Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/u4z5QxVp_EU1arNra7ApDClOH_4.roa
File: u4z5QxVp_EU1arNra7ApDClOH_4.roa (raw, json)
Hash identifier: L+qi8dHd/BfjFnrkpF7mar36HbYa853RKUy53Z7xupc=
Subject key identifier: BB:8C:F9:43:15:69:FC:45:35:6A:B3:6B:6B:B0:29:0C:29:4E:1F:FE
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018CA4F4886A4B0C68803679C04144350CB0
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/u4z5QxVp_EU1arNra7ApDClOH_4.roa
Signing time: Tue 26 Dec 2023 07:08:58 +0000
ROA not before: Tue 26 Dec 2023 07:08:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
89.33.195.0/24 maxlen: 24
89.46.3.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a4:f4:88:6a:4b:0c:68:80:36:79:c0:41:44:35:0c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Dec 26 07:08:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb8cf9431569fc45356ab36b6bb0290c294e1ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f5:eb:ac:5e:00:3f:5f:ab:b0:48:b3:bb:95:
48:3c:f1:f0:fa:92:4d:55:a0:bb:d2:46:8a:54:84:
14:a6:1a:14:3d:a8:33:15:9c:84:37:97:19:ff:61:
1d:e5:5a:bd:a1:ca:d9:3d:14:6d:b3:fe:d3:8f:8c:
5b:dc:c9:9f:da:8f:46:59:fe:1e:f1:ee:bd:ca:c1:
4e:e6:f6:e9:da:4e:65:e0:e2:41:4d:84:41:ca:aa:
7f:ad:14:09:09:fe:7f:78:3e:cb:51:1e:c4:8a:a7:
a1:7c:eb:fe:78:b3:e6:a2:d3:58:91:85:9a:85:e6:
9d:ac:3f:2b:31:ff:2c:73:d6:2b:98:54:f9:0f:cd:
ee:89:42:68:93:c4:cb:f2:50:7d:77:67:84:63:d4:
1a:35:96:69:db:a0:87:4f:fb:48:68:56:b8:70:38:
8f:22:d2:8c:b1:e9:22:11:a9:77:47:90:77:fc:04:
1d:64:c7:f0:2d:3e:24:69:ac:b6:9a:28:3a:7d:fe:
d2:41:b3:c2:d3:72:6a:4f:fc:af:50:97:14:83:47:
fd:63:78:39:6d:dc:e7:c9:f1:4e:d7:0f:bb:ab:2a:
7f:77:8d:39:c4:2c:92:2d:40:63:d6:64:b8:2c:48:
07:b5:70:54:41:ae:04:d3:97:7c:1a:47:32:95:02:
3f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:8C:F9:43:15:69:FC:45:35:6A:B3:6B:6B:B0:29:0C:29:4E:1F:FE
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/u4z5QxVp_EU1arNra7ApDClOH_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.195.0/24
89.42.81.0-89.42.83.255
89.46.3.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:48:a3:6b:37:c5:f0:fa:0a:a7:c7:ed:2d:35:d7:a2:e7:04:
70:d6:c1:b7:28:6b:73:a8:87:e4:8b:da:76:4a:27:e9:ec:86:
c5:67:79:00:40:15:71:64:c4:fd:7d:0f:2c:53:a4:f7:c5:9b:
26:ae:81:0d:3d:71:5b:88:0b:99:98:16:80:49:cd:38:39:9f:
d2:b8:a9:9b:b7:0d:4b:5a:a3:b3:87:18:87:31:05:e0:35:8f:
42:83:d8:99:21:b9:fc:e9:ef:86:a5:92:c0:f9:1d:c1:8a:2e:
ec:01:76:90:4c:c1:15:55:54:1b:79:06:a6:e6:a4:1a:b3:08:
bb:73:99:a3:23:80:0b:22:9f:23:49:a3:03:39:dc:7b:82:8c:
ba:ea:76:08:03:6b:fd:28:e6:5a:cf:e0:34:d1:01:d0:f9:b3:
31:a8:fa:bb:cf:e7:93:b4:fd:6f:20:a0:fe:fa:26:c0:2a:e4:
f9:b3:f0:88:1c:3a:e9:c4:5f:79:f8:bd:38:27:ab:c1:00:6d:
b3:58:d4:a7:fa:f6:fc:ed:a6:5b:b9:69:6a:6c:a4:91:36:5b:
3c:b6:ab:01:c5:91:09:d6:82:89:1f:7c:f2:3c:38:dc:3b:4f:
55:9d:f9:06:f6:94:3e:a3:dd:cf:77:eb:1f:6d:d2:14:3b:9b:
f6:ad:78:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 28 09:45:14 2023 by rpki-client on console-ams.rpki-client.org