Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/1tWsYFT4ChA2QrkJK5fz16cpk4w.roa
File: 1tWsYFT4ChA2QrkJK5fz16cpk4w.roa (raw, json)
Hash identifier: jObqDQqMSeocvBNtV2sdm8qv5Yck/usXiaGkVf9k1EM=
Subject key identifier: D6:D5:AC:60:54:F8:0A:10:36:42:B9:09:2B:97:F3:D7:A7:29:93:8C
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018D36481B6E1B24321180899884C97CF00D
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/1tWsYFT4ChA2QrkJK5fz16cpk4w.roa
Signing time: Tue 23 Jan 2024 12:25:11 +0000
ROA not before: Tue 23 Jan 2024 12:25:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64267
IP address blocks: 89.251.16.0/24 maxlen: 24
89.251.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Apr 2024 21:51:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:36:48:1b:6e:1b:24:32:11:80:89:98:84:c9:7c:f0:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 23 12:25:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6d5ac6054f80a103642b9092b97f3d7a729938c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:57:d1:33:38:17:c0:3a:7c:f2:db:76:1c:0f:
c2:82:e2:c2:f6:94:b4:64:4e:2c:fd:8a:39:ea:17:
5a:5d:2f:55:76:e8:96:1b:3f:a0:0b:12:af:6d:6a:
b7:7d:36:a1:b9:4b:51:a7:48:7d:e1:19:29:c0:ce:
0f:09:04:96:b2:26:e8:be:09:dc:37:e2:ef:19:b6:
e0:08:d0:f1:c0:2d:fa:60:9e:33:34:7e:c6:8a:23:
1c:a4:8b:68:15:b6:db:b7:5f:50:91:c6:f8:5a:d1:
90:ba:37:2a:67:2b:fc:28:0f:37:c5:47:fb:3d:fb:
60:f3:0a:91:37:0e:ab:2e:52:7f:1d:c0:d7:c3:90:
b1:a4:9e:55:48:3c:c3:e6:cb:e8:c2:55:c7:c3:51:
7a:e2:8c:cb:7a:d0:7b:31:ef:e6:40:0d:d2:6c:71:
12:f6:78:f1:3e:b8:15:0a:b3:3c:9f:14:68:1f:31:
50:a4:cf:8c:cc:24:0c:b0:d1:5c:3b:e3:a2:28:69:
31:23:57:e3:f3:ec:24:b0:81:cc:78:23:c3:d0:80:
40:45:38:c1:b3:a2:9a:3e:2a:d7:8c:e7:2e:d7:76:
d0:37:93:b7:07:00:c3:52:2e:ee:b8:e4:40:ca:e2:
7d:d4:36:df:75:ab:87:3c:b1:7f:7f:e9:1f:d3:cf:
e6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D5:AC:60:54:F8:0A:10:36:42:B9:09:2B:97:F3:D7:A7:29:93:8C
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/1tWsYFT4ChA2QrkJK5fz16cpk4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.16.0/24
89.251.19.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:98:c2:0b:ec:1a:68:0a:cb:d9:fa:90:6f:14:04:c7:5c:13:
62:46:3e:dd:37:cc:5a:9a:22:f4:b0:5a:ac:89:8a:9d:ae:48:
8f:2c:f5:74:fd:6f:7d:e4:82:04:76:d7:36:c6:0d:a3:b4:e9:
96:9e:b1:84:16:32:00:6b:0e:8f:66:d7:a8:21:26:c1:ab:18:
d4:02:f4:bf:89:f5:c3:1c:77:d5:58:e4:a2:ff:42:4e:c5:ce:
f6:64:0a:32:de:dc:64:8d:42:f8:5a:bc:29:8e:7a:60:c4:2f:
f6:b4:e9:84:a0:b4:3e:a1:c3:be:9c:e4:bf:1e:18:e5:d7:ed:
9b:b7:d3:ae:31:9c:af:c6:74:9b:3a:56:60:ad:72:52:41:87:
4f:01:1d:d6:ff:a7:e3:e6:fe:b9:b0:a6:4a:94:fc:94:9d:6a:
7d:20:ef:26:dd:aa:19:04:bf:2e:c7:e3:61:23:ad:1a:be:4d:
b0:e2:a2:23:c3:15:13:0b:e9:d7:1c:09:75:fb:be:5d:11:ea:
90:69:ad:7f:78:37:8a:74:3b:f0:bc:3f:3c:7a:90:f4:00:7d:
c6:e7:0d:48:7d:14:35:41:4d:af:b5:9c:f8:57:b7:4c:7c:62:
5d:e2:47:f4:92:56:88:e6:2a:87:d9:dc:26:45:27:62:d5:68:
4e:e6:95:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:36 2024 by rpki-client on console-fra.rpki-client.org