Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/pREbsDHE1PphbPE-VlxTPCtNyYM.roa
File: pREbsDHE1PphbPE-VlxTPCtNyYM.roa (raw, json)
Hash identifier: JnF5TAao7FHWcAzOtKXEqdNZKHn4mzX0BB/qpcovNbs=
Subject key identifier: A5:11:1B:B0:31:C4:D4:FA:61:6C:F1:3E:56:5C:53:3C:2B:4D:C9:83
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018AF198B6EC10CA2867D00C0B9C8EB722AE
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/pREbsDHE1PphbPE-VlxTPCtNyYM.roa
Signing time: Mon 02 Oct 2023 18:13:51 +0000
ROA not before: Mon 02 Oct 2023 18:13:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 265919
IP address blocks: 89.46.0.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f1:98:b6:ec:10:ca:28:67:d0:0c:0b:9c:8e:b7:22:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Oct 2 18:13:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5111bb031c4d4fa616cf13e565c533c2b4dc983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:0c:63:5a:b9:9f:a8:57:2e:25:e0:7d:70:cd:
a9:85:cc:f0:79:de:7f:ce:d6:c7:4c:4b:f2:ef:ea:
4c:28:0e:c6:23:bc:5f:81:58:19:14:86:43:4a:cf:
1f:16:1a:ab:18:9f:6e:b4:a0:01:93:37:37:0f:b9:
a5:24:ac:24:55:f6:78:cb:86:c8:27:f4:45:33:fe:
aa:6e:90:8e:eb:04:fe:8f:e9:a2:28:44:01:8b:2d:
b2:68:3d:14:1c:cf:ae:40:24:31:d5:97:5b:e8:08:
06:25:11:5f:a1:41:22:30:8c:b1:5e:a2:92:df:2d:
e8:7c:12:c5:c5:2d:dc:69:5e:8e:74:fd:07:e4:b7:
81:a5:2a:ac:c6:ce:a5:08:7b:2f:1f:cf:99:b1:3b:
d1:4c:48:1a:78:35:91:66:0d:43:d4:f3:b3:5e:a3:
0a:24:bb:0c:8b:14:49:b8:5e:11:68:fb:45:92:97:
19:18:ce:6a:a6:a1:01:33:41:27:94:3f:47:45:54:
20:06:be:f4:19:98:3e:cc:90:31:af:90:6e:d8:1e:
e6:27:96:b6:cc:3a:30:df:da:10:d6:8c:f2:54:86:
23:9d:d4:fc:b7:4c:8b:05:bf:6d:8f:82:4c:f8:1f:
9d:e9:cc:99:82:4e:6f:49:85:5f:8c:ad:86:66:f5:
44:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:11:1B:B0:31:C4:D4:FA:61:6C:F1:3E:56:5C:53:3C:2B:4D:C9:83
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/pREbsDHE1PphbPE-VlxTPCtNyYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.0.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:8f:83:60:77:6a:88:e4:ba:52:a0:ee:e6:30:13:19:d6:1e:
fb:98:70:51:42:1e:e5:f6:f4:79:bc:19:6b:a9:cc:f8:15:75:
70:ea:c9:13:51:6f:bb:c9:b5:15:4e:f5:f5:d4:91:d4:14:3b:
36:98:8b:f4:04:aa:85:3c:e8:0d:3c:16:08:9b:47:e3:d4:c8:
57:0d:30:f2:d2:90:ca:52:b5:14:fe:20:de:53:e8:3a:d4:bc:
f4:f3:87:b9:15:89:48:6d:a5:26:e5:08:86:3d:15:a8:b3:2d:
d2:f8:0f:33:44:c7:da:2e:2e:65:94:c4:cf:a1:63:82:f1:9d:
03:a7:36:d6:0f:b3:18:0f:53:24:e5:b3:3c:11:90:d5:cb:03:
84:c5:ba:5a:68:f6:04:5b:03:5b:7b:ab:20:88:37:20:49:49:
e8:6b:db:5e:ef:43:fc:7b:77:a8:b5:8b:1c:a9:a1:a8:1d:6d:
36:0e:32:3e:6a:c3:e8:7d:d1:8b:6f:4a:8a:28:9e:41:8d:87:
09:cb:4f:04:ab:0b:62:61:57:25:fe:3d:e8:82:60:bc:a0:ff:
d6:78:a1:1f:5e:3d:4d:d1:da:a3:4f:74:fe:ab:ef:4c:87:8f:
ec:1e:0c:32:28:61:2a:c4:93:46:ce:76:e7:1e:0e:1c:34:fa:
f6:2d:e8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 16 14:53:15 2023 by rpki-client on console-fra.rpki-client.org