Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/sMGVMoeh5iB2QBqMrHb2nfPfHC8.roa
File: sMGVMoeh5iB2QBqMrHb2nfPfHC8.roa (raw, json)
Hash identifier: +VwHTLVs6cYdkoap6hBb1zDM/RU5IkehWv/U73G9Bs8=
Subject key identifier: B0:C1:95:32:87:A1:E6:20:76:40:1A:8C:AC:76:F6:9D:F3:DF:1C:2F
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018B46C411E18BB217AB9B0BF374DEED499D
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/sMGVMoeh5iB2QBqMrHb2nfPfHC8.roa
Signing time: Thu 19 Oct 2023 07:08:56 +0000
ROA not before: Thu 19 Oct 2023 07:08:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.42.82.0/23 maxlen: 23
89.42.80.0/23 maxlen: 23
89.46.0.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:46:c4:11:e1:8b:b2:17:ab:9b:0b:f3:74:de:ed:49:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Oct 19 07:08:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b0c1953287a1e62076401a8cac76f69df3df1c2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9c:94:05:f4:9b:de:c8:12:74:12:35:00:50:
f9:e1:3c:95:02:90:27:f7:70:e0:6d:8d:62:a3:f7:
e8:78:2e:60:70:6a:49:ec:e2:46:82:9b:60:cd:fd:
ae:4c:14:d4:30:ff:02:4e:26:f8:0a:f6:ec:d2:bd:
71:2d:40:3a:b3:4e:d5:34:21:93:c6:99:2b:9c:44:
d6:3a:24:37:d2:3d:63:c0:12:a6:e7:9e:fc:ef:71:
11:d1:0b:60:fb:bc:28:0b:2e:6b:b4:ce:bd:91:e2:
99:88:3c:48:d7:91:9a:08:40:ba:5c:4b:33:50:43:
50:f1:a0:b7:38:44:4f:5c:aa:1a:95:29:57:0b:a7:
59:62:c0:95:bd:c4:01:04:7f:7d:28:84:d1:2d:48:
9f:77:d6:10:64:d1:68:d4:1e:d4:a7:e5:6d:df:07:
2e:48:96:38:4e:7a:be:4a:91:7b:ac:70:58:3b:99:
7a:20:82:ec:69:09:d6:50:9c:d6:e6:c5:39:e3:03:
79:fd:d6:a9:28:4e:0a:de:cb:8c:1e:54:e6:8d:3c:
34:6f:ff:88:4e:92:a4:91:96:ed:14:5d:02:7f:a6:
75:b6:49:cb:14:d0:d9:6f:9c:1e:d3:50:14:9b:d7:
e9:8a:de:53:60:99:3d:73:f4:22:a5:ac:81:56:a1:
7f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C1:95:32:87:A1:E6:20:76:40:1A:8C:AC:76:F6:9D:F3:DF:1C:2F
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/sMGVMoeh5iB2QBqMrHb2nfPfHC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.80.0/22
89.46.0.0/24
Signature Algorithm: sha256WithRSAEncryption
53:08:ba:3e:31:68:24:75:b3:5f:dc:e6:fb:2a:2a:42:84:b1:
fa:99:2e:c4:e8:48:57:1f:e7:a0:f4:a7:71:c7:95:52:86:e9:
e9:42:8b:a7:54:bb:b6:f9:5a:e2:18:4d:7d:7f:ce:78:8b:63:
6d:d2:94:d8:78:86:9c:3a:5a:02:7e:90:64:ac:77:b5:89:59:
fb:bd:0c:07:68:d2:fd:ec:f6:3d:ae:c6:5b:82:39:bb:d3:51:
0d:ac:9b:07:17:f0:cc:e3:15:ce:27:75:a8:56:f4:4d:54:7e:
ef:e7:96:fe:92:d0:98:a4:31:32:90:f2:d4:1b:03:16:ae:42:
e6:4e:35:3d:7f:0f:ad:40:b4:35:16:2e:e9:27:ca:f6:b1:09:
46:e1:03:0d:07:ba:b4:a9:2a:66:b6:c3:8f:3d:c6:85:af:6d:
18:b1:45:a6:36:61:0f:0a:c4:43:01:2c:49:92:6b:af:76:09:
4d:53:c6:6b:6c:c7:d5:f1:ad:e7:ba:44:03:bb:3d:10:05:29:
ba:06:0a:ec:e5:86:2a:a0:16:fd:83:5c:07:99:88:e5:1b:29:
b2:34:8c:b2:0d:ad:04:93:f4:17:6a:c7:22:0e:bc:19:6a:eb:
9a:81:a4:9f:af:fa:9f:1e:eb:3e:c5:38:c1:59:71:c0:71:70:
b7:2a:40:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 19 09:13:34 2023 by rpki-client on console-ams.rpki-client.org