Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/09PVHbYcapFLk0hlOgW6zrP6Vj4.roa
File: 09PVHbYcapFLk0hlOgW6zrP6Vj4.roa (raw, json)
Hash identifier: pzMyc6b7jotbF+4s+VC/GFpSidVFUok/Oulv/+sculo=
Subject key identifier: D3:D3:D5:1D:B6:1C:6A:91:4B:93:48:65:3A:05:BA:CE:B3:FA:56:3E
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01917F1EAE364EE0653953219471195E7683
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/09PVHbYcapFLk0hlOgW6zrP6Vj4.roa
Signing time: Fri 23 Aug 2024 12:03:22 +0000
ROA not before: Fri 23 Aug 2024 12:03:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 89.251.24.0/24 maxlen: 24
212.23.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Sep 2024 17:25:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:7f:1e:ae:36:4e:e0:65:39:53:21:94:71:19:5e:76:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Aug 23 12:03:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d3d3d51db61c6a914b9348653a05baceb3fa563e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:37:70:1b:59:fd:08:52:48:b2:24:83:52:4b:
ea:0e:26:01:18:ee:04:d6:30:b1:e9:f3:8d:83:bb:
aa:11:05:02:a8:3c:2c:dc:10:b0:9d:1e:7c:32:41:
c8:4c:38:76:05:3e:3b:f3:f8:cb:dd:a7:06:2d:5e:
8b:3e:7e:c7:31:32:03:0f:e3:ca:d8:48:02:18:93:
db:58:81:08:80:2f:34:fa:d7:b2:a2:11:7f:62:58:
ae:67:7f:9d:77:67:ec:ce:2d:68:45:f2:52:d4:b1:
3f:37:19:29:f6:b3:4f:d8:c6:43:5f:1a:1d:ce:24:
31:04:8d:60:89:3d:51:1d:19:d7:4b:4d:c1:19:e3:
bf:4b:b8:49:4c:5f:e4:16:23:66:8e:f2:3a:7b:51:
55:39:b8:16:f3:f4:c1:6f:a3:71:f9:fd:37:2a:7f:
52:65:b7:fb:30:c7:df:30:7f:a0:b2:2b:86:44:99:
6f:55:b5:2a:af:80:1d:33:61:41:b0:39:4d:75:eb:
43:95:81:0d:a3:37:40:6c:0a:18:b9:e0:09:e6:74:
da:6c:f7:27:29:b4:e1:db:e3:d4:4f:6c:40:89:5f:
68:c1:cb:34:de:10:44:b6:2e:e2:3c:2b:51:82:5e:
6e:8b:47:11:39:04:e9:16:47:57:e4:3d:42:77:39:
75:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D3:D5:1D:B6:1C:6A:91:4B:93:48:65:3A:05:BA:CE:B3:FA:56:3E
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/09PVHbYcapFLk0hlOgW6zrP6Vj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.24.0/24
212.23.206.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:4a:4f:d7:1e:d8:d8:4b:fe:03:d6:72:1c:c4:15:66:f5:28:
79:be:ae:ec:65:11:bc:4a:ac:2e:43:4a:d3:45:e4:d7:66:ba:
01:b1:11:44:73:ae:ad:fd:01:c1:a8:c5:65:08:1a:a9:58:5f:
72:a2:52:59:1f:91:97:40:d7:47:d5:75:d4:f5:aa:44:5a:22:
a6:ba:0a:60:e5:8b:1a:8a:2d:6a:6e:92:51:82:ca:74:24:e3:
32:0c:8e:61:fb:00:9d:59:91:1c:b7:4c:bf:77:42:5b:26:af:
a3:ea:81:04:6e:a6:1c:50:0b:d4:6d:37:b9:05:da:36:b4:ce:
ca:65:63:c5:00:0e:13:87:ec:f5:27:52:33:df:67:2e:1f:02:
35:7d:3e:d2:86:1f:b0:77:bc:e8:8c:7b:6d:0b:9d:60:37:0a:
b4:2c:a2:22:b1:b9:b5:ba:71:be:5c:1e:23:e5:22:3f:7b:10:
5f:0e:04:d2:ab:62:fc:25:ec:c7:18:b8:d7:c8:a8:b5:12:53:
77:c9:8a:58:91:56:a3:81:f8:fb:c3:f8:1e:59:48:63:4a:d7:
d0:a6:b5:0f:39:46:43:83:a6:3f:3a:f7:ba:9a:01:6d:61:32:
84:f7:a1:9a:09:26:4c:d8:a6:de:a3:bb:d3:8b:39:a1:46:9e:
30:6d:a6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 22:26:24 2024 by rpki-client on console-ams.rpki-client.org