Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/2_dEVls3GFUawVMhMfrWvLDHOck.roa
File: 2_dEVls3GFUawVMhMfrWvLDHOck.roa (raw, json)
Hash identifier: nsLpty63lljZEDce/VF0dyrLUZqONASSgEtzBdmzSI4=
Subject key identifier: DB:F7:44:56:5B:37:18:55:1A:C1:53:21:31:FA:D6:BC:B0:C7:39:C9
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0190D4A5922BB4B6A9C70602C4550D534D05
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/2_dEVls3GFUawVMhMfrWvLDHOck.roa
Signing time: Sun 21 Jul 2024 09:35:38 +0000
ROA not before: Sun 21 Jul 2024 09:35:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 89.251.20.0/24 maxlen: 24
109.122.44.0/24 maxlen: 24
109.122.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jul 2024 08:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:d4:a5:92:2b:b4:b6:a9:c7:06:02:c4:55:0d:53:4d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jul 21 09:35:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dbf744565b3718551ac1532131fad6bcb0c739c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0b:19:f2:47:62:09:45:99:89:ac:48:a9:36:
b2:b5:ff:21:8a:34:65:7a:53:02:1b:fd:d7:f3:2c:
cd:46:cd:5c:c3:5b:bc:b2:d9:9a:1d:d6:37:05:3d:
f8:f7:06:52:4c:23:e4:3d:cc:17:9a:cf:70:48:cb:
76:6e:40:be:77:a6:1c:4b:ef:42:d8:eb:ab:15:e9:
ef:6a:81:54:89:4e:9f:99:ce:a2:47:aa:9b:08:96:
4a:48:15:92:d1:e7:e7:7d:53:75:cd:56:13:e9:b8:
0e:2c:7c:3e:b2:98:08:70:97:5c:3f:e0:c8:b0:af:
ce:a0:b7:dd:a2:d1:04:d6:54:76:a2:81:37:d5:7c:
d0:32:76:18:03:e4:2d:c5:f6:3b:a5:d5:8d:c5:7e:
f6:4b:ce:60:9a:07:3b:e2:a1:a7:d8:82:b6:03:29:
e9:61:d4:46:90:b2:e1:8e:f9:a5:37:0a:d7:ea:b5:
1e:bf:46:93:4b:23:4c:20:8a:08:2e:35:b5:d5:c4:
14:97:28:4e:4b:9c:6e:a0:1c:e3:99:05:6a:bc:90:
e9:29:a6:63:41:84:d2:fc:34:b4:8a:db:90:1b:ab:
74:73:9b:38:fd:a6:dc:00:06:71:f2:46:fb:18:f3:
fd:8a:a8:0c:e7:34:fd:83:c4:9d:14:b5:ca:3d:2f:
76:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F7:44:56:5B:37:18:55:1A:C1:53:21:31:FA:D6:BC:B0:C7:39:C9
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/2_dEVls3GFUawVMhMfrWvLDHOck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.20.0/24
109.122.44.0/24
109.122.46.0/24
Signature Algorithm: sha256WithRSAEncryption
03:d1:f2:e4:c2:44:7e:f2:d4:5c:aa:76:89:1c:8f:cc:2d:c8:
9b:44:3f:2e:80:40:f3:2a:ce:7a:c3:88:16:04:ef:cb:97:c2:
5e:38:08:e8:fa:bb:7c:96:8d:5a:81:13:43:18:95:2d:f2:38:
70:d7:5c:79:be:be:c8:ba:ea:f5:1d:f9:33:22:4b:d3:69:c1:
12:c5:b3:4c:b0:31:06:68:1b:e3:3b:0c:62:00:5a:29:7a:8a:
75:d3:f6:75:24:a9:8d:10:32:fb:ec:3e:9e:fe:99:ac:de:8d:
62:f8:b5:3e:6c:c3:c9:f2:7b:93:8a:ff:85:dd:ad:12:5b:4a:
50:0c:6e:51:97:98:96:31:3a:3e:a3:cd:63:76:ed:81:a6:05:
1c:ce:5b:fa:1b:fc:37:34:d9:a1:7c:b5:34:01:56:68:23:84:
4f:e8:0d:b4:02:b9:f1:34:b7:a8:da:c9:c7:c7:a8:91:e7:42:
7c:c4:b7:80:fa:23:c3:8a:b4:ba:70:cc:60:33:db:53:e6:4b:
fc:cf:13:49:4e:40:dc:f6:d2:f8:58:f0:ca:cb:43:88:fb:f5:
6f:b6:02:f4:6b:4b:b3:de:f5:19:b8:63:63:3f:cd:8d:ba:98:
b6:09:f8:72:d5:f5:5b:ad:3e:aa:97:01:b8:92:65:fb:13:89:
eb:10:95:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 22 11:14:30 2024 by rpki-client on console-ams.rpki-client.org