Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/q9v4zmXOqYuhH9H039KTddvhS0M.roa
File: q9v4zmXOqYuhH9H039KTddvhS0M.roa (raw, json)
Hash identifier: ldls4RGHtR3QePkgxGROybIw6nWuMWRhRASBysOR1kg=
Subject key identifier: AB:DB:F8:CE:65:CE:A9:8B:A1:1F:D1:F4:DF:D2:93:75:DB:E1:4B:43
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01894FD64BAC761EC8E696B95C741951887B
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/q9v4zmXOqYuhH9H039KTddvhS0M.roa
Signing time: Thu 13 Jul 2023 15:19:51 +0000
ROA not before: Thu 13 Jul 2023 15:19:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205220
IP address blocks: 89.42.82.0/24 maxlen: 24
89.42.83.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4f:d6:4b:ac:76:1e:c8:e6:96:b9:5c:74:19:51:88:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jul 13 15:19:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=abdbf8ce65cea98ba11fd1f4dfd29375dbe14b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:41:6f:41:a3:ae:a4:99:12:0e:e4:a1:b8:34:
e4:2e:fc:76:e5:05:7f:a9:f2:d1:d8:ae:94:1e:c9:
a6:e8:58:8f:07:d1:6a:47:f8:c1:06:cb:00:c1:9f:
a1:9e:9d:fd:9a:e6:3c:03:63:0e:c3:11:a1:d7:af:
78:db:6c:93:c6:8e:fe:d9:83:20:1d:ab:0b:cc:a6:
b0:59:1e:e8:6d:eb:92:32:84:19:bb:54:43:46:f0:
1f:06:1a:85:19:ba:16:b4:c3:e1:51:8b:25:b8:fc:
35:ca:53:e5:a6:5d:54:98:38:26:04:2c:ed:00:e7:
55:77:c9:d6:9a:4f:f9:7f:7a:03:ef:0c:78:9d:e2:
79:48:19:c5:ad:a9:47:88:f6:0e:5d:af:26:14:68:
50:3f:7c:b6:9d:60:76:23:eb:f6:00:3e:e0:48:c4:
2f:10:be:f9:aa:e4:e7:10:e2:c2:83:75:ff:bc:a5:
1c:ac:97:51:9b:ed:c1:07:2d:44:60:37:cc:e8:65:
72:97:00:06:74:eb:00:7d:67:56:cb:25:fd:94:e0:
1e:76:68:95:06:79:20:f4:fe:8c:4c:59:d0:81:2e:
e6:b4:7e:94:f3:cf:cb:a8:e0:ba:f5:dd:3e:6c:13:
df:1a:0b:17:20:0b:99:7c:27:ca:2c:8e:46:ef:45:
5d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:DB:F8:CE:65:CE:A9:8B:A1:1F:D1:F4:DF:D2:93:75:DB:E1:4B:43
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/q9v4zmXOqYuhH9H039KTddvhS0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.82.0/23
Signature Algorithm: sha256WithRSAEncryption
20:10:9b:1f:09:2a:5b:c8:13:8a:ef:98:a5:82:87:cb:aa:1e:
82:0e:eb:50:4c:9a:6f:c0:82:59:59:57:50:45:99:cb:03:d6:
da:bb:da:68:68:ea:82:a5:20:d2:0e:0c:85:0f:e5:54:34:af:
d9:2d:59:b9:7e:44:07:06:ad:3c:37:29:64:92:43:d7:49:45:
22:51:b8:0e:a5:cd:f8:c7:e8:c8:78:7e:d1:3a:18:0d:40:9c:
bf:11:4d:14:b2:58:bd:ac:e8:c7:17:ba:9f:a3:6d:9b:f6:f5:
a9:f9:a3:12:81:e9:95:b8:f6:54:f3:4c:53:70:5e:cd:c1:69:
0a:0c:e2:c6:af:4c:16:1c:7d:81:f5:f7:94:12:2e:98:5d:ed:
57:1c:fd:49:bf:f7:e4:6a:01:e1:1c:42:02:ea:a7:36:f6:19:
2c:be:2c:a6:f4:01:a4:99:81:fb:cd:59:e7:83:44:1d:9e:11:
66:cc:4d:f3:af:e5:a2:6e:2b:8c:c6:82:96:bd:64:46:ac:4c:
f5:95:1a:5c:2f:da:85:b2:fe:d5:d7:43:a1:d1:ef:7d:e9:89:
89:b3:c8:fe:ec:ae:33:26:8d:51:74:22:de:11:b8:46:26:81:
b3:90:67:1e:6a:51:ac:59:6b:a5:cb:97:ab:39:56:84:01:e5:
28:97:97:9c
-----BEGIN CERTIFICATE-----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Generated at Mon Aug 14 14:46:41 2023 by rpki-client on console-ams.rpki-client.org