Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/19V6jH7bYl3hA5Zxc8JBn2WMgHA.roa
File: 19V6jH7bYl3hA5Zxc8JBn2WMgHA.roa (raw, json)
Hash identifier: /H5uV2stc94x6HCsXAdSAPwegV3bBFkzHmki4771O60=
Subject key identifier: D7:D5:7A:8C:7E:DB:62:5D:E1:03:96:71:73:C2:41:9F:65:8C:80:70
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018B562F9B37107B10BFCDC43BD68FE6B3F6
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/19V6jH7bYl3hA5Zxc8JBn2WMgHA.roa
Signing time: Sun 22 Oct 2023 07:00:42 +0000
ROA not before: Sun 22 Oct 2023 07:00:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.42.82.0/23 maxlen: 23
89.42.83.0/24 maxlen: 24
89.42.84.0/24 maxlen: 24
89.42.80.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:56:2f:9b:37:10:7b:10:bf:cd:c4:3b:d6:8f:e6:b3:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Oct 22 07:00:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7d57a8c7edb625de103967173c2419f658c8070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0e:f5:41:f7:4b:81:d5:20:ba:bc:c6:31:dd:
de:3e:dc:1b:e6:ad:d0:6e:29:0e:86:47:c4:23:d3:
1c:19:10:c1:7b:ba:01:3d:38:dc:01:90:bd:ce:09:
da:a2:7a:71:62:fc:fa:ef:c9:ae:a5:55:cb:4a:d7:
d3:c0:41:31:89:08:75:9e:c9:6f:7a:07:b3:68:3c:
57:09:ed:90:34:cd:74:eb:a5:ce:53:12:3b:6c:e6:
51:8c:ee:de:20:81:1d:73:d9:9c:f9:3b:24:99:2f:
4d:56:4f:0d:2d:90:9a:85:40:3a:1a:7b:e9:81:87:
93:ec:e8:41:3c:f0:bc:c4:ba:d1:16:ac:32:95:12:
44:85:16:45:c1:22:e6:07:e7:4b:d0:f4:9b:a4:92:
cc:1f:04:19:1b:98:a6:76:05:47:66:2a:6e:0b:4f:
cf:c4:7c:44:aa:29:2b:cf:e2:0d:63:fd:26:43:67:
91:53:e5:b7:99:f5:c3:f6:49:19:27:08:eb:4f:a2:
6c:60:70:c0:44:d1:8f:5f:a1:14:b6:2b:8f:90:c1:
df:e8:03:17:af:72:8e:ba:ac:24:0a:a6:85:9e:27:
24:6a:9c:73:78:2c:ed:fc:b6:a6:70:0e:9f:b5:1c:
fb:1a:f3:01:9f:24:70:4e:92:76:43:54:1b:8f:b9:
15:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D5:7A:8C:7E:DB:62:5D:E1:03:96:71:73:C2:41:9F:65:8C:80:70
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/19V6jH7bYl3hA5Zxc8JBn2WMgHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.80.0-89.42.84.255
Signature Algorithm: sha256WithRSAEncryption
87:9b:5d:19:58:2d:c3:a5:0b:d9:61:73:9d:0f:14:f4:a6:c2:
a4:63:c6:ac:ab:38:91:b2:7c:0d:79:71:a5:6a:3c:e5:57:3e:
35:7f:cb:3f:ae:e1:e2:9f:ea:11:46:fb:b0:42:82:06:32:c9:
71:37:b5:85:f0:76:d1:9c:fe:ef:7e:f6:03:0f:f7:2f:06:71:
36:87:20:7f:ec:34:16:31:70:51:af:31:42:c2:2a:17:20:61:
12:a7:7e:de:7b:6b:38:ff:a0:f8:e3:be:f4:5d:94:70:3c:d6:
72:e7:68:47:aa:f4:f8:cd:b4:ed:39:f2:3d:51:e8:85:9f:1b:
a2:85:27:f6:bc:b3:95:b3:2b:34:0b:51:84:d9:95:de:0c:4d:
ff:fe:e2:7f:0d:89:05:65:61:09:d5:0a:f0:08:11:cf:9c:33:
d3:1a:41:68:a7:35:fa:4e:82:0f:15:c2:a3:27:ac:5d:6b:10:
71:5a:de:6a:73:79:6d:47:bd:58:21:64:6d:17:b2:f2:2f:b1:
98:29:65:9b:13:49:bc:c7:ac:13:95:72:ee:dd:4e:d3:a8:04:
6a:45:e6:ce:4e:62:4a:d5:a9:81:d6:69:b4:36:d4:2a:18:aa:
ac:23:5b:80:15:12:fe:d6:85:06:1f:07:50:d0:78:a6:0e:e2:
52:1a:19:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:06 2023 by rpki-client on console.sobornost.net