Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/supl7iIPwmmh0hCw4-1dVOojY60.roa
File: supl7iIPwmmh0hCw4-1dVOojY60.roa (raw, json)
Hash identifier: fvUFlIhiI6jBJvkn9MjrVm4VMWxFUgZcZh6W5U1o5hk=
Subject key identifier: B2:EA:65:EE:22:0F:C2:69:A1:D2:10:B0:E3:ED:5D:54:EA:23:63:AD
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0189B9E374E1AC425F685B3F4FBC58EE4209
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/supl7iIPwmmh0hCw4-1dVOojY60.roa
Signing time: Thu 03 Aug 2023 05:33:58 +0000
ROA not before: Thu 03 Aug 2023 05:33:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44547
IP address blocks: 89.42.92.0/24 maxlen: 24
89.37.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Aug 2023 09:10:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b9:e3:74:e1:ac:42:5f:68:5b:3f:4f:bc:58:ee:42:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Aug 3 05:33:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2ea65ee220fc269a1d210b0e3ed5d54ea2363ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6a:57:a5:2e:d5:4c:d0:0a:bb:0b:15:e3:3b:
93:ed:c6:5f:34:3c:ce:e5:19:81:f5:03:f8:c7:8e:
d2:00:cc:74:a9:ff:a0:f1:a1:22:93:18:87:d6:af:
18:68:9d:50:82:cc:b3:bd:d0:8d:e7:8f:c2:84:a7:
1a:13:56:45:69:79:79:2d:05:6b:b7:86:b4:aa:b7:
f9:6e:4f:b1:37:2d:e8:74:e4:b3:ca:48:73:8b:2a:
84:62:a9:16:6a:aa:ad:99:aa:d4:9e:0b:f4:f3:46:
e3:c4:d9:e1:97:83:e8:ac:82:95:6b:41:86:a8:8b:
33:39:8c:a7:1a:ce:d7:57:c4:49:91:f2:c3:3c:06:
1c:e3:3e:8b:87:47:c5:7b:b9:3d:9b:3d:39:61:e5:
c3:17:db:9c:a1:fd:e4:67:0f:3b:1d:41:4c:84:b8:
48:7e:04:c3:e2:a4:8d:9f:6d:c7:f7:f9:39:f2:2b:
e4:f3:49:ff:e9:7f:d1:2c:fc:cf:2b:5d:9c:03:8b:
b0:ea:41:6a:44:81:5b:82:03:e0:41:87:02:e9:bf:
2d:f3:51:92:05:67:2e:f3:18:0c:c5:a8:9d:d3:b0:
44:2b:f5:3f:bb:e6:f3:15:7f:03:d6:7a:de:0a:5b:
18:6a:fc:5c:67:4a:5a:c4:ad:f2:d7:b8:03:3d:69:
f2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:EA:65:EE:22:0F:C2:69:A1:D2:10:B0:E3:ED:5D:54:EA:23:63:AD
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/supl7iIPwmmh0hCw4-1dVOojY60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.119.0/24
89.42.92.0/24
Signature Algorithm: sha256WithRSAEncryption
13:7d:50:c2:1e:cf:be:41:8c:91:43:f1:e5:c9:b3:d3:0c:05:
55:62:44:3d:5e:4b:92:78:c6:e3:32:7e:d3:40:0e:ee:fb:ee:
15:5a:55:43:1f:96:ce:9d:c3:79:5b:52:ba:4f:84:ce:8c:19:
35:81:b6:cd:d1:44:8e:84:5f:27:00:e5:79:37:d9:d9:30:44:
96:1c:f7:09:5d:fe:8d:cf:87:b9:d5:19:90:a0:4d:3f:6f:9c:
65:cc:78:d2:23:3a:b7:98:a3:ee:02:89:2e:4b:13:a5:bc:87:
32:b0:2e:de:44:0f:ee:0e:2a:52:ec:d1:bc:2d:77:06:53:dc:
2a:21:2d:6d:69:59:a2:4e:50:2a:52:bc:7d:2e:3a:63:56:03:
64:20:a3:a0:2d:04:40:cd:71:14:fb:16:72:7c:97:58:bd:94:
fc:a5:e0:7e:42:3d:82:75:61:74:85:8d:8f:33:87:64:f8:c8:
10:3b:b8:dc:78:73:94:40:e4:c5:31:f0:6e:f2:97:3b:ad:04:
ca:5e:66:29:11:cb:5c:c9:ee:c9:22:12:81:6b:4e:77:02:2d:
6f:f7:f1:f4:d0:fa:39:a0:35:3c:82:16:d8:8d:7f:f3:88:d7:
95:09:bd:0e:d4:e0:2e:08:70:6d:69:85:02:1f:27:1b:61:80:
a1:e6:b4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:19 2024 by rpki-client on console-fra.rpki-client.org