Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/B_3UjXoGYy3ygQDDs1mTrEi3hX0.roa
File: B_3UjXoGYy3ygQDDs1mTrEi3hX0.roa (raw, json)
Hash identifier: cflynhYTs9r2x5NYCf1GDO/bWgSkCG9spMoS0mahGYM=
Subject key identifier: 07:FD:D4:8D:7A:06:63:2D:F2:81:00:C3:B3:59:93:AC:48:B7:85:7D
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018DB3D783CBCC8B19CC1D7176D3E464DBC5
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/B_3UjXoGYy3ygQDDs1mTrEi3hX0.roa
Signing time: Fri 16 Feb 2024 21:34:22 +0000
ROA not before: Fri 16 Feb 2024 21:34:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8100
IP address blocks: 89.251.28.0/24 maxlen: 24
109.122.42.0/24 maxlen: 24
193.93.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Mar 2024 20:49:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b3:d7:83:cb:cc:8b:19:cc:1d:71:76:d3:e4:64:db:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Feb 16 21:34:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07fdd48d7a06632df28100c3b35993ac48b7857d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:af:24:c6:b0:82:ff:96:ac:da:86:31:72:74:
5f:d8:c0:55:8b:44:eb:67:06:14:be:d7:dc:8a:d2:
f5:cb:d0:2d:87:ad:3e:2e:dc:f2:47:4e:74:7f:20:
5d:ca:0a:6f:f3:77:2b:fb:cf:87:e0:01:8b:0f:42:
2b:8b:4f:d9:c0:97:f3:16:a5:b0:cc:39:24:d6:c8:
99:f5:28:58:77:4e:52:6f:db:1b:99:17:2a:87:c9:
ee:50:3a:3d:ef:d3:5e:6a:c0:8a:9d:18:d2:c7:5c:
a4:1a:d6:bb:4b:de:04:8d:40:b6:a9:6b:21:0f:cc:
1b:83:0a:d9:53:9c:73:1a:83:71:d7:68:af:79:4b:
20:ef:c4:70:da:06:5b:70:af:cc:bd:16:21:7a:7e:
cd:94:ae:a2:d6:28:df:8d:fb:2c:de:9f:ab:1c:9e:
ca:39:f9:f8:e7:b5:be:c3:8d:87:02:32:04:e6:59:
7a:b7:40:a4:92:39:89:a3:dc:f7:4b:cc:c4:18:57:
4a:cd:01:11:12:d3:7a:a4:44:9d:21:18:19:a8:6a:
b8:85:14:54:0d:5d:37:b7:c6:b9:31:bb:a1:aa:1e:
89:19:52:b6:f0:4c:a5:1e:06:9a:50:41:d7:b1:64:
a2:95:5b:0b:35:cc:5e:14:3b:0a:fc:bd:d0:c0:d4:
90:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FD:D4:8D:7A:06:63:2D:F2:81:00:C3:B3:59:93:AC:48:B7:85:7D
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/B_3UjXoGYy3ygQDDs1mTrEi3hX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.28.0/24
109.122.42.0/24
193.93.55.0/24
Signature Algorithm: sha256WithRSAEncryption
74:8e:bf:77:b0:58:7b:c6:48:40:e1:38:39:7b:01:69:db:84:
6c:20:5a:2b:53:de:d3:50:de:a6:d3:ac:fa:53:d8:98:36:96:
1c:f1:bb:12:76:e4:42:da:c0:c7:12:bf:c6:4e:f2:85:ce:10:
1c:f0:e6:7a:2c:f9:a7:4a:bc:f0:1b:25:16:b0:95:ab:a5:e7:
98:29:1a:fd:be:4a:4e:d9:62:d7:54:a1:3b:6d:27:18:cc:5e:
be:6f:13:17:eb:29:4c:f8:56:d7:27:b3:b6:98:ec:6e:a5:fd:
79:32:3b:ff:d2:8b:13:e2:2b:1c:c8:6a:63:a8:ae:5b:b9:42:
fd:8a:44:5f:84:df:3e:e4:84:39:a5:5b:67:d1:a1:6d:9c:72:
72:92:77:0c:cb:3b:98:1e:20:21:b0:f9:95:15:3c:1e:ea:aa:
f6:fc:7f:88:68:45:16:6f:26:fe:a2:10:ae:12:dc:b5:e7:13:
f7:c1:0f:4b:46:d5:4d:ae:81:f6:24:dc:eb:e5:49:5d:8e:b2:
cf:0d:c1:ef:71:8d:fb:3a:86:ca:ef:9f:1e:1f:05:10:d8:4d:
27:9b:b4:8e:84:3e:8c:82:2f:4a:dc:96:fd:53:84:c7:b7:9b:
0c:f7:7f:cb:37:a9:ab:5c:9d:b4:9d:2e:fc:e0:39:ab:ef:c3:
df:e1:de:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:06 2024 by rpki-client on console-ams.rpki-client.org