Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/BlLrzHNwRvnpOWe9bdItdlr8jg8.roa
File: BlLrzHNwRvnpOWe9bdItdlr8jg8.roa (raw, json)
Hash identifier: Vc36pqiBmCnt1FFHMoatFVN8ESdxjECHp+QfjGvP3DY=
Subject key identifier: 06:52:EB:CC:73:70:46:F9:E9:39:67:BD:6D:D2:2D:76:5A:FC:8E:0F
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018C717C62A4A71FC468180C3D9577D5A863
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/BlLrzHNwRvnpOWe9bdItdlr8jg8.roa
Signing time: Sat 16 Dec 2023 07:17:06 +0000
ROA not before: Sat 16 Dec 2023 07:17:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 146.19.56.0/24 maxlen: 24
91.200.221.0/24 maxlen: 24
109.122.44.0/24 maxlen: 24
109.122.40.0/24 maxlen: 24
89.251.18.0/24 maxlen: 24
89.251.23.0/24 maxlen: 24
89.251.22.0/24 maxlen: 24
89.251.24.0/24 maxlen: 24
89.251.20.0/24 maxlen: 24
89.251.29.0/24 maxlen: 24
89.251.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Dec 2023 06:38:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:71:7c:62:a4:a7:1f:c4:68:18:0c:3d:95:77:d5:a8:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Dec 16 07:17:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0652ebcc737046f9e93967bd6dd22d765afc8e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:20:94:53:92:b3:ff:2f:84:ca:40:52:97:b9:
a6:37:03:3f:ff:66:b1:d1:33:85:72:1c:ab:62:7d:
3d:61:ea:70:c8:cb:97:51:90:61:33:38:32:3d:60:
c6:cf:85:25:a5:8d:5a:48:97:cb:55:46:a4:65:df:
cb:c0:72:37:a8:ff:3a:03:74:4b:65:a3:81:aa:d9:
be:02:4b:4b:94:70:08:a4:66:12:aa:12:77:a8:b2:
b9:aa:e7:7d:e2:4e:10:24:32:d0:a9:8f:29:b1:3d:
dd:5c:64:cf:ff:5a:40:23:a8:b0:8b:41:24:94:b5:
bc:a9:83:e7:d6:54:b0:32:3f:58:7e:4e:c5:7e:ac:
a3:04:53:d4:42:2e:2a:7a:b6:78:a2:23:3a:71:74:
23:67:3c:88:14:36:9f:1e:ad:16:2d:e1:08:6d:a3:
ba:a7:24:71:66:ff:d9:71:a4:7b:dd:2c:f2:4c:f0:
34:27:6e:e0:c1:bc:ab:79:2b:73:44:e5:56:6b:c9:
3f:c9:9d:f7:e6:01:58:3f:2f:a3:94:4d:40:31:c2:
33:bc:3c:44:d6:c6:a0:f7:ae:13:a4:b4:bb:0b:d9:
a5:40:d9:61:e5:ae:d6:95:51:be:44:56:e8:7e:05:
01:90:ed:63:36:0b:87:7f:db:02:3a:80:42:38:ec:
8f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:52:EB:CC:73:70:46:F9:E9:39:67:BD:6D:D2:2D:76:5A:FC:8E:0F
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/BlLrzHNwRvnpOWe9bdItdlr8jg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.18.0/24
89.251.20.0/24
89.251.22.0-89.251.24.255
89.251.29.0/24
89.251.31.0/24
91.200.221.0/24
109.122.40.0/24
109.122.44.0/24
146.19.56.0/24
Signature Algorithm: sha256WithRSAEncryption
44:cf:8f:c5:77:7e:18:f1:05:d6:31:89:a6:73:e6:15:cf:4e:
d9:59:8f:ea:d6:b1:23:e2:26:ae:6d:e6:19:0d:67:9b:bc:64:
2e:3b:35:de:74:d2:51:d9:0b:a3:9d:ae:8a:6e:6f:f1:4b:2b:
82:19:32:f0:e6:d1:06:c8:03:61:4b:95:da:41:a8:42:8f:2b:
03:41:5f:48:4a:87:6c:65:03:0a:6b:54:02:62:2f:c5:d7:15:
3b:c5:8c:61:69:d3:30:f5:1c:76:9d:ef:c1:70:cc:87:aa:06:
e4:2a:c8:39:b9:94:4e:ad:30:85:4f:e4:d6:4a:79:20:94:a7:
b3:db:c0:24:f6:55:a5:8b:a8:d2:10:62:37:bc:61:2d:4b:c1:
b3:5f:d1:aa:aa:5c:be:67:7c:7f:4a:46:38:c1:22:9d:82:96:
0c:7d:ec:c1:51:16:9f:1e:8a:dc:08:8c:29:d9:1e:56:7d:b9:
48:00:aa:7f:30:e5:34:13:b5:a6:ec:8c:7a:66:67:eb:32:62:
b2:e1:0f:7c:e9:6d:4f:5a:b0:96:2c:37:68:83:7c:cf:e5:b1:
6c:5c:7b:28:e2:c5:aa:0e:82:26:a7:5c:f7:8a:3a:1a:96:62:
7f:8a:8f:e4:88:00:94:1d:67:5b:09:5a:a1:fd:70:24:a6:f6:
d0:88:fc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:06 2024 by rpki-client on console-ams.rpki-client.org