Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/BY8RRbJr8Yl1zUXB_8MZnOmrwEM.roa
File: BY8RRbJr8Yl1zUXB_8MZnOmrwEM.roa (raw, json)
Hash identifier: Oapih2/6vRrq2C3ywXUiYpuNghrfZFFhzFeGv29Zp58=
Subject key identifier: 05:8F:11:45:B2:6B:F1:89:75:CD:45:C1:FF:C3:19:9C:E9:AB:C0:43
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0185E817D2011253247F83D590EFF59EF1F0
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/BY8RRbJr8Yl1zUXB_8MZnOmrwEM.roa
Signing time: Wed 25 Jan 2023 08:42:33 +0000
ROA not before: Wed 25 Jan 2023 08:42:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34661
IP address blocks: 89.251.16.0/22 maxlen: 22
89.251.28.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 29 Jun 2023 09:41:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e8:17:d2:01:12:53:24:7f:83:d5:90:ef:f5:9e:f1:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 25 08:42:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=058f1145b26bf18975cd45c1ffc3199ce9abc043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b7:79:67:56:76:1f:14:d1:be:ae:06:57:30:
70:66:8b:1e:c7:d7:32:00:76:67:4e:e3:94:3e:02:
47:8b:fc:3d:91:c6:10:d3:61:8c:3f:57:28:a2:2f:
24:c0:19:6b:38:7f:a8:19:19:76:2d:86:8f:10:35:
bb:56:b0:03:db:87:f0:43:03:2e:d9:1a:6f:4d:c1:
cd:48:50:de:ca:44:87:12:a8:50:26:9c:40:5e:d3:
45:a6:3f:94:67:a4:fe:2b:58:45:ee:15:93:76:c1:
c8:ca:69:53:79:f3:f6:df:c9:f6:d8:82:56:0b:15:
4d:2b:f3:eb:b1:89:d9:58:98:05:e4:b2:be:29:90:
90:96:92:cf:19:9a:95:84:85:89:16:6e:92:ac:d0:
9f:5d:9e:b4:8a:9c:ae:c6:d4:82:d1:7e:13:1d:78:
93:d7:74:bd:dc:62:e3:3c:ea:e1:fc:74:8d:41:7d:
de:b9:bb:96:45:02:4e:fd:8b:b4:35:91:bd:61:bc:
14:18:1e:21:d0:6d:17:51:f5:fd:e9:12:97:a7:03:
99:64:63:cf:fe:d3:03:81:8e:09:7b:78:e0:4c:f5:
15:f3:1c:45:d6:32:6f:fa:9d:a2:eb:9d:69:16:2d:
21:9d:38:eb:1a:c1:4f:1c:51:ce:d8:b6:32:50:49:
4d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:8F:11:45:B2:6B:F1:89:75:CD:45:C1:FF:C3:19:9C:E9:AB:C0:43
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/BY8RRbJr8Yl1zUXB_8MZnOmrwEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.16.0/22
89.251.28.0/22
Signature Algorithm: sha256WithRSAEncryption
81:c9:2c:3d:7e:67:5b:94:aa:cd:d5:b4:51:c2:8f:52:35:72:
d4:6f:96:7b:29:8d:c6:e3:ef:28:22:7a:e0:df:7a:de:64:ba:
65:3e:6f:1b:c8:36:96:62:0f:38:a1:bc:15:3d:21:09:b1:01:
62:22:a3:ba:a3:89:ad:b6:2b:77:93:ea:a4:b2:90:fe:6c:d7:
29:2f:1c:44:c3:0f:36:7e:98:c1:11:cd:e9:f1:89:ee:51:d3:
c0:86:d9:12:f7:fe:24:4f:cd:e0:00:94:fc:d2:2e:0f:f3:c1:
20:ff:cb:ca:39:0d:4d:2a:ec:00:f5:aa:75:2e:6a:83:d1:a0:
f3:b0:5e:48:3b:9b:4b:50:1e:56:25:bf:58:ae:bb:40:d5:65:
9d:f1:9c:b6:35:5e:2e:32:8a:a5:47:13:82:98:93:96:9b:e2:
8a:4f:51:9b:ca:d3:bb:97:4b:9e:6f:78:83:89:96:be:22:07:
df:ff:f6:1e:3b:cf:a7:9e:37:f9:9e:ee:05:cd:25:dd:75:ed:
dc:d3:fd:a0:e5:46:47:3e:97:cd:7a:f4:21:f7:59:91:86:09:
4c:de:88:f1:a9:0e:cb:42:91:73:08:ec:a3:e0:b1:a7:bf:94:
e9:84:61:1a:02:48:02:4e:86:71:06:fb:45:b6:4b:d7:70:49:
fa:a2:f0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:06 2024 by rpki-client on console-ams.rpki-client.org