Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/rnkkgc4iHxKZzpVXcSBL-6yI6j4.roa
File: rnkkgc4iHxKZzpVXcSBL-6yI6j4.roa (raw, json)
Hash identifier: f3Vri7Yj75MoHqvVbutuJwkt46Kcvg2JpujwmZX1DOw=
Subject key identifier: AE:79:24:81:CE:22:1F:12:99:CE:95:57:71:20:4B:FB:AC:88:EA:3E
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018C175B7F62D30EE631B06CD93F9042C216
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/rnkkgc4iHxKZzpVXcSBL-6yI6j4.roa
Signing time: Tue 28 Nov 2023 19:15:21 +0000
ROA not before: Tue 28 Nov 2023 19:15:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
89.42.80.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 08 Dec 2023 08:12:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:17:5b:7f:62:d3:0e:e6:31:b0:6c:d9:3f:90:42:c2:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Nov 28 19:15:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae792481ce221f1299ce955771204bfbac88ea3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:42:e6:61:10:72:fc:bd:97:aa:00:c6:a0:1e:
b6:98:a4:46:0c:eb:ed:04:d9:a1:5d:fd:bc:98:82:
93:67:b8:c8:6b:98:36:6b:b4:a6:59:0c:f6:53:b6:
5d:75:21:26:4a:f4:7a:e7:88:1f:8f:aa:9e:58:de:
54:ed:c4:45:85:1c:49:6d:1b:b3:44:4c:07:3a:2e:
7d:05:62:a9:55:c7:6f:5a:e7:1e:1d:c6:50:09:3a:
96:7c:5f:20:39:36:b9:17:49:53:ff:ba:e1:9b:11:
2c:fa:87:e9:ae:59:c5:d0:fa:94:88:9d:cd:f7:e3:
b2:c7:ed:0b:e6:0f:05:85:d0:c5:c8:97:15:67:1c:
7b:70:e5:16:61:ff:65:bd:10:76:62:d9:30:b1:22:
61:ac:71:02:16:b8:a2:52:37:14:cf:f3:48:1e:61:
cb:8e:59:84:94:e6:5e:3e:7c:bd:e2:58:e1:93:0b:
5a:33:b1:f0:71:91:00:9e:0d:b6:74:3f:62:9e:50:
20:ae:42:81:14:7a:a5:ee:24:b1:74:d2:c8:e2:48:
0e:38:60:88:bc:8d:4c:13:f9:ac:06:4d:eb:e0:1d:
f0:9c:d5:49:2c:50:dd:60:94:eb:09:33:05:06:04:
7e:df:01:91:2f:b9:d1:85:bc:03:3b:4b:e4:ab:5a:
ca:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:79:24:81:CE:22:1F:12:99:CE:95:57:71:20:4B:FB:AC:88:EA:3E
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/rnkkgc4iHxKZzpVXcSBL-6yI6j4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.80.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:0f:98:26:45:28:73:f5:09:33:b6:e2:d9:00:41:70:fe:c9:
fc:03:d9:83:a3:63:0b:75:a8:5e:95:6e:a4:ff:fe:3d:72:d2:
3e:9e:6b:d1:70:cf:c2:ea:db:56:f6:3d:c3:be:a3:0c:a7:1b:
6a:42:ed:bc:19:9c:42:0b:d0:cf:ae:7b:78:d4:fd:3e:87:e8:
65:5b:47:59:c7:0a:53:7b:95:7f:8c:b0:e7:92:33:03:b0:3c:
13:01:4f:44:89:41:72:1d:a8:7c:3b:31:2d:bb:6b:13:51:cb:
ca:1f:e9:06:8a:64:ea:8d:4a:e5:c0:b4:60:e7:7c:b5:30:ac:
95:8d:60:10:bb:89:76:6e:ef:28:5e:07:74:a1:46:79:43:7c:
5e:45:c4:ac:0b:d4:ea:5e:a3:78:2c:6c:80:bc:ca:f5:8f:fd:
c1:60:34:c2:5c:39:04:87:17:55:63:1c:de:1f:d0:d5:93:de:
38:ae:6e:ba:f3:31:34:7b:59:f9:a5:8a:c4:6e:cd:37:88:2d:
1e:eb:94:33:84:52:15:fd:f7:a9:d8:62:7b:56:18:37:58:1b:
e4:13:e0:29:86:87:d7:54:4d:74:16:7b:6a:48:7d:1e:c2:c5:
2c:56:43:5c:ef:9a:72:b4:0c:5e:6e:24:fd:b0:36:f9:14:7b:
0a:5e:27:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:50 2024 by rpki-client on console-ams.rpki-client.org