Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/pPipQwO3w5CK3Vz2Rd5xeqinhjo.roa
File: pPipQwO3w5CK3Vz2Rd5xeqinhjo.roa (raw, json)
Hash identifier: 0nJXD79CPlPUAUfPJp5DA8uAN608/v1Do7TrSEn0RTw=
Subject key identifier: A4:F8:A9:43:03:B7:C3:90:8A:DD:5C:F6:45:DE:71:7A:A8:A7:86:3A
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0189D3B939ED74CFCC3F6062B1A3A0C464AB
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/pPipQwO3w5CK3Vz2Rd5xeqinhjo.roa
Signing time: Tue 08 Aug 2023 05:57:58 +0000
ROA not before: Tue 08 Aug 2023 05:57:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.42.95.0/24 maxlen: 24
89.42.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Aug 2023 05:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d3:b9:39:ed:74:cf:cc:3f:60:62:b1:a3:a0:c4:64:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Aug 8 05:57:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4f8a94303b7c3908add5cf645de717aa8a7863a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3d:91:55:26:dc:99:59:8a:10:46:1d:4e:fd:
52:24:8f:97:00:4e:3b:2f:17:b9:3d:70:be:c5:05:
c0:39:81:fe:01:02:5c:8e:2f:6e:36:04:5c:f7:e8:
d3:41:89:48:bb:dd:19:7e:33:8f:05:a0:04:12:16:
57:01:6d:01:88:1a:3c:64:b8:15:e7:c9:87:d4:30:
e7:67:59:e6:cb:3c:a5:9f:fe:2d:2c:d6:87:a6:a9:
06:61:fc:0e:de:8e:ed:9b:f7:29:30:9d:27:96:e2:
e6:9d:30:c5:57:03:77:5f:77:b7:78:3c:31:06:3e:
5a:a8:01:08:93:f9:7f:bc:79:b6:e4:bd:09:14:b5:
5c:b6:a2:76:6b:ea:49:52:c4:ee:2f:d1:92:d3:d0:
36:1b:1f:e1:12:74:07:98:b6:ad:05:08:e9:cd:52:
ec:4e:0b:3a:b8:ed:45:35:78:e1:d8:f5:bb:b6:86:
db:f8:61:a3:ef:8e:a9:56:ba:2c:cd:42:4f:e9:26:
8f:08:4f:02:06:70:47:09:7c:98:f5:23:35:bf:49:
2c:4b:fe:b5:1f:84:15:64:af:d0:8f:31:79:7c:94:
9c:5e:ac:fe:79:57:22:39:e1:e5:cc:52:32:b9:7f:
3b:7b:cf:ca:4b:0c:30:e2:75:1d:b6:12:94:8a:6d:
0e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F8:A9:43:03:B7:C3:90:8A:DD:5C:F6:45:DE:71:7A:A8:A7:86:3A
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/pPipQwO3w5CK3Vz2Rd5xeqinhjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.93.0/24
89.42.95.0/24
Signature Algorithm: sha256WithRSAEncryption
38:1a:1d:ee:54:73:b4:50:bd:ea:62:56:3d:6d:ca:f2:36:64:
d5:30:bf:15:44:32:9c:6a:f3:8e:d5:c3:e8:ea:3d:2d:52:6f:
50:7c:8e:89:c4:cd:03:f5:90:9b:69:45:77:db:11:24:ea:95:
2f:34:3e:91:3f:20:be:8b:8f:07:22:0d:99:23:38:98:4f:f2:
5a:72:04:c0:5c:73:fc:a6:ea:53:c3:76:7c:57:d1:60:5f:d5:
ed:23:2c:10:bd:c4:b6:3a:40:72:03:b5:2c:1a:86:b4:7c:a1:
28:b4:46:83:51:62:36:ca:bb:21:78:1d:98:aa:c7:38:69:d5:
d3:3c:d2:95:e7:c7:84:04:55:e0:be:b8:61:6d:31:7d:c1:2a:
9e:ae:b7:cb:e2:f8:5e:69:d0:cf:3d:88:95:7e:17:45:f3:db:
44:92:64:13:11:4e:ed:4a:cb:60:cf:2b:48:05:f1:1d:49:de:
70:eb:ae:d4:3f:83:06:6b:63:84:64:e3:ff:4f:f9:21:5f:c1:
f1:5f:21:b0:c7:2e:df:29:44:f4:1f:1a:12:89:e1:56:ac:22:
cd:fc:0f:a1:8f:64:d4:54:67:c8:58:7f:18:cc:8c:83:ff:89:
7e:d2:6b:19:c2:f1:68:77:79:c3:3c:f9:01:9e:fd:4d:96:18:
ca:c4:59:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:19 2024 by rpki-client on console-fra.rpki-client.org