Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/plTJ8a2ScbJ7W604xCz8FiZ8xD0.roa
File: plTJ8a2ScbJ7W604xCz8FiZ8xD0.roa (raw, json)
Hash identifier: 8bEqAVNVCYBf5Es67kxTgGvHJLx5Lx6JXMDjqq6E5yE=
Subject key identifier: A6:54:C9:F1:AD:92:71:B2:7B:5B:AD:38:C4:2C:FC:16:26:7C:C4:3D
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0189FF567A62D13A216B41B101C14FCA89BC
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/plTJ8a2ScbJ7W604xCz8FiZ8xD0.roa
Signing time: Wed 16 Aug 2023 17:13:24 +0000
ROA not before: Wed 16 Aug 2023 17:13:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200636
IP address blocks: 89.42.80.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 17 Dec 2023 18:27:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ff:56:7a:62:d1:3a:21:6b:41:b1:01:c1:4f:ca:89:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Aug 16 17:13:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a654c9f1ad9271b27b5bad38c42cfc16267cc43d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:66:3b:6e:eb:74:32:47:b5:5f:c7:24:22:4c:
09:57:bc:18:63:55:5e:b5:b6:d6:8c:cf:4c:bc:b7:
f6:e3:04:6a:98:b5:f1:38:c8:9a:15:00:df:1f:38:
7f:cc:df:5d:f5:87:b3:9f:4d:cd:7e:f0:7e:5c:f6:
42:71:fc:d9:d2:d8:22:48:63:35:80:53:85:aa:09:
fb:9e:67:73:3a:6e:0a:80:25:b8:22:a1:db:a7:ed:
8e:39:0d:8a:b9:37:ab:13:31:dd:5d:2a:18:10:38:
42:15:c5:82:f0:61:90:3c:3b:be:c4:18:cd:19:dd:
17:d8:fd:97:fc:1c:c4:cb:b5:68:a1:d5:e5:10:cb:
e0:3e:86:c3:78:a5:4f:07:73:de:7b:c3:04:3a:76:
36:27:f2:cc:a5:4c:4e:1f:d4:48:0b:e6:3f:18:8a:
bd:62:51:87:d1:f0:55:70:32:2c:20:28:f5:e3:4b:
49:56:ef:dd:d1:a9:6a:96:97:0a:0c:ab:48:2a:c4:
98:75:7a:b3:bd:4e:d1:03:eb:a0:ad:b4:ec:b2:af:
4b:7a:49:29:c2:58:65:e1:0b:09:f1:b4:55:e6:2d:
66:18:95:b5:3f:a7:3e:9a:86:df:de:d2:24:99:3d:
42:08:fc:8c:dd:56:30:7a:52:82:e0:7a:5b:05:45:
23:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:54:C9:F1:AD:92:71:B2:7B:5B:AD:38:C4:2C:FC:16:26:7C:C4:3D
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/plTJ8a2ScbJ7W604xCz8FiZ8xD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.80.0/24
Signature Algorithm: sha256WithRSAEncryption
27:f3:7b:fa:d5:e6:d0:85:57:07:e1:8c:c6:16:fa:96:38:2f:
5e:95:38:a3:94:3f:7f:40:ee:1f:22:d8:f3:41:b1:6d:93:0b:
d0:e9:b5:0d:00:32:07:a3:68:74:76:66:1d:6c:7a:6d:c8:56:
20:73:ac:a8:7a:76:60:8f:7a:be:ca:d3:ff:a1:0f:0e:87:78:
7b:bf:16:f5:aa:bd:60:1c:1c:a6:c7:4e:d9:de:eb:93:4a:f2:
03:32:f3:8c:ab:9e:09:4c:2b:f9:96:a9:95:c0:65:67:78:eb:
30:48:a7:12:e6:19:6f:6d:32:2d:6f:c2:3c:69:a3:d2:66:44:
e0:23:d5:04:98:61:ce:38:e7:55:08:73:57:5b:4f:ed:58:fd:
c0:b9:6a:c5:9b:7b:86:46:40:99:04:23:a3:4f:25:f2:93:c6:
90:88:0e:2e:c2:c9:02:36:21:04:f5:60:ee:83:2c:35:18:8f:
c6:33:44:9d:34:a0:ee:cd:f1:d0:94:6d:63:a1:a3:a6:06:d5:
22:6e:78:38:48:79:12:e2:c7:5e:99:50:7f:d1:43:92:30:db:
ea:39:74:fb:aa:aa:c7:67:03:8b:f7:35:72:f8:67:b8:fd:0d:
6f:4a:ed:fb:b0:e0:74:f5:eb:1d:c2:69:bb:2e:c6:76:25:bc:
59:96:51:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:19 2024 by rpki-client on console-fra.rpki-client.org