Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/9YqW4Y4qGc5zDpRWly97nqv8h8M.roa
File: 9YqW4Y4qGc5zDpRWly97nqv8h8M.roa (raw, json)
Hash identifier: Geqyka/wq3+PiJZm0iX1QI0Jd/93JP9HnJDM1HwbpJY=
Subject key identifier: F5:8A:96:E1:8E:2A:19:CE:73:0E:94:56:97:2F:7B:9E:AB:FC:87:C3
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0185EA8F883A0AD74787D53569102ABE00A4
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/9YqW4Y4qGc5zDpRWly97nqv8h8M.roa
Signing time: Wed 25 Jan 2023 20:12:33 +0000
ROA not before: Wed 25 Jan 2023 20:12:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 109.122.40.0/24 maxlen: 24
109.122.41.0/24 maxlen: 24
109.122.47.0/24 maxlen: 24
109.122.45.0/24 maxlen: 24
109.122.46.0/24 maxlen: 24
91.226.57.0/24 maxlen: 24
193.93.55.0/24 maxlen: 24
193.93.52.0/24 maxlen: 24
193.93.53.0/24 maxlen: 24
87.237.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Jan 2023 20:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ea:8f:88:3a:0a:d7:47:87:d5:35:69:10:2a:be:00:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 25 20:12:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f58a96e18e2a19ce730e9456972f7b9eabfc87c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c4:6e:1f:06:30:14:36:d5:46:f2:4e:99:60:
ba:e0:43:3d:e5:00:74:e9:9d:81:48:36:8d:27:de:
6d:61:13:f0:a5:b0:0a:03:e8:9f:ee:33:10:a4:db:
67:be:26:30:1a:bc:48:77:fc:3a:ea:c8:33:54:70:
ce:eb:e2:3a:14:9d:ce:f3:27:2a:09:c8:6f:b0:d8:
a2:91:3c:2b:27:1c:7f:82:4a:a6:40:30:39:bf:36:
ab:07:b4:b6:24:43:6e:ef:c0:1f:25:68:42:2a:e9:
0b:1d:b6:58:04:52:a0:e5:7f:f7:a9:3f:cf:d0:d8:
88:70:33:ac:01:d0:24:69:d4:a1:31:37:c2:8f:aa:
7b:dd:3b:23:78:22:17:91:fc:e2:1e:a7:93:7f:90:
0c:1c:ac:11:88:aa:a3:e1:62:f8:b0:f4:96:6b:98:
a2:9e:cc:b5:37:cf:01:05:b2:c3:73:9a:54:80:b0:
99:c8:77:00:60:c9:33:e4:99:68:e0:1b:ed:f5:33:
3f:8f:29:e0:0f:df:24:24:f3:28:f6:f7:3f:3e:be:
1e:98:be:59:ce:47:e5:79:43:2b:0b:04:b2:d6:ed:
ae:b5:bc:6a:cb:3f:27:81:d9:be:52:e9:a9:fe:f1:
1b:11:f5:5a:39:bb:27:4d:db:d1:56:de:22:d1:ca:
c6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:8A:96:E1:8E:2A:19:CE:73:0E:94:56:97:2F:7B:9E:AB:FC:87:C3
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/9YqW4Y4qGc5zDpRWly97nqv8h8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.167.0/24
91.226.57.0/24
109.122.40.0/23
109.122.45.0-109.122.47.255
193.93.52.0/23
193.93.55.0/24
Signature Algorithm: sha256WithRSAEncryption
31:02:ba:cd:57:ad:8b:50:47:83:e5:43:31:5b:b6:f2:da:cf:
b8:cc:81:86:0c:94:53:81:bb:08:dc:ed:66:5a:8e:5b:24:6b:
82:37:05:ad:d5:7a:e4:da:84:79:d1:6d:4b:80:4a:37:9e:28:
39:67:da:1c:4b:55:db:2a:aa:99:5d:b9:55:f4:3c:11:3c:41:
5e:e9:06:89:76:fb:17:f6:79:9c:5f:6f:11:a0:d5:3d:57:5f:
e7:db:f9:15:9e:44:ce:78:54:96:bb:1b:a4:51:cd:b8:07:3f:
bc:f3:72:a4:96:8a:c1:17:08:15:9a:7e:c2:0c:74:d1:96:09:
be:e5:11:64:23:cc:c4:90:7e:c3:f8:6b:bb:89:39:d3:63:ae:
95:d0:e0:a2:02:05:93:db:67:2d:f9:2a:ed:40:8a:c2:c0:2d:
73:4e:34:29:92:71:1a:11:86:6b:b7:27:30:c1:60:29:88:47:
c2:a1:d7:f5:ca:31:d5:c5:a9:84:cf:b3:d5:2b:8e:f4:3b:e4:
ee:e4:1d:5e:f4:d0:7d:6f:78:4c:a6:fb:19:f6:83:4a:0d:d1:
84:7b:b9:b6:41:07:83:9e:93:b0:7e:d3:6c:ff:e0:0f:8d:c0:
5a:18:47:04:cf:4a:bd:7d:dd:5b:67:3e:a4:1c:89:4e:50:0e:
86:28:72:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:06 2024 by rpki-client on console-ams.rpki-client.org