Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/3-Jk6IzooV4_8drhsj5qlC6QLeM.roa
File: 3-Jk6IzooV4_8drhsj5qlC6QLeM.roa (raw, json)
Hash identifier: SEP7v76E7U9LeNosRIEw+/NtPfdQ/EJVWIX6Fw/yfGc=
Subject key identifier: DF:E2:64:E8:8C:E8:A1:5E:3F:F1:DA:E1:B2:3E:6A:94:2E:90:2D:E3
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018DF3C3223255880664BB6F4F69E0B37EF8
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/3-Jk6IzooV4_8drhsj5qlC6QLeM.roa
Signing time: Thu 29 Feb 2024 07:27:48 +0000
ROA not before: Thu 29 Feb 2024 07:27:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 91.200.220.0/24 maxlen: 24
109.122.40.0/24 maxlen: 24
109.122.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Mar 2024 14:18:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f3:c3:22:32:55:88:06:64:bb:6f:4f:69:e0:b3:7e:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Feb 29 07:27:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dfe264e88ce8a15e3ff1dae1b23e6a942e902de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:33:13:39:59:3f:f4:d8:e0:d6:67:f9:31:96:
2b:52:21:4c:40:4c:fc:de:ab:5c:37:1a:42:ba:0b:
21:8b:cd:a6:b7:73:b6:d1:bc:f9:67:b5:9f:3b:0c:
2d:7f:00:61:8a:27:14:3e:f5:53:13:d8:de:d1:ef:
1a:ba:49:bf:dc:9c:f0:e2:31:0b:44:7b:60:9d:0f:
5d:1b:37:90:a6:77:cc:2d:67:32:7e:87:14:86:fa:
53:36:a0:12:4c:80:d2:13:3b:e1:2c:35:34:e1:65:
5d:0a:22:12:ad:9d:a6:bd:22:c3:2c:23:c1:e9:cd:
ee:89:e4:12:42:fd:ba:10:c1:31:cf:55:eb:c4:c8:
d5:4a:18:8d:bc:a3:af:22:d9:bb:7d:1c:cd:6f:8b:
6c:81:c9:44:eb:03:14:9c:9a:90:85:5e:49:96:b4:
0c:98:83:c0:88:7a:e7:de:25:34:cb:8b:d9:c8:22:
e2:7e:83:2d:b7:c9:54:82:e2:f1:c3:9f:ce:69:46:
66:67:02:d2:5d:83:f6:23:09:7f:80:04:89:dc:c4:
fd:7c:c3:24:c4:ac:a6:e7:e3:9a:ae:01:c1:35:81:
30:01:cb:74:cb:0b:d2:19:60:4d:35:63:47:ac:0d:
de:ef:b8:3e:be:7b:f0:91:1a:58:3c:a3:92:eb:39:
9f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E2:64:E8:8C:E8:A1:5E:3F:F1:DA:E1:B2:3E:6A:94:2E:90:2D:E3
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/3-Jk6IzooV4_8drhsj5qlC6QLeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.220.0/24
109.122.40.0/24
109.122.46.0/24
Signature Algorithm: sha256WithRSAEncryption
53:a7:f2:75:df:87:06:01:c4:bf:bd:46:61:25:88:31:40:e7:
ad:fd:7d:83:76:51:b3:3b:0d:54:da:59:10:f9:1a:1b:80:5c:
90:6a:4c:02:82:27:a7:56:27:82:54:68:7a:76:79:61:93:09:
9d:7d:73:60:70:12:d3:5c:f2:f2:33:0b:38:9f:25:9c:a8:89:
38:8b:6d:0c:ec:ea:f3:fc:f4:16:20:83:06:52:5c:18:75:f1:
ab:36:e3:1c:e6:5b:e2:24:55:ca:31:6c:fd:12:09:3c:d2:76:
31:b0:3a:bc:d5:7b:6f:08:78:9c:1a:d2:a3:c6:69:4e:96:48:
9a:2c:e2:8b:92:81:c2:ae:e6:39:91:27:87:4c:64:e3:56:18:
49:03:f0:41:4f:5d:fe:1c:27:1f:0f:b2:ad:b5:e7:14:5b:6c:
03:2b:c8:e4:df:26:5b:48:0e:37:1e:f5:76:49:c6:2d:7f:64:
ce:4e:ea:a5:6d:3c:59:61:2e:7f:a3:f3:7e:31:eb:3c:0b:d7:
ec:38:de:42:54:64:79:0d:74:f7:22:d1:13:8a:b6:c7:3a:7e:
73:04:58:5f:fd:52:4d:e5:0c:c1:8b:53:e4:35:4a:a4:6a:ad:
a1:ea:63:fb:f8:86:2a:af:59:bf:dc:95:b2:98:50:5d:92:0a:
90:69:36:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:05 2024 by rpki-client on console-ams.rpki-client.org