Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/787r_4FkxiA-qKfjmUI5lnWrTdQ.roa
File: 787r_4FkxiA-qKfjmUI5lnWrTdQ.roa (raw, json)
Hash identifier: byKZYRO9P2BiIQ2uASYiomIbzXJMkhdV26biC5X90QU=
Subject key identifier: EF:CE:EB:FF:81:64:C6:20:3E:A8:A7:E3:99:42:39:96:75:AB:4D:D4
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018705EC5958C99A3E476F5EB144FC540375
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/787r_4FkxiA-qKfjmUI5lnWrTdQ.roa
Signing time: Tue 21 Mar 2023 20:46:28 +0000
ROA not before: Tue 21 Mar 2023 20:46:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7046
IP address blocks: 89.251.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 Mar 2023 19:24:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:05:ec:59:58:c9:9a:3e:47:6f:5e:b1:44:fc:54:03:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Mar 21 20:46:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=efceebff8164c6203ea8a7e39942399675ab4dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:33:6b:39:28:c7:db:cf:94:ea:b8:a2:5b:bd:
c5:32:6c:ce:9e:76:f6:b9:63:41:0b:cd:18:99:31:
ef:cb:51:8f:21:ae:b8:98:05:0b:fc:19:76:5e:8a:
ed:e0:a5:f5:f6:98:dc:76:8d:15:b5:d7:b8:61:d7:
64:9b:30:3e:b6:01:41:a2:15:e4:72:9e:2e:5e:67:
86:d5:ab:78:98:d1:fe:e6:e3:60:4d:44:c4:70:f6:
58:b0:26:03:2a:e4:00:0b:f7:b9:5f:02:07:8f:86:
d6:cb:6a:86:d1:6f:4d:ea:86:d8:85:a9:de:27:8a:
97:64:d0:65:1f:ef:22:9c:15:c6:0e:9e:e0:d1:a9:
a2:8b:f8:1e:3f:44:98:5a:48:d9:15:00:33:e1:e6:
fa:cf:9a:07:bd:d5:cc:92:bd:6b:9f:26:d0:50:5b:
14:b9:77:14:3d:78:f3:34:dc:62:ca:f0:e6:20:fa:
0c:73:15:22:bf:24:f2:39:da:32:45:b7:2e:7f:b1:
2a:7a:a7:3d:34:b6:88:c2:0b:8c:b0:7a:4b:a0:cd:
55:d4:c6:c3:ab:32:dc:04:df:14:98:03:15:db:54:
41:1e:de:64:68:76:1d:ee:bb:15:c2:10:26:1c:20:
b4:bc:ca:16:cd:69:ff:36:f6:e1:72:c5:d2:b1:07:
b3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:CE:EB:FF:81:64:C6:20:3E:A8:A7:E3:99:42:39:96:75:AB:4D:D4
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/787r_4FkxiA-qKfjmUI5lnWrTdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.24.0/24
Signature Algorithm: sha256WithRSAEncryption
44:71:5d:ef:51:fb:d0:79:02:df:b5:7f:34:51:20:39:84:7b:
67:3f:5c:bc:e0:fc:2a:f9:df:33:44:b2:3e:b9:16:aa:b5:ae:
ad:6f:29:6c:b6:17:b3:24:e7:ea:e9:a4:9a:ad:d8:91:71:13:
24:4b:d6:0e:94:3a:b7:0b:18:92:54:f0:23:df:2c:3d:67:fe:
5c:28:7b:09:0f:b6:7d:3f:17:0b:f8:85:12:17:96:e4:82:aa:
ab:4c:93:a8:4e:0d:5a:ee:cc:2e:d4:f3:b8:4e:db:0a:40:cb:
d1:71:35:52:85:cc:9d:a0:75:4c:96:f5:89:d5:0e:94:50:15:
bc:bb:7d:c1:78:bd:b4:a3:3e:ee:93:45:ed:2d:f9:64:d0:60:
b2:33:eb:11:93:0d:8c:c2:c1:34:45:1d:01:96:8a:1d:77:2a:
79:59:fc:fe:ba:40:33:87:6a:af:ec:1d:f2:4b:25:e3:59:8e:
0a:40:15:e9:6e:be:ff:3f:0c:7f:53:dd:2e:87:e7:d8:4b:3a:
99:44:3f:8a:a1:45:6b:86:33:6c:e4:78:df:8b:f2:84:74:2c:
08:3e:c8:d9:b0:61:22:28:ac:93:1d:45:5f:83:40:2c:0f:4a:
e8:4e:f1:3d:0f:30:c2:b7:2e:d3:e7:a1:c3:10:e3:61:bc:37:
e6:d8:fb:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:06 2024 by rpki-client on console-ams.rpki-client.org