Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/pcVD_8uvGB4VHDB2xhIqHV5kCa4.roa
File: pcVD_8uvGB4VHDB2xhIqHV5kCa4.roa (raw, json)
Hash identifier: JhiDMsev4ohU8YBBlnsqxkua11t2gWoTae4DK+jhBBE=
Subject key identifier: A5:C5:43:FF:CB:AF:18:1E:15:1C:30:76:C6:12:2A:1D:5E:64:09:AE
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0192CDA8AEE91D165E500050CA140643D5F5
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/pcVD_8uvGB4VHDB2xhIqHV5kCa4.roa
Signing time: Sun 27 Oct 2024 11:07:16 +0000
ROA not before: Sun 27 Oct 2024 11:07:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
93.113.182.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 27 Oct 2024 14:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:cd:a8:ae:e9:1d:16:5e:50:00:50:ca:14:06:43:d5:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Oct 27 11:07:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5c543ffcbaf181e151c3076c6122a1d5e6409ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4c:e8:bd:1c:7c:f0:29:3c:f5:3d:e2:07:58:
e4:a6:04:ea:f6:44:c4:e9:c9:fb:ff:07:ab:3a:33:
db:c3:86:b7:69:b9:62:9c:62:7b:bf:93:fd:a0:9f:
a5:fd:10:4b:e9:97:f6:44:a8:64:1b:05:8b:cd:8a:
7f:4e:4d:35:81:d0:5b:8c:5e:21:c6:17:b6:1b:9b:
f2:d2:b2:55:43:2e:23:f5:80:bd:f5:98:35:59:79:
bd:14:30:0f:4e:02:7d:da:ad:8d:2f:d9:8e:14:a6:
4d:04:73:23:80:85:51:1b:01:1d:2e:f4:7f:c3:f9:
35:6d:6a:b5:f1:4e:10:0b:03:d2:7f:9d:23:37:c0:
d3:84:b1:ec:10:dc:d8:ba:7e:72:ca:e3:43:b1:6c:
18:f6:b6:d7:09:1b:5e:0a:42:64:69:24:d9:0c:4b:
57:86:3d:66:b9:f5:3d:3c:74:0c:3c:bb:19:15:a4:
e7:f3:23:24:ed:47:ef:ba:33:bf:1c:4c:c2:42:86:
9b:e5:69:ea:e8:de:80:c2:1d:eb:63:92:09:34:a3:
17:05:a0:22:a9:fc:62:97:47:85:f4:2b:35:88:4e:
3c:b3:59:ea:40:da:7b:84:37:e6:22:d0:ac:35:ae:
52:11:3a:5a:bd:e2:25:15:95:c5:9f:5a:58:2c:a5:
a3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C5:43:FF:CB:AF:18:1E:15:1C:30:76:C6:12:2A:1D:5E:64:09:AE
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/pcVD_8uvGB4VHDB2xhIqHV5kCa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.81.0-89.42.83.255
93.113.182.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:e1:8d:5e:aa:f1:4f:c9:d4:45:e1:b3:8b:36:d6:20:79:27:
fd:48:fb:42:5f:15:82:7d:3b:ed:ae:d1:ae:d4:6d:9f:eb:04:
71:01:11:4e:ea:72:e7:e8:aa:78:ff:3f:28:8b:62:85:41:aa:
e3:ec:bc:9c:22:8a:30:e6:eb:18:15:e5:0d:fb:96:2d:d9:07:
3f:3e:ae:c4:17:80:25:d5:05:f6:61:29:19:b3:cc:85:d8:04:
40:a3:c7:a2:93:6c:f4:c9:09:6c:e0:12:68:24:1a:80:29:fb:
ea:9f:d0:e9:0b:d4:61:f7:c2:16:b9:70:f1:18:50:2b:88:19:
c2:46:5a:d3:63:69:d7:b2:96:71:2b:62:b0:bb:88:40:71:de:
b2:02:cb:41:68:58:b4:7c:14:95:59:bb:81:b7:6e:f1:ed:93:
7a:f7:3d:bf:55:8d:5d:05:40:35:85:6a:07:06:a8:31:c0:f3:
4d:ee:55:43:d0:29:54:34:1c:df:d9:07:f6:66:a5:4b:15:69:
2d:e5:cf:48:0b:c5:8d:49:b9:02:06:c5:58:4d:81:91:c3:65:
36:81:2c:60:d2:75:d3:30:7a:ab:f0:39:ea:02:65:89:15:d8:
7b:51:4e:3f:b4:38:1c:56:8d:e8:de:2a:5d:89:0b:a8:e5:a6:
23:02:f3:7b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 27 15:59:45 2024 by rpki-client on console-fra.rpki-client.org