Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/qC7bVMYtUSIGeXoOsB9wizhSjFM.roa
File: qC7bVMYtUSIGeXoOsB9wizhSjFM.roa (raw, json)
Hash identifier: M51pzm6rUhUXedbe7zVwC0yWG2QFZiHX+Xb8jC4slE4=
Subject key identifier: A8:2E:DB:54:C6:2D:51:22:06:79:7A:0E:B0:1F:70:8B:38:52:8C:53
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018CB1049B61BA256AB2B2F4174A8F53CA3B
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/qC7bVMYtUSIGeXoOsB9wizhSjFM.roa
Signing time: Thu 28 Dec 2023 15:21:58 +0000
ROA not before: Thu 28 Dec 2023 15:21:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 89.42.85.0/24 maxlen: 24
89.47.126.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b1:04:9b:61:ba:25:6a:b2:b2:f4:17:4a:8f:53:ca:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Dec 28 15:21:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a82edb54c62d512206797a0eb01f708b38528c53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:16:b4:2f:d2:65:cc:e3:9a:ac:d9:af:4f:ee:
9f:44:b6:e8:99:16:d2:a5:cf:89:1d:cd:33:d4:68:
4b:34:5c:27:1b:58:d6:5e:c5:fc:13:f8:de:e2:c7:
a7:a1:b5:08:d2:d2:dc:73:45:45:f3:99:77:87:86:
64:3a:72:29:58:0f:d7:14:35:fc:9d:c6:b3:a5:a2:
bd:96:67:a2:60:2f:26:2c:38:c4:0e:c7:74:ba:55:
4e:47:7a:c3:8c:4c:09:3d:2c:bc:67:30:53:1d:b4:
0c:70:28:a9:7a:ac:98:39:f0:9f:06:26:74:14:51:
04:77:bf:c8:b8:06:4c:ba:3a:f9:57:af:6e:a2:fd:
13:55:49:db:2b:c7:cb:0b:7a:1d:94:8c:af:55:81:
c0:5b:e1:c8:7d:2a:89:f1:84:0b:55:c2:61:41:0d:
f1:55:97:35:d3:db:50:83:4c:ee:04:39:6f:38:79:
cf:8d:bb:a4:91:2e:87:09:de:f0:f2:84:cf:6d:b1:
6a:4f:98:5c:91:d0:20:d8:5c:d9:b8:37:67:eb:8a:
73:2e:fe:0f:01:d9:2a:cb:58:45:ab:3c:5f:67:18:
4d:58:8c:86:70:97:26:02:a0:98:2d:37:3b:5f:89:
1d:cb:1a:9a:ba:cf:d6:3d:b9:3b:93:a3:bb:7d:7d:
dc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:2E:DB:54:C6:2D:51:22:06:79:7A:0E:B0:1F:70:8B:38:52:8C:53
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/qC7bVMYtUSIGeXoOsB9wizhSjFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.85.0/24
89.47.126.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:33:eb:d7:40:09:ba:e3:94:04:a0:62:60:13:fa:07:7c:29:
81:fb:86:0b:1f:21:bf:c8:36:66:76:fc:4c:55:56:0c:93:fd:
90:7d:ab:5d:5c:e2:03:4f:a4:9b:b8:34:aa:c9:0d:c2:4d:e2:
f7:9e:a1:ab:b4:14:2f:10:f9:d2:2b:ff:98:be:d5:b0:05:f4:
34:18:c0:03:0a:3a:40:90:90:a0:ab:59:96:87:05:dd:46:41:
5a:fb:01:12:ab:d8:32:96:21:ca:34:c8:16:2a:df:e8:4d:73:
b7:5e:0e:62:2b:b5:f1:de:7b:01:9c:6c:c2:7a:5a:1a:98:d3:
e0:c2:ec:25:e9:60:1d:13:c9:bc:0b:b5:59:a7:07:3e:37:98:
af:df:9c:9e:36:d1:ba:6b:c3:87:05:96:3c:1c:73:e8:39:fb:
a0:02:de:08:f3:9a:fc:38:45:8b:18:80:c0:c8:55:81:c0:3d:
c0:8b:ff:79:e9:cf:4a:cf:c9:41:92:c9:47:68:82:58:4d:16:
06:4b:5a:21:7b:75:99:25:75:84:6b:e4:30:ba:fd:32:81:d9:
77:d0:4f:f3:05:33:83:6e:b2:2f:89:57:dd:5b:eb:05:06:d5:
3d:60:f6:63:38:a0:fd:9e:27:3a:5d:56:7d:c7:fe:72:10:c4:
36:6a:97:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:36 2024 by rpki-client on console-fra.rpki-client.org