:37:f9:af:90:95:84:24:fe:2c:9f:
d8:af:02:27:62:1a:05:8d:89:88:af:6b:cd:99:34:97:ff:ff:
67:44:b5:36:1f:8d:b7:f0:47:e5:ea:ad:98:f7:4a:e6:e7:f9:
77:6f:c3:a7:ef:54:79:82:95:99:de:fd:b7:d6:6a:bd:b2:5b:
7d:b2:56:85:93:7c:d2:f1:66:86:68:c8:ed:4f:78:19:36:63:
df:c5:81:9d:94:a6:50:f5:24:fb:ca:95:53:ea:65:6d:c7:2e:
fa:7c:4d:d7:b7:aa:24:cc:c7:bb:f2:66:bb:fd:c1:36:96:60:
50:f7:d6:5d:8f:ed:e1:9f:d8:c0:1c:44:33:f6:7d:81:5c:04:
77:95:79:97:a1:57:f6:4d:68:f8:a4:7d:08:c8:11:fe:55:30:
f7:a0:fa:9c:d0:31:e2:2e:23:22:e2:c7:fd:04:54:94:a3:5c:
e8:a1:3a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:19 2024 by rpki-client on console-fra.rpki-client.org