Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/9oubAFZncYecVnOKGptih-PTKZU.roa
File: 9oubAFZncYecVnOKGptih-PTKZU.roa (raw, json)
Hash identifier: UGK3YHjsiRN2KNCrQeEjY2NG9NxVuPSN/17hxvlSIvk=
Subject key identifier: F6:8B:9B:00:56:67:71:87:9C:56:73:8A:1A:9B:62:87:E3:D3:29:95
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01890BFA93678668B882458282CF8C8BCBB0
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/9oubAFZncYecVnOKGptih-PTKZU.roa
Signing time: Fri 30 Jun 2023 11:05:18 +0000
ROA not before: Fri 30 Jun 2023 11:05:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 89.251.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Aug 2023 11:39:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:0b:fa:93:67:86:68:b8:82:45:82:82:cf:8c:8b:cb:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jun 30 11:05:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f68b9b00566771879c56738a1a9b6287e3d32995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:01:ac:c5:bf:f5:d2:b2:ee:b0:74:e4:8b:7d:
9f:4a:e3:da:48:e0:65:02:6f:78:c3:d9:81:6a:1e:
55:ae:3a:35:14:32:d4:8e:13:6d:f7:f3:85:5e:24:
4e:61:b3:f0:ac:5d:80:7f:20:b7:a8:6e:34:00:2e:
26:83:9f:e8:df:51:0b:07:49:9f:89:e7:a5:7e:03:
bb:74:55:97:0f:29:3e:33:2e:4e:c5:78:4e:91:c8:
2c:55:c9:fb:89:83:95:33:a0:0f:47:e1:2f:96:1b:
ce:e4:15:6c:8c:bb:74:27:fe:43:b1:ef:50:3f:41:
1c:d7:26:15:7a:40:65:94:f0:35:c0:b3:51:5c:8c:
cf:f5:b8:88:7c:84:68:30:85:ab:8e:cd:cd:b7:3d:
14:b5:40:91:ce:83:c9:19:75:92:f8:40:53:37:0a:
31:8b:b4:64:c8:0c:71:9d:3d:e6:0f:39:93:1e:0d:
63:fb:f8:9c:77:44:d0:02:01:b3:40:57:96:8a:b2:
11:b8:aa:cf:34:00:f1:94:62:65:69:9e:71:1b:7d:
b4:08:c3:db:19:85:68:f3:ce:ac:a0:54:00:92:84:
a8:75:43:40:5f:f9:e7:7e:1e:3d:ef:e1:20:72:ef:
7e:24:50:87:80:5a:91:43:99:a8:1b:0c:c5:83:73:
89:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:8B:9B:00:56:67:71:87:9C:56:73:8A:1A:9B:62:87:E3:D3:29:95
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/9oubAFZncYecVnOKGptih-PTKZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.28.0/24
Signature Algorithm: sha256WithRSAEncryption
01:a8:40:99:60:6c:02:e7:e9:51:ef:84:40:53:16:94:fe:7a:
70:f5:9c:46:c9:bb:05:5c:79:6c:e1:e3:ab:46:17:63:fc:3f:
c8:bd:a5:17:10:d9:f4:0c:6e:93:61:bb:7a:ab:bb:81:19:81:
95:39:e3:04:c0:ac:36:fc:63:ff:79:e0:3f:e0:65:b4:7e:9c:
3e:12:89:0d:08:27:45:c7:fe:14:2b:45:ce:4a:a5:9b:99:61:
e2:21:2b:83:25:2b:5a:8f:e3:f4:ba:fe:f7:1b:1e:0c:7b:86:
f1:4d:14:4a:1e:51:97:88:91:62:96:8d:c6:f4:90:75:d7:0d:
de:ae:bd:7e:df:f7:5f:d6:67:f7:e0:e8:95:26:15:df:46:4c:
3b:8b:8a:04:6d:78:9c:f7:0f:96:33:b6:5b:66:89:5a:51:71:
b6:cd:43:3a:b5:03:92:d2:48:7f:39:b0:b1:40:b2:0b:11:61:
ae:e3:03:2c:e7:a6:0b:4f:3c:db:e9:3c:bc:8a:2d:29:dc:5c:
83:c0:2e:b1:62:c3:aa:8a:3f:4e:fa:ce:7d:f2:3f:32:6a:51:
b5:93:b7:88:1c:a2:3e:b3:e6:43:3e:e5:49:10:a5:05:cb:2d:
d9:52:61:89:f2:c8:35:25:86:50:16:70:30:f9:5c:b4:4e:98:
f5:ac:c6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:36 2024 by rpki-client on console-fra.rpki-client.org