Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/22mIWMFsQHkVGO966lWXjZZXkyQ.roa
File: 22mIWMFsQHkVGO966lWXjZZXkyQ.roa (raw, json)
Hash identifier: Vby0/No3KUaynIfWakqzHnmnxpTwLL5EcKR/2V/QpgQ=
Subject key identifier: DB:69:88:58:C1:6C:40:79:15:18:EF:7A:EA:55:97:8D:96:57:93:24
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018AACFA76FE615113F4A53863091D373269
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/22mIWMFsQHkVGO966lWXjZZXkyQ.roa
Signing time: Tue 19 Sep 2023 10:26:50 +0000
ROA not before: Tue 19 Sep 2023 10:26:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 109.122.42.0/24 maxlen: 24
109.122.46.0/24 maxlen: 24
89.251.27.0/24 maxlen: 24
193.93.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Sep 2023 09:31:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ac:fa:76:fe:61:51:13:f4:a5:38:63:09:1d:37:32:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Sep 19 10:26:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=db698858c16c40791518ef7aea55978d96579324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:81:27:d9:70:5f:ec:21:7d:c8:38:d9:74:dd:
65:f0:64:b7:75:50:97:e6:db:e6:a6:1e:02:53:39:
55:6b:9b:2a:26:ae:4e:42:be:2a:2c:4b:d2:a2:51:
ea:1a:d1:cc:55:9b:c9:2d:df:5c:01:6b:fe:ad:12:
94:75:cb:72:85:2d:5c:df:7a:58:2b:50:be:21:0c:
cc:8f:e5:0b:4b:5f:36:36:6c:ef:4a:9f:b0:83:a5:
8d:4e:a0:4b:16:2a:73:05:4c:1f:52:16:ad:a6:4b:
9d:e1:bb:1e:af:93:55:85:7d:1a:d6:e0:2e:71:cc:
db:5d:27:1c:6f:8c:82:05:d0:b9:19:62:28:4b:ba:
af:3d:35:d7:86:93:a7:4c:b1:55:91:a6:d4:f1:08:
b7:e4:da:f2:ea:a3:82:79:c1:42:1e:61:23:70:f7:
c0:27:2f:7c:99:bd:80:ad:ac:d6:86:72:55:74:d8:
9d:db:c3:f8:29:f8:bb:50:4a:ae:67:47:ee:4c:c0:
41:07:1b:21:e3:f1:89:a7:0f:c8:51:13:ac:85:cc:
dd:59:01:1b:d7:f4:ce:77:5a:fc:86:75:cc:5e:d3:
e7:42:ef:e5:c0:fd:28:9d:ab:90:38:b0:e5:6d:f1:
40:c8:66:ce:5d:f5:ad:3c:eb:bc:f0:9a:d0:4f:36:
39:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:69:88:58:C1:6C:40:79:15:18:EF:7A:EA:55:97:8D:96:57:93:24
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/22mIWMFsQHkVGO966lWXjZZXkyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.27.0/24
109.122.42.0/24
109.122.46.0/24
193.93.55.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:a1:e7:6d:6b:4d:33:f5:15:0d:c8:eb:fd:19:34:37:46:90:
5c:e3:73:12:0a:4c:a9:4e:da:dc:6c:6c:8f:b2:36:4a:ce:60:
6a:5d:14:dc:5b:c4:9d:82:53:3a:58:df:39:a6:fe:eb:f4:ea:
90:65:4d:02:6d:c7:cd:96:4b:1e:5c:40:69:81:a1:9b:bc:cd:
f3:d2:83:79:06:72:65:de:ed:79:28:34:34:11:fe:0e:7c:d9:
33:11:54:a9:fb:4e:28:b9:7d:a0:01:29:1d:39:e6:4c:21:ec:
f3:c0:bf:6e:1a:dd:0a:cb:84:45:d4:18:91:eb:e0:15:29:64:
d2:00:a4:80:f9:19:24:85:09:1d:09:06:7b:de:ae:b7:66:a1:
04:ee:99:cd:32:8d:92:1b:9c:fb:ca:e5:7c:3f:36:80:df:95:
96:1c:93:4d:e1:f1:40:af:3c:71:c9:f8:c6:ab:62:05:74:b2:
25:90:7f:3b:e7:1a:36:94:b2:03:ca:14:7e:23:0c:51:4e:c8:
71:38:44:3e:7e:0c:6c:e9:0a:71:a7:25:d9:a7:f1:dd:ca:5f:
17:3a:00:ac:85:4d:33:d8:51:d9:bb:13:f1:91:f2:17:7a:62:
c9:23:75:b1:8a:9e:75:52:5e:2e:32:8d:d9:27:6a:72:3f:d0:
51:86:82:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:36 2024 by rpki-client on console-fra.rpki-client.org