Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/13jRUHXExcBT4fv66s5roD_fSOg.roa
File: 13jRUHXExcBT4fv66s5roD_fSOg.roa (raw, json)
Hash identifier: THGNQRIraUPwL1Uiyw8SP7plm+QIEYtQyomftqdpADY=
Subject key identifier: D7:78:D1:50:75:C4:C5:C0:53:E1:FB:FA:EA:CE:6B:A0:3F:DF:48:E8
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018B4449C1ED369F23DB954CF86FFE127E0A
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/13jRUHXExcBT4fv66s5roD_fSOg.roa
Signing time: Wed 18 Oct 2023 19:36:06 +0000
ROA not before: Wed 18 Oct 2023 19:36:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.200.221.0/24 maxlen: 24
109.122.46.0/24 maxlen: 24
89.251.30.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Oct 2023 19:57:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:44:49:c1:ed:36:9f:23:db:95:4c:f8:6f:fe:12:7e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Oct 18 19:36:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d778d15075c4c5c053e1fbfaeace6ba03fdf48e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8b:96:1a:8c:68:14:8f:6d:56:ca:cf:b1:cd:
4b:9b:68:48:a1:71:fd:ad:4b:45:2b:8a:4c:08:d5:
ba:2c:f6:8c:f4:fd:4d:50:2d:7a:ee:00:91:bf:b9:
39:c7:2b:86:7d:e0:49:9c:bf:0b:4a:7b:9b:f2:01:
e5:1e:23:91:96:fe:03:7d:e7:3b:8d:1a:bd:11:65:
a6:f5:b7:16:f4:d0:aa:68:74:9b:e1:6b:62:01:b1:
1a:e3:fc:b1:36:4d:41:31:bf:41:dc:42:ab:26:77:
26:95:d0:5d:39:45:38:03:98:39:4f:bf:2f:2d:ea:
40:4b:33:f0:8c:36:1e:20:9f:69:db:49:89:ce:25:
89:68:97:c4:a5:69:ef:f0:3c:a6:ac:ca:83:3e:01:
68:c1:ef:8b:aa:86:06:b1:0c:59:f2:2f:6e:3b:58:
49:e0:b4:00:4a:16:15:b5:0a:a4:b5:9f:71:97:50:
cc:15:4f:45:d3:9a:fc:7a:26:ab:07:f9:26:dd:7f:
f6:fd:80:ff:0e:84:dc:a3:cb:7d:85:0b:e6:32:de:
26:a4:ca:cb:0e:fd:1a:4e:01:20:40:18:14:03:dc:
b2:9e:1e:a7:90:9a:22:b3:f6:06:20:98:8d:bb:01:
3a:cf:af:78:ab:52:e9:5b:5f:64:dd:a3:5d:9a:c8:
68:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:78:D1:50:75:C4:C5:C0:53:E1:FB:FA:EA:CE:6B:A0:3F:DF:48:E8
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/13jRUHXExcBT4fv66s5roD_fSOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.30.0/24
91.200.221.0/24
109.122.46.0/24
Signature Algorithm: sha256WithRSAEncryption
27:0e:be:9b:7b:1c:fc:8e:c4:9a:86:31:5d:e0:75:27:62:cb:
42:17:7e:af:32:78:0e:c2:ec:f8:ca:d2:a5:e0:6a:0b:e1:78:
27:9c:c8:7f:31:ec:96:4c:17:09:57:9b:d1:eb:15:83:36:6b:
c3:69:b7:99:3e:47:53:9f:da:7f:ef:51:90:8f:83:b4:41:7a:
a8:db:fb:fa:24:43:a9:9e:a7:33:d2:d2:f7:e5:55:7d:d3:5d:
c9:dc:7f:79:64:4a:9b:4b:58:c4:82:48:4c:cd:ee:91:e1:89:
2f:d6:d8:dc:7f:33:75:21:4d:d0:76:c3:2c:95:5a:5a:a7:f5:
3b:5f:34:d8:70:80:e0:73:11:32:03:fe:c3:24:48:24:09:73:
02:97:87:fb:5e:cd:5f:cb:a8:cf:8b:74:b8:28:63:bb:ee:90:
b0:38:71:83:4a:bd:37:6d:81:70:72:33:1b:99:7f:a9:0d:1b:
8c:90:50:b9:a3:92:8e:82:22:f9:69:6c:30:c2:eb:24:d1:79:
78:ad:c9:a1:7b:70:16:33:b1:21:0b:81:f3:b7:98:6f:5a:21:
42:fd:e5:c0:3a:65:30:2b:97:7c:87:88:cc:fa:77:da:c2:a2:
3e:93:19:0b:4a:4e:87:7a:91:c6:b4:12:d3:62:ed:2e:31:46:
ce:44:dc:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:05 2024 by rpki-client on console-ams.rpki-client.org