Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/9oyeC2OnkrgS6iGT9zrInu2-Q-A.roa
File: 9oyeC2OnkrgS6iGT9zrInu2-Q-A.roa (raw, json)
Hash identifier: bJw7nUtFRNUk675qZc8lNwlbGVkZ4MgwyA6sNhYaRac=
Subject key identifier: F6:8C:9E:0B:63:A7:92:B8:12:EA:21:93:F7:3A:C8:9E:ED:BE:43:E0
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0188B80DAB5AAFA721C56CFF758A4619B2AF
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/9oyeC2OnkrgS6iGT9zrInu2-Q-A.roa
Signing time: Wed 14 Jun 2023 03:58:03 +0000
ROA not before: Wed 14 Jun 2023 03:58:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 135752
IP address blocks: 89.251.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 09 Jul 2023 04:39:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b8:0d:ab:5a:af:a7:21:c5:6c:ff:75:8a:46:19:b2:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jun 14 03:58:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f68c9e0b63a792b812ea2193f73ac89eedbe43e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2b:69:21:f7:88:74:ca:a4:f3:4e:fe:58:ee:
41:a0:33:d1:44:03:fc:58:8b:67:43:35:04:58:f6:
42:d6:a5:27:db:8f:ab:6f:26:3f:17:a4:7b:ab:9e:
90:65:3f:e6:75:1e:35:1e:61:d6:45:2d:3a:b9:69:
ff:c2:c3:58:9e:67:60:0c:f3:83:56:65:4a:85:58:
0d:32:0b:48:4d:60:21:22:03:75:08:80:af:81:9c:
ca:d6:bf:3d:0a:44:88:4b:ac:b2:9d:8a:c5:00:48:
ae:a0:23:a8:cc:81:7f:18:b9:4b:17:96:5b:88:84:
c7:ad:31:16:29:6f:28:fc:b5:8b:08:26:6e:d9:a5:
5a:26:bf:7e:2e:b9:df:1f:0b:22:6b:05:e5:bd:f9:
d8:fe:9d:00:8f:18:f1:94:7d:bd:6c:e6:27:a9:8d:
6d:a4:26:b3:eb:b7:70:51:8d:fd:f0:6f:56:6c:1a:
cc:ed:cb:c1:df:99:6a:09:2e:df:49:4c:e4:02:49:
76:72:ac:a1:a3:37:81:31:68:81:4f:2b:c9:4c:81:
68:85:e3:3d:5b:63:c8:3d:b9:20:d4:1b:69:29:3b:
c2:39:d8:1a:d9:4b:18:a5:3e:a5:8a:17:e7:50:d9:
b2:0e:90:00:0a:81:5c:db:0e:9e:47:27:24:35:ef:
e5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:8C:9E:0B:63:A7:92:B8:12:EA:21:93:F7:3A:C8:9E:ED:BE:43:E0
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/9oyeC2OnkrgS6iGT9zrInu2-Q-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.21.0/24
Signature Algorithm: sha256WithRSAEncryption
69:84:d9:b5:ed:61:fd:46:2a:6d:2f:90:a7:76:6a:d7:3f:9e:
37:11:7a:b8:07:a3:c6:05:47:b8:38:fc:c6:b8:c4:96:eb:0d:
b9:d2:76:49:f3:58:85:65:54:fa:ef:a5:6f:7c:fa:05:d7:d3:
06:a6:ec:4b:6d:2b:e0:6a:06:a5:bc:13:50:d9:85:18:83:27:
3a:4f:ac:fc:4c:8d:a5:ff:1a:81:9f:f3:8a:4a:db:ae:1b:55:
4c:64:ea:75:6e:0c:8c:56:35:f2:d9:48:f0:32:7c:d4:75:e3:
80:e2:cf:ad:78:3c:72:2a:b8:8c:17:1c:b7:6d:1b:4e:22:89:
0c:eb:dd:a9:c5:2f:b1:9e:c6:85:c4:cb:14:2c:48:a9:48:19:
e3:6f:d4:eb:2d:5f:c5:2f:33:84:db:8a:1b:f0:6f:8b:03:62:
4c:0d:7f:13:34:4c:c6:32:88:88:cf:2e:6e:6a:f5:ca:8d:0b:
5e:f3:2b:5a:90:10:ba:58:e9:8e:68:2a:2a:62:e8:bf:d6:14:
16:39:f5:5a:48:73:ef:f2:77:0e:fe:37:ee:81:50:61:0e:0e:
2d:a4:95:0d:e0:2e:96:48:74:a8:ce:6e:ef:c8:e2:57:c7:24:
3a:0c:59:29:61:83:ab:a4:4c:31:2a:b6:37:92:11:0c:1e:b6:
61:5c:48:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:36 2024 by rpki-client on console-fra.rpki-client.org