Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/4RcAoGFf9GoK4GhjIinLpQ7UbCs.roa
File: 4RcAoGFf9GoK4GhjIinLpQ7UbCs.roa (raw, json)
Hash identifier: crjYEjYmQ7Nkg/fTceJqjh3yFNHg4byMSzEsAPPY3ak=
Subject key identifier: E1:17:00:A0:61:5F:F4:6A:0A:E0:68:63:22:29:CB:A5:0E:D4:6C:2B
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0193CC46A6D71CE10B887EEEAD5C9BD1ACDD
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/4RcAoGFf9GoK4GhjIinLpQ7UbCs.roa
Signing time: Sun 15 Dec 2024 21:43:22 +0000
ROA not before: Sun 15 Dec 2024 21:43:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 89.251.26.0/24 maxlen: 24
109.122.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Dec 2024 14:37:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:cc:46:a6:d7:1c:e1:0b:88:7e:ee:ad:5c:9b:d1:ac:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Dec 15 21:43:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e11700a0615ff46a0ae068632229cba50ed46c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a2:c4:00:42:e9:98:9d:18:77:19:ca:7c:d3:
48:76:fc:f9:cc:d5:2a:5b:95:ff:95:bf:7a:27:6d:
45:4b:f5:ae:2b:25:e4:58:d6:33:f9:42:46:fa:b1:
46:8a:75:ba:bd:71:71:b1:07:4d:97:fd:fa:16:b8:
19:63:4a:7e:0c:e4:01:c8:10:23:c8:fe:50:dc:c0:
9d:2b:80:7e:a4:74:fc:6e:9a:8f:49:f5:14:ba:00:
b0:91:6b:3f:66:3c:23:fb:92:73:1a:05:06:9c:b5:
31:b9:3b:d2:20:91:56:8e:52:ac:2f:a7:a2:fa:4d:
c4:01:f6:e3:d9:a1:a9:7f:51:1d:39:56:7f:58:d7:
a1:37:a1:24:cd:13:d5:88:ec:ca:44:4f:89:3f:63:
b1:dc:e2:38:a2:8d:9d:e5:49:1f:d5:13:61:4a:93:
7e:f0:db:37:12:96:bf:e3:16:01:6e:47:d4:54:e9:
7f:9a:04:91:77:99:8c:24:ba:37:6e:5a:c9:db:f3:
31:73:87:4e:75:08:c9:83:16:a4:9d:b0:ef:ad:b7:
cc:db:3a:8c:09:07:38:36:53:86:e2:55:aa:c0:67:
d1:c9:76:27:f7:a3:c3:2c:f2:ba:ab:9e:2e:d2:16:
0d:99:64:9a:5e:65:e8:01:db:f2:97:58:41:f3:4d:
f1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:17:00:A0:61:5F:F4:6A:0A:E0:68:63:22:29:CB:A5:0E:D4:6C:2B
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/4RcAoGFf9GoK4GhjIinLpQ7UbCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.26.0/24
109.122.46.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:1a:65:5f:39:27:85:7a:f6:14:b6:71:5b:ce:03:2c:64:73:
04:66:e6:ca:db:bf:5c:76:2d:58:61:dc:07:36:41:85:a7:04:
00:91:60:49:99:9b:b1:70:81:75:9e:fd:25:61:6d:ca:39:a1:
de:60:3d:b1:a8:03:59:84:53:b6:9a:7e:36:5b:44:36:3a:26:
aa:b7:2d:44:f7:37:cd:f7:d7:c8:11:f1:5b:44:24:e5:d5:5c:
c5:7b:23:91:6c:f1:1f:24:d7:ed:18:7d:a2:c3:bc:18:aa:7a:
44:97:b9:46:6a:1e:c9:bb:34:c3:ea:33:da:f0:09:e3:df:19:
10:71:fd:e3:95:2b:61:24:32:12:a9:ad:36:4d:ad:eb:d0:01:
10:ff:6a:e6:8c:a4:f9:d9:2e:ee:73:06:d1:17:9b:16:c7:0f:
b2:a4:ef:b0:58:24:d1:ea:65:6d:9d:c4:85:96:de:bf:00:d5:
1d:52:f5:83:1d:99:8d:8c:7b:e0:4e:28:fc:aa:84:3a:66:a1:
26:99:93:fd:cc:e6:2f:ae:24:9a:85:9e:1b:3a:4f:e4:6a:18:
8c:86:eb:57:4b:1f:78:7a:74:05:0f:4a:11:60:b4:46:50:5c:
82:fb:a1:db:c0:f9:f4:4c:d3:e7:7c:d2:7f:eb:2e:b8:c8:74:
bb:84:e7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 21:31:25 2025 by rpki-client