Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/E9S3zbWXbRzlWPnjdPcwGAWslMY.roa
File: E9S3zbWXbRzlWPnjdPcwGAWslMY.roa (raw, json)
Hash identifier: b41xyTSM3Bli6qw47TpAVErO1jV/sixWo7Iuz5MJxTs=
Subject key identifier: 13:D4:B7:CD:B5:97:6D:1C:E5:58:F9:E3:74:F7:30:18:05:AC:94:C6
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018B1E493416273AF1BAE8F320EE2AD89DF9
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/E9S3zbWXbRzlWPnjdPcwGAWslMY.roa
Signing time: Wed 11 Oct 2023 10:29:55 +0000
ROA not before: Wed 11 Oct 2023 10:29:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20422
IP address blocks: 89.251.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1e:49:34:16:27:3a:f1:ba:e8:f3:20:ee:2a:d8:9d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Oct 11 10:29:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13d4b7cdb5976d1ce558f9e374f7301805ac94c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9e:97:a9:1a:82:53:c8:90:ec:d7:f5:f2:7b:
fa:0e:8e:62:67:60:14:25:52:36:fc:a7:89:d1:0e:
c8:ef:aa:0a:1c:4c:98:b5:63:25:de:18:17:75:d9:
06:09:11:8e:b8:29:c4:e3:56:47:93:a8:47:ac:aa:
f9:56:fa:dc:0f:19:0f:b4:5e:1d:7f:e6:46:90:2d:
e4:39:d2:18:14:a9:b3:86:2e:b3:46:8b:dc:04:de:
7d:42:28:11:ba:d5:62:3b:0a:e6:66:f6:bc:f0:6c:
6d:5e:0a:be:0c:81:6c:bd:51:dc:0d:ec:de:6b:60:
89:26:eb:ff:8f:68:dc:b7:0f:87:13:8c:a7:82:a7:
e9:02:16:b0:56:a1:da:e3:f5:df:24:54:f4:45:c3:
28:39:ed:30:d7:0f:1d:87:83:b1:46:f5:7e:47:4c:
89:dd:f8:fc:c2:02:6b:4b:76:84:cb:ed:71:7b:46:
02:12:9e:09:df:0e:2e:13:ed:83:3a:13:a6:57:10:
cc:17:98:a0:ca:ad:df:88:6c:ab:4b:0c:20:18:bc:
dc:9f:95:b0:c1:a4:1f:b5:27:34:36:e5:3a:99:a0:
0f:76:51:b1:24:91:fb:89:d2:c1:83:bc:72:3e:20:
ed:27:81:17:52:0c:0a:18:12:13:3c:cd:85:be:da:
cf:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D4:B7:CD:B5:97:6D:1C:E5:58:F9:E3:74:F7:30:18:05:AC:94:C6
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/E9S3zbWXbRzlWPnjdPcwGAWslMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.28.0/24
Signature Algorithm: sha256WithRSAEncryption
28:86:c2:c0:ba:62:c3:3a:be:94:59:4d:a9:f4:48:af:f8:85:
7b:2f:ef:eb:b6:8f:e5:39:44:df:3b:a4:fe:60:79:ed:0f:a0:
01:73:3f:70:97:1a:e3:4b:a9:66:b5:9d:df:ea:34:9f:67:49:
98:0b:7c:b0:42:08:b2:b7:99:61:21:d6:43:d5:da:58:74:fa:
2a:28:7f:6f:d0:ce:c8:3a:e3:9f:1d:fd:ce:bd:1d:d4:41:bc:
3f:4c:38:b5:96:30:50:51:ca:93:ab:0f:1d:09:f5:00:b0:2e:
08:63:c9:ed:aa:c0:ab:47:b1:7d:4c:85:89:92:62:18:d5:6f:
94:8e:aa:07:3a:4e:e3:bf:26:d2:17:c9:62:bc:fe:45:5b:ae:
78:cf:59:cf:e4:7b:10:f4:91:d3:d3:f5:c7:39:77:3c:75:e5:
9a:e4:c9:86:b7:5c:e4:c8:98:54:e7:bf:cd:ee:9d:a6:f2:a7:
40:4c:ab:51:85:07:d4:f1:fb:1e:de:18:be:06:29:59:02:b7:
72:b9:f1:c6:14:0d:df:66:81:85:f5:90:5e:df:e1:57:12:ee:
54:10:b7:fc:e9:e9:3f:e9:d0:1b:41:87:57:1b:b6:cd:4c:b6:
27:74:f8:a5:43:20:b6:1b:e8:07:9f:52:27:e9:a1:2e:8d:55:
6c:fb:d5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:36 2024 by rpki-client on console-fra.rpki-client.org