Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/M6Rdr54S-ZdR8f4VwrNB6LRp5mk.roa
File: M6Rdr54S-ZdR8f4VwrNB6LRp5mk.roa (raw, json)
Hash identifier: v1PwH1mIyjQa6HWT3cPC5UxYE2Ww7Xjc0XHIZ1o20P8=
Subject key identifier: 33:A4:5D:AF:9E:12:F9:97:51:F1:FE:15:C2:B3:41:E8:B4:69:E6:69
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0189D4912D0AD3F42F32F03FCEAB475F510A
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/M6Rdr54S-ZdR8f4VwrNB6LRp5mk.roa
Signing time: Tue 08 Aug 2023 09:53:51 +0000
ROA not before: Tue 08 Aug 2023 09:53:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197842
IP address blocks: 89.251.30.0/24 maxlen: 24
89.251.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Oct 2023 10:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d4:91:2d:0a:d3:f4:2f:32:f0:3f:ce:ab:47:5f:51:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Aug 8 09:53:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33a45daf9e12f99751f1fe15c2b341e8b469e669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a2:99:7d:8d:76:cb:cb:e6:e5:53:e2:ac:ed:
f9:57:6e:33:b8:8a:ab:54:bd:69:b0:81:c7:b2:f8:
fd:f5:37:0b:ee:ee:53:1d:f7:bf:22:57:41:42:fc:
4b:75:9b:26:cb:94:30:2e:d8:89:1d:52:c6:75:31:
9a:f0:17:62:a8:78:78:e5:11:a2:bf:c1:47:ca:ea:
e4:0e:8c:99:41:49:de:e4:b5:da:78:fc:b4:d5:43:
62:83:d5:d7:6a:6a:04:c9:02:81:fb:b0:f1:5d:56:
b8:2a:3f:32:9a:9a:db:d9:62:f3:a8:22:84:50:3d:
52:8c:6b:a5:c7:28:16:a3:2b:1b:55:b4:be:16:70:
d1:56:6c:69:ef:26:b0:d4:c9:2c:8d:82:42:9c:a9:
5e:93:01:bd:0c:58:71:c5:21:52:78:98:d8:dc:9b:
7c:55:a1:3c:2e:27:de:b3:8f:fb:53:a3:72:2a:e0:
56:f0:f2:85:62:3d:bf:f5:bf:e8:c7:41:b4:a3:74:
6c:b4:29:23:c6:c8:fc:7e:5e:55:64:25:77:7d:fc:
20:35:d2:79:e2:c9:fe:37:86:a1:89:f0:4c:95:48:
59:36:83:4f:08:72:b4:78:33:1e:fa:21:ca:33:c5:
b9:b5:a8:4a:78:76:af:7c:3f:e6:9d:35:d4:05:6b:
bd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A4:5D:AF:9E:12:F9:97:51:F1:FE:15:C2:B3:41:E8:B4:69:E6:69
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/M6Rdr54S-ZdR8f4VwrNB6LRp5mk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.28.0/24
89.251.30.0/24
Signature Algorithm: sha256WithRSAEncryption
76:87:5f:14:75:a7:b6:29:9b:05:d5:e3:9b:2a:98:27:be:ce:
be:de:1f:65:ea:5d:4b:b2:a9:e0:fd:ee:92:be:54:da:04:36:
c0:33:ba:34:6e:06:98:2e:34:04:28:0c:c6:b5:1f:d4:47:f2:
99:52:81:2c:07:6d:28:6b:e3:2e:8e:99:fe:89:d2:be:78:0e:
c4:97:04:c7:60:af:7b:e7:1a:b6:d3:09:0d:67:fb:83:98:87:
59:09:5b:ff:f1:24:a1:d9:f0:23:c6:65:5c:74:6e:df:98:f5:
4c:3d:31:c3:d6:df:20:01:16:95:03:65:07:e3:5b:a0:b6:ce:
78:d8:47:ad:cc:3b:fa:95:06:4b:5a:d4:d5:40:3b:90:ef:9c:
1d:cb:60:b8:10:05:9f:1f:cc:7f:d6:e8:9f:9c:f1:93:d5:b7:
9c:4b:7f:b8:e1:25:fc:20:ef:dd:b5:72:1e:fc:b9:e6:2b:f4:
06:0e:86:40:fe:11:f5:9d:8f:b9:61:c0:0f:55:d6:de:04:50:
86:7d:f7:ab:20:b8:6d:0f:96:32:92:5c:bb:ba:07:28:e0:71:
89:64:fc:ee:43:5a:c8:0d:34:df:db:ac:c8:54:5b:5f:c2:5b:
f3:c6:fb:3a:5e:ba:4a:32:77:7a:8a:98:0e:5a:06:10:cf:61:
88:48:f4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:36 2024 by rpki-client on console-fra.rpki-client.org