Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/ugTixp6W7bCyCLo1q0q0dVwMJ68.roa
File: ugTixp6W7bCyCLo1q0q0dVwMJ68.roa (raw, json)
Hash identifier: i4de3RAeHwDDTpXhQsahMxrDE5uBQMPGR3WtlAC5xvg=
Subject key identifier: BA:04:E2:C6:9E:96:ED:B0:B2:08:BA:35:AB:4A:B4:75:5C:0C:27:AF
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018E7EE98CE3E04B55E8619354AFCBD300C3
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/ugTixp6W7bCyCLo1q0q0dVwMJ68.roa
Signing time: Wed 27 Mar 2024 07:56:58 +0000
ROA not before: Wed 27 Mar 2024 07:56:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
89.46.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Apr 2024 13:57:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7e:e9:8c:e3:e0:4b:55:e8:61:93:54:af:cb:d3:00:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Mar 27 07:56:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba04e2c69e96edb0b208ba35ab4ab4755c0c27af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:32:bf:bd:4a:28:42:c9:0e:d7:74:30:b0:a1:
d0:0a:fd:bc:2e:50:3d:9c:0e:5f:1a:9b:cc:b1:df:
4a:14:e5:7f:b3:b1:bc:29:e8:e1:92:b1:c2:1b:b0:
9b:f0:7d:7c:50:d9:0a:81:d0:7a:e5:1e:98:89:8d:
66:e6:ba:f4:6e:01:62:2f:13:47:4f:dc:d4:7a:54:
05:4d:21:f1:96:80:78:1e:e5:5d:4a:e0:c3:83:3e:
ba:df:ff:cf:6e:3a:12:59:1e:a8:00:22:ae:a6:05:
fc:73:45:e5:9b:b1:46:36:be:61:51:2a:65:54:1e:
f2:24:11:ee:dc:02:2e:94:cb:63:e1:8a:63:dc:9a:
06:8f:c6:10:90:b8:71:bb:0b:40:c3:0e:1c:ee:10:
44:d7:dc:f2:54:f7:0a:57:b1:bf:ee:d1:a3:ef:ce:
31:94:81:7c:b7:e1:f0:b7:79:de:b2:db:a0:75:26:
02:8e:cd:e0:ef:4a:36:ad:cd:24:99:8d:e1:8d:af:
5c:83:a5:00:c1:89:f0:83:9d:e1:45:14:fe:0a:2b:
fe:d6:70:56:a9:a9:13:26:73:ab:f9:42:b2:6f:fc:
c5:d2:97:db:19:ce:8c:0b:96:b5:32:e4:03:01:63:
e7:d3:a0:a2:88:07:69:48:eb:2d:d7:f0:34:e0:63:
2e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:04:E2:C6:9E:96:ED:B0:B2:08:BA:35:AB:4A:B4:75:5C:0C:27:AF
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/ugTixp6W7bCyCLo1q0q0dVwMJ68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.81.0-89.42.83.255
89.46.3.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:92:85:1d:ab:05:72:3d:88:d4:47:6d:a4:66:d8:49:29:bc:
a3:6f:5a:3a:ef:6e:28:59:b1:3f:68:da:e1:7c:92:fd:d7:ae:
99:ee:09:7e:b6:55:e6:48:cf:47:59:22:ae:d6:6d:a3:58:aa:
27:60:3a:cf:6c:75:c5:6d:92:7f:b9:74:b8:37:bb:11:de:4b:
ef:b0:80:83:10:51:aa:75:91:d7:4e:7f:2f:b4:b3:1a:6b:cf:
40:63:46:ff:3c:83:04:31:50:23:27:96:01:6a:f7:b7:82:20:
21:01:9d:99:3a:e1:28:4f:08:ac:eb:8a:7a:46:af:01:92:af:
27:34:34:db:1c:ee:18:60:a4:d3:40:96:43:df:99:36:38:35:
df:34:00:57:24:f5:3a:7f:87:80:70:95:51:5e:d2:37:27:a1:
3d:7a:9d:5b:d5:9e:ae:33:9f:72:72:ca:8f:82:03:df:77:29:
fa:63:07:77:b7:46:82:89:18:63:23:a9:26:d7:3f:9e:f2:b3:
37:93:9b:aa:e8:bb:10:1d:be:5c:e5:20:57:38:bf:ff:71:c8:
16:f8:19:a7:fc:54:aa:7a:fb:dd:44:12:d8:a8:3d:4a:89:60:
35:4b:39:e7:6b:65:55:6f:8b:dd:86:95:ef:ce:4a:aa:72:e7:
e7:96:e1:00
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Apr 11 19:04:46 2024 by rpki-client on console-ams.rpki-client.org