Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/owgJWV1YLnQS4WMXU9Dh9dtcYjA.roa
File: owgJWV1YLnQS4WMXU9Dh9dtcYjA.roa (raw, json)
Hash identifier: Rf+ZtkWJo6oYPj4VOmcTtDIVbrr5x1I2DGWcCTupQjw=
Subject key identifier: A3:08:09:59:5D:58:2E:74:12:E1:63:17:53:D0:E1:F5:DB:5C:62:30
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018C496C6C4EBE3E5C44F3A95AB6EE0A3EA6
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/owgJWV1YLnQS4WMXU9Dh9dtcYjA.roa
Signing time: Fri 08 Dec 2023 12:34:51 +0000
ROA not before: Fri 08 Dec 2023 12:34:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21859
IP address blocks: 89.47.121.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:49:6c:6c:4e:be:3e:5c:44:f3:a9:5a:b6:ee:0a:3e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Dec 8 12:34:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a30809595d582e7412e1631753d0e1f5db5c6230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:70:83:04:3c:39:71:30:4c:ed:04:2e:a1:29:
dd:2f:f4:c3:d0:44:4e:3a:42:8e:24:a2:07:ed:31:
d7:75:20:8e:52:cb:3c:57:10:73:f0:d3:d0:38:9e:
77:78:f1:2d:4e:c1:95:b0:ae:ad:21:57:c0:42:71:
e4:ed:b0:91:5d:d4:c7:28:12:cd:00:b5:a9:39:a9:
ca:db:34:12:bf:45:4f:2c:8f:2a:3e:7c:d1:43:ba:
62:df:b2:8b:62:48:36:09:77:32:43:23:b6:b0:ba:
91:68:49:a3:de:08:2f:27:cc:9c:ea:c4:69:a6:01:
e8:8e:08:4c:9f:f9:f1:7e:3e:81:9e:44:65:85:be:
b3:e3:09:e0:18:11:d1:49:07:7b:d5:f3:ff:9f:1f:
30:87:31:db:b5:e5:b6:9d:50:17:bd:23:5c:48:4c:
09:28:fd:f7:8d:1f:70:3b:c4:b3:ab:60:5d:78:10:
71:aa:cf:b7:4d:c2:42:90:30:69:56:fb:52:09:44:
69:d6:f1:7d:46:a4:15:98:ba:b9:2c:a9:cb:3c:e1:
01:b1:aa:0d:8f:f3:a0:4f:1c:1f:30:b1:cd:9a:1b:
bf:0d:d6:42:7f:91:81:0d:ac:a8:1d:ad:13:b8:61:
86:cf:0d:ca:f7:00:bd:e3:ff:37:b1:11:b6:45:74:
81:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:08:09:59:5D:58:2E:74:12:E1:63:17:53:D0:E1:F5:DB:5C:62:30
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/owgJWV1YLnQS4WMXU9Dh9dtcYjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.47.121.0/24
Signature Algorithm: sha256WithRSAEncryption
47:43:96:a8:4a:9c:16:ad:31:98:76:4f:7c:c5:f4:60:93:7b:
01:c5:c4:11:b2:57:0b:dd:03:27:50:07:68:ab:aa:ba:4f:46:
64:6f:76:30:84:fd:70:d8:d3:57:bc:f6:c9:ae:1b:8e:c9:81:
51:ac:25:f0:d3:85:d2:26:57:5d:df:23:8d:0c:59:26:33:8d:
ed:08:c1:ed:18:5e:ef:7d:9b:82:45:ff:94:0b:42:87:a9:c6:
e4:3b:a9:3d:cd:6e:f7:66:0e:8c:fe:a3:b0:6d:18:93:58:5d:
19:53:13:94:10:97:2c:d8:1b:c5:58:e2:fb:18:d3:39:af:db:
9d:dd:55:e9:2d:f3:0f:43:b4:ce:24:48:81:4b:57:9f:4f:1e:
10:08:fb:18:fd:bc:bb:e1:18:d0:65:06:a8:13:58:ab:a8:e6:
55:a6:0c:1f:11:90:d2:d9:6a:32:5c:85:ec:bf:04:56:ed:36:
be:b4:02:1e:fa:8a:70:e9:ec:b2:b3:f8:d8:53:55:e7:7b:0a:
28:34:e1:7b:b5:49:87:75:41:9d:83:bb:bd:d6:ae:ff:a3:84:
e0:49:e5:d8:1b:6f:8f:a6:bd:10:12:8e:9e:36:61:1a:97:ce:
57:dc:dd:f8:e6:b2:c7:09:21:70:93:98:eb:ff:16:2b:b8:7b:
31:a3:5a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:36 2024 by rpki-client on console-fra.rpki-client.org