Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/oD462Uinvt-Ysrab04RcKo_ApiA.roa
File: oD462Uinvt-Ysrab04RcKo_ApiA.roa (raw, json)
Hash identifier: AmCSSN5N9Gai809RanU5e+AOoF2pW4/KPnNdcob4E7A=
Subject key identifier: A0:3E:3A:D9:48:A7:BE:DF:98:B2:B6:9B:D3:84:5C:2A:8F:C0:A6:20
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018D12FA5D11C4D7155268171BAE31A80E85
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/oD462Uinvt-Ysrab04RcKo_ApiA.roa
Signing time: Tue 16 Jan 2024 15:53:34 +0000
ROA not before: Tue 16 Jan 2024 15:53:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 89.37.196.0/24 maxlen: 24
89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
89.46.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Jan 2024 08:23:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:12:fa:5d:11:c4:d7:15:52:68:17:1b:ae:31:a8:0e:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 16 15:53:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a03e3ad948a7bedf98b2b69bd3845c2a8fc0a620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7d:17:be:cf:3a:49:67:1c:ef:c7:de:d0:58:
8b:d5:55:55:01:6e:45:91:3c:8e:8a:9d:97:a0:8e:
1c:91:2b:b2:03:21:d3:16:3c:46:3c:06:44:11:2c:
c2:83:a5:cb:5a:76:ed:4c:84:34:f8:f1:2f:aa:2f:
3e:3c:73:d7:01:d7:fe:29:ba:c5:e2:6f:e5:05:f2:
99:b7:aa:b2:bd:6d:53:04:36:26:09:40:68:db:de:
54:67:2e:16:bf:ac:4f:aa:8a:cc:d3:e0:3f:d7:d8:
ea:79:65:87:bd:99:4a:4a:e6:ef:fc:f7:1f:9c:16:
80:3f:b7:73:73:d2:d1:ff:4b:00:7b:a9:5b:50:96:
37:e1:62:9b:fd:56:c2:32:2f:28:20:0b:06:38:20:
7d:4e:ff:c8:f7:be:b3:cd:8f:36:b1:ec:42:a2:8e:
20:54:93:31:e0:62:6c:2b:fe:4b:94:36:b4:17:1b:
99:2c:bc:46:83:a9:a8:88:be:b2:80:2c:4f:54:57:
44:bf:9f:96:8e:f1:24:e4:44:f0:bf:bd:5a:e5:c1:
c7:de:d0:5e:39:b1:fa:50:a6:4a:b9:f6:b7:09:28:
49:c5:8a:2a:9f:dc:23:7e:0d:3c:66:d3:da:79:5f:
2b:4d:62:41:59:67:f8:d4:bb:fa:20:88:ba:5e:b9:
ac:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:3E:3A:D9:48:A7:BE:DF:98:B2:B6:9B:D3:84:5C:2A:8F:C0:A6:20
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/oD462Uinvt-Ysrab04RcKo_ApiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.196.0/24
89.42.81.0-89.42.83.255
89.46.3.0/24
Signature Algorithm: sha256WithRSAEncryption
07:bb:ea:0a:a2:f6:a5:8f:0d:cb:e6:63:1a:a8:39:8b:82:53:
5d:09:af:ff:22:ee:f4:62:1f:66:2f:00:25:55:45:bb:61:f3:
91:1d:b6:30:50:2a:66:ea:61:43:c1:aa:19:a8:5a:04:d2:1e:
6b:68:9e:2b:3a:60:af:b2:e7:d0:55:42:57:0a:9c:ff:b2:ad:
b0:15:75:1a:59:f4:b0:8a:b3:d2:ce:71:1e:92:81:50:6a:40:
5a:3d:11:11:7d:f3:91:9b:f7:40:cf:ad:b7:7a:5e:1b:e0:e0:
c8:10:62:a9:bc:27:36:16:3b:34:5f:43:51:90:bb:17:86:77:
c8:b3:f0:9b:67:4d:07:03:7b:b5:05:4e:e2:b8:75:f6:71:e3:
ce:bb:12:aa:32:ee:a0:f3:29:3d:97:27:d6:2d:dc:00:4b:3d:
7e:df:3e:02:30:44:b5:f7:79:72:42:2d:f4:79:cb:62:ef:73:
1d:79:e7:c8:03:63:b4:5b:79:cd:5f:11:a6:11:76:73:36:53:
e4:03:40:71:80:f5:50:d6:71:38:4c:87:f8:fe:a9:b2:d6:f9:
0d:ef:8a:39:93:2f:17:bc:10:05:e4:d4:9d:35:e6:b4:a4:14:
41:fd:b5:9d:5d:1b:18:0c:b3:a9:b5:22:c7:96:98:8f:24:2a:
b6:0c:e9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 19 09:47:52 2024 by rpki-client on console-fra.rpki-client.org