Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/EUXA4fQk0DU_PavS2OpLJQwKtgc.roa
File: EUXA4fQk0DU_PavS2OpLJQwKtgc.roa (raw, json)
Hash identifier: ldRhYxzgrX9E25UcgiBRa4FmblZnqYPB1q9ctCIztDc=
Subject key identifier: 11:45:C0:E1:F4:24:D0:35:3F:3D:AB:D2:D8:EA:4B:25:0C:0A:B6:07
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01875F32638B0748B399288DF5782BC94378
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/EUXA4fQk0DU_PavS2OpLJQwKtgc.roa
Signing time: Sat 08 Apr 2023 04:49:10 +0000
ROA not before: Sat 08 Apr 2023 04:49:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.251.24.0/24 maxlen: 24
89.251.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Apr 2023 04:24:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5f:32:63:8b:07:48:b3:99:28:8d:f5:78:2b:c9:43:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Apr 8 04:49:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1145c0e1f424d0353f3dabd2d8ea4b250c0ab607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:81:03:2b:94:a2:3a:b5:57:c4:ff:33:5a:15:
bc:db:b5:28:d7:e1:0b:80:1e:3e:12:d6:fb:71:b4:
a5:3d:2f:ce:60:86:64:90:d1:e1:74:2d:7a:f6:25:
e8:4b:c6:19:60:4d:96:f9:c7:48:45:d1:f0:b3:78:
da:d0:54:83:42:9e:0a:78:cf:bc:41:1c:99:14:b4:
e0:74:b0:64:36:d3:c3:9d:48:87:b9:64:65:6b:8d:
50:93:a1:31:77:70:9c:c8:eb:2d:e9:4d:f6:41:a9:
8a:1f:2a:23:3c:5a:4c:19:6c:6e:d9:17:dc:c7:67:
29:97:1e:0b:d9:9b:a4:b9:e8:a6:74:ce:2d:94:e2:
90:63:0a:6e:fe:3b:4b:1a:75:9a:93:d3:cb:5e:97:
2d:e1:b6:07:41:0a:9c:d6:fb:ad:e1:ae:cd:53:dc:
e1:cd:2a:03:aa:3c:00:fb:20:e3:d1:8b:97:60:77:
23:96:69:da:8a:b6:7f:f7:f1:96:95:54:56:95:57:
25:21:a9:eb:66:8a:7f:83:43:13:c9:f2:cd:2a:0d:
e0:3b:11:6e:9c:82:5e:f4:04:9a:e1:3e:72:b3:5a:
59:7a:45:04:c3:19:ad:39:72:da:67:14:52:49:9f:
03:fc:de:d1:a7:95:7f:d6:14:3e:c7:57:d2:13:7b:
c3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:45:C0:E1:F4:24:D0:35:3F:3D:AB:D2:D8:EA:4B:25:0C:0A:B6:07
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/EUXA4fQk0DU_PavS2OpLJQwKtgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.22.0/24
89.251.24.0/24
Signature Algorithm: sha256WithRSAEncryption
15:9d:dd:af:d8:f1:20:1e:ec:47:08:31:9e:cc:37:22:61:86:
46:76:40:5c:1e:eb:8f:6d:b6:fb:7b:59:7e:6f:20:a6:8b:28:
85:2b:04:08:d7:cb:4e:bb:98:11:cd:43:2d:f6:7f:b3:99:dd:
72:07:00:02:45:06:a2:bb:1e:ec:88:18:1a:74:3d:48:0c:65:
80:63:1d:ce:ef:a0:4d:9c:05:d5:2a:2c:d4:ce:ed:13:a2:b3:
d6:e7:72:52:e5:a2:d1:14:63:ce:a4:ab:87:31:c4:47:96:8a:
86:34:68:03:0f:9f:f3:9d:00:aa:78:d6:00:e9:b2:25:fc:50:
9e:2e:04:1e:67:3c:72:b6:43:f9:bb:7c:2d:73:74:88:b8:1d:
4d:36:af:9d:ae:1b:36:69:91:d8:87:01:fd:e9:11:7b:5c:1d:
46:27:a5:a4:25:3f:0d:ef:84:7b:00:b2:50:34:11:82:14:5a:
89:a4:11:8c:89:b9:a8:77:20:57:05:4d:84:af:0b:16:10:b4:
4c:4d:65:5f:10:cc:d9:07:a3:d0:82:a1:df:a6:7a:b6:22:38:
5c:38:95:ba:01:64:ab:b9:02:d7:82:49:16:ad:06:1f:6e:86:
45:c3:52:3a:14:e7:85:13:bd:da:6f:69:a9:eb:9c:69:19:75:
19:e4:68:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:06 2024 by rpki-client on console-ams.rpki-client.org