Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/y-3B8fGmPFe2v543G0YuSKHjdNc.roa
File: y-3B8fGmPFe2v543G0YuSKHjdNc.roa (raw, json)
Hash identifier: ODF6tdZ3eIoinzwkcrV4AS6i8HEf7HY4qGyLGELfers=
Subject key identifier: CB:ED:C1:F1:F1:A6:3C:57:B6:BF:9E:37:1B:46:2E:48:A1:E3:74:D7
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0189D8AD3A9A852FE791CA3E0D9BAC82ED9F
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/y-3B8fGmPFe2v543G0YuSKHjdNc.roa
Signing time: Wed 09 Aug 2023 05:02:58 +0000
ROA not before: Wed 09 Aug 2023 05:02:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 89.42.93.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d8:ad:3a:9a:85:2f:e7:91:ca:3e:0d:9b:ac:82:ed:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Aug 9 05:02:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cbedc1f1f1a63c57b6bf9e371b462e48a1e374d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:41:1e:cc:79:40:aa:67:c3:6b:72:8b:56:76:
65:ad:9c:55:ab:f8:ba:18:33:be:c5:63:e0:b7:2c:
a0:2c:32:c6:02:b6:14:02:e1:aa:1a:37:5c:91:20:
c0:b8:6a:44:a4:48:4b:6d:01:37:3a:41:37:ef:c9:
5d:70:f0:b3:5b:91:08:54:f8:c9:a6:62:0e:41:3a:
1a:b4:33:38:c9:f4:9e:ef:3b:6e:76:ad:73:bf:73:
f3:1c:42:c4:c2:1f:31:89:52:c4:ca:86:c6:8d:c4:
75:7e:80:6b:f7:f9:a1:e3:ec:12:ce:91:e9:a7:96:
cc:92:0f:89:52:eb:a9:b6:c1:ca:25:19:9e:8e:1a:
00:3b:52:f4:8b:74:78:e9:39:bb:f4:bc:a8:b7:06:
67:4b:bd:44:61:80:0c:96:85:2d:a4:1e:ed:4a:7c:
ca:2f:ba:24:43:bd:6e:6a:92:76:da:77:d3:4d:d6:
4f:53:12:72:c9:65:db:1c:bf:d4:6a:85:30:a0:4a:
d9:7f:5b:3d:4b:82:75:38:a5:5c:e8:ca:85:f9:10:
dd:dc:5c:d9:28:7f:9c:79:4e:7d:27:bf:99:90:b3:
8d:8e:f0:d9:d4:87:3b:fa:e2:81:79:3b:f0:fb:7e:
78:25:05:21:8c:75:94:1a:36:b7:00:ee:99:f1:95:
65:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:ED:C1:F1:F1:A6:3C:57:B6:BF:9E:37:1B:46:2E:48:A1:E3:74:D7
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/y-3B8fGmPFe2v543G0YuSKHjdNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.93.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:32:cd:40:67:f5:f4:38:44:18:65:35:8b:df:07:69:0b:1e:
99:fc:4c:10:12:83:63:91:44:4b:15:80:42:18:f7:2d:0a:0c:
30:4c:99:61:41:9a:b8:38:1e:b2:b8:67:98:fb:83:1b:b9:dc:
5d:3e:cb:5b:70:eb:06:21:a3:d6:7f:d3:6a:7f:15:db:03:45:
83:0c:62:f8:d9:3f:4e:94:17:12:20:95:84:cb:f0:c0:f7:cf:
1c:ab:d2:80:1c:68:2c:5c:60:c2:5f:ed:03:ab:63:b7:35:ae:
b8:55:a2:bd:b3:6f:3e:5f:6a:a2:e5:21:cd:74:68:26:f3:6b:
6b:f5:95:af:0d:a6:90:e0:ca:5b:58:a9:d0:8e:b6:e0:6b:fc:
8b:d5:8a:07:2e:0a:67:2e:b2:1f:07:27:fc:f2:f2:fe:93:80:
87:03:31:de:e2:27:a3:18:8b:95:9a:65:04:23:7a:96:b5:e9:
32:76:01:bb:78:eb:15:c7:ff:a8:20:a7:85:da:92:b3:d2:84:
02:6c:20:67:0e:ca:54:88:78:38:b9:30:ae:a1:14:0c:bc:ab:
bc:14:97:d4:9e:9b:6b:8b:17:84:07:fb:a9:14:96:f7:6a:9f:
69:88:4b:68:eb:c6:b5:bc:21:8e:66:39:a9:5f:78:1b:10:23:
a2:05:7e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 28 15:22:26 2023 by rpki-client on console-ams.rpki-client.org