Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/t8-r9gDBUYh-Yrc8C-9XFtpZyT8.roa
File: t8-r9gDBUYh-Yrc8C-9XFtpZyT8.roa (raw, json)
Hash identifier: dXivKIeTVf8uudkVQQI09WKofeM/fLoHhCCvm2KpZjY=
Subject key identifier: B7:CF:AB:F6:00:C1:51:88:7E:62:B7:3C:0B:EF:57:16:DA:59:C9:3F
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018A021C03FCFB9A8250742A4139A7F42F5D
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/t8-r9gDBUYh-Yrc8C-9XFtpZyT8.roa
Signing time: Thu 17 Aug 2023 06:08:24 +0000
ROA not before: Thu 17 Aug 2023 06:08:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.42.82.0/23 maxlen: 23
89.42.83.0/24 maxlen: 24
89.42.80.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sun 20 Aug 2023 06:45:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:02:1c:03:fc:fb:9a:82:50:74:2a:41:39:a7:f4:2f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Aug 17 06:08:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7cfabf600c151887e62b73c0bef5716da59c93f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:27:b7:35:94:4a:fe:16:53:03:a6:73:51:5e:
3c:ea:61:ca:ef:12:56:b7:45:4e:ab:b4:55:cf:51:
db:37:1a:60:76:e4:62:8b:92:55:ff:4a:39:3d:20:
ea:2e:d3:39:3d:e0:68:fb:22:f5:e9:73:15:a0:27:
14:dd:99:de:70:70:a9:bd:b6:3e:b4:b2:7b:c4:c1:
b6:73:64:d1:af:8b:b6:48:5b:6f:83:ae:63:e1:7a:
8c:aa:53:f1:da:d9:06:bc:b1:56:8d:ab:bc:91:ee:
a3:81:7d:84:bb:99:88:6f:10:38:5d:2b:74:d0:2e:
25:87:10:ad:7c:a9:3d:e8:9c:5b:ad:9b:68:37:99:
4a:0e:a6:5e:cf:c8:1e:a9:9f:a4:7a:c1:49:70:d1:
9c:95:f9:10:84:b4:7a:14:9a:c4:9f:7b:44:c9:3d:
c8:b3:1c:c9:b4:c6:59:08:a6:c0:7b:8d:4a:23:24:
c8:b8:b1:0e:e0:76:49:ce:1d:07:9c:d2:25:76:da:
f1:5b:fa:5e:c2:04:86:f0:3f:e8:97:46:b8:45:04:
80:71:57:18:d1:2d:62:77:25:97:c6:ed:e6:00:81:
3c:b2:76:87:fc:cb:7b:d7:45:59:48:f0:f2:bf:73:
0d:40:fb:64:6c:72:03:d3:1e:a5:77:02:79:d2:17:
8e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:CF:AB:F6:00:C1:51:88:7E:62:B7:3C:0B:EF:57:16:DA:59:C9:3F
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/t8-r9gDBUYh-Yrc8C-9XFtpZyT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.80.0/22
Signature Algorithm: sha256WithRSAEncryption
21:81:93:28:74:25:0b:4f:03:1f:91:d9:1c:eb:b8:35:9b:ac:
bd:33:3f:5e:b9:09:f8:c2:6a:0a:5e:f3:0f:2b:96:1f:77:e6:
fa:39:a8:08:2c:ad:d1:83:3c:6d:0f:89:0c:eb:3f:67:71:ed:
52:8c:9a:a5:49:7f:66:89:19:ab:5d:99:af:77:33:20:56:02:
17:8b:e6:7f:1e:bf:fd:38:60:5d:37:24:25:7f:4b:91:1e:82:
15:e1:0f:e1:96:0b:a8:fb:bc:e2:f6:91:f3:16:b9:fa:e4:e0:
51:6e:cc:fb:d2:0c:86:9f:e8:d0:a0:70:09:7a:1f:6a:a7:4f:
7e:e6:39:40:b6:d6:f1:ad:69:c4:1f:0c:04:5c:6a:38:fd:9e:
49:82:3e:64:e0:bb:a4:c7:74:b7:f9:97:70:64:f2:64:ef:91:
41:fc:0e:76:c2:15:7b:9e:a1:33:f3:c8:68:fc:3e:17:28:16:
56:2c:4b:df:b5:b6:a2:24:f7:15:3f:94:88:ef:67:47:11:9b:
d9:82:89:cd:68:76:30:31:f8:a9:15:4b:f7:7f:48:50:c4:83:
8c:07:45:b8:55:37:2e:78:a5:6f:bc:a4:54:91:ba:bd:66:db:
b8:b8:25:ed:4f:74:f5:f9:4b:44:7d:84:62:0b:27:83:7d:b3:
b5:86:32:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:50 2024 by rpki-client on console-ams.rpki-client.org