Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/j-Jcr4twDOBF-gy1N7wHUyozZjg.roa
File: j-Jcr4twDOBF-gy1N7wHUyozZjg.roa (raw, json)
Hash identifier: RvN+44SKTPh5/gFj9nwZj/I+els2KN8rCXa2FpNN9HA=
Subject key identifier: 8F:E2:5C:AF:8B:70:0C:E0:45:FA:0C:B5:37:BC:07:53:2A:33:66:38
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018BFE7598D7D8115D4EF8EF523F3E91C7BD
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/j-Jcr4twDOBF-gy1N7wHUyozZjg.roa
Signing time: Thu 23 Nov 2023 23:13:21 +0000
ROA not before: Thu 23 Nov 2023 23:13:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 996
IP address blocks: 89.34.224.0/23 maxlen: 24
89.34.224.0/24 maxlen: 24
89.34.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Dec 2023 14:15:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fe:75:98:d7:d8:11:5d:4e:f8:ef:52:3f:3e:91:c7:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Nov 23 23:13:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8fe25caf8b700ce045fa0cb537bc07532a336638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9d:1b:e4:39:61:64:b4:59:ba:ac:3e:a2:a1:
5d:37:2b:7e:50:14:29:d7:10:97:c3:17:f4:cd:12:
a3:e4:71:c2:1d:67:c7:b2:35:a5:59:da:e6:3f:fe:
b1:16:99:db:78:57:07:41:e1:4b:38:9e:a4:79:1b:
4d:dd:42:67:e2:cd:19:30:ac:19:a8:b1:d5:3f:07:
88:08:53:cd:58:af:ab:75:ba:23:e1:1a:d9:f2:4a:
cd:ef:07:b4:e9:b0:f7:e5:f9:f0:7b:c4:9a:46:5e:
13:bf:1e:87:51:6f:78:cf:a4:ee:2e:da:19:4b:28:
da:ce:f2:a5:99:87:67:09:3b:9c:82:08:34:71:85:
4a:57:f1:83:59:13:2d:d9:6a:24:0b:63:d0:27:f2:
c1:f5:9f:d9:5a:9f:68:24:0b:d3:19:75:21:04:43:
c2:3a:0b:55:78:28:cb:dc:d3:70:3f:f5:3a:55:24:
17:ef:6c:3e:30:50:0b:ce:bb:37:12:25:d6:63:3d:
55:63:42:9d:eb:6f:05:3f:5f:9f:de:35:22:76:60:
5b:c5:27:29:92:01:ec:e2:f0:22:9c:a5:9d:d4:03:
61:6c:f8:2c:df:bf:b0:92:47:c6:70:2e:68:ba:84:
66:e1:97:87:e7:db:6d:56:2c:82:ba:4b:ab:3b:ae:
40:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E2:5C:AF:8B:70:0C:E0:45:FA:0C:B5:37:BC:07:53:2A:33:66:38
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/j-Jcr4twDOBF-gy1N7wHUyozZjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.224.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:0a:49:8b:b4:35:52:18:cf:a2:32:87:f5:05:75:df:8d:a8:
34:c8:4c:14:94:a2:93:59:4a:a5:e5:2d:41:08:0a:c0:05:ed:
67:26:22:b4:28:78:e6:be:b1:f7:76:3a:f0:00:67:38:b1:aa:
6f:11:e3:0d:5f:09:8e:ef:1f:bb:f8:60:29:63:b7:03:2b:26:
99:08:ec:8e:5b:4a:93:af:ee:fe:0b:aa:9b:ee:26:a4:98:6b:
76:f2:d8:50:d5:db:5a:d3:79:c6:e0:ef:b3:af:6b:73:67:fd:
4d:15:98:54:18:a8:81:35:d2:5d:f9:ff:1f:97:bf:0a:47:d0:
eb:af:f6:99:78:a4:fa:a0:91:8c:b4:02:a0:df:69:06:01:b2:
6f:cb:5a:17:4d:af:64:17:80:ee:6f:6f:d1:93:2c:95:21:00:
d7:0d:9f:32:3a:ea:82:a9:cf:14:12:13:71:13:4c:f3:a4:73:
1b:0e:cb:fa:83:5b:e4:8d:98:66:84:6c:09:c6:d3:a9:32:91:
03:99:06:5f:60:7a:26:3e:80:82:2b:58:41:3f:81:8a:8b:10:
4a:7b:84:b5:ab:f3:ce:40:50:24:32:ec:3b:ab:9e:28:15:07:
aa:20:8f:27:15:37:42:c2:bd:49:eb:d4:84:a0:66:24:a8:7a:
33:72:80:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:19 2024 by rpki-client on console-fra.rpki-client.org