Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/QsJ9Lv5xhXHEbNs7pstSt626GU4.roa
File: QsJ9Lv5xhXHEbNs7pstSt626GU4.roa (raw, json)
Hash identifier: 4pXb8N+qdwwIbL+auCITFtWTGSo1DUjB2cOlJ/CPGTE=
Subject key identifier: 42:C2:7D:2E:FE:71:85:71:C4:6C:DB:3B:A6:CB:52:B7:AD:BA:19:4E
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018B5C0E810526AB48E263029337C47F0AF5
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/QsJ9Lv5xhXHEbNs7pstSt626GU4.roa
Signing time: Mon 23 Oct 2023 10:22:16 +0000
ROA not before: Mon 23 Oct 2023 10:22:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60884
IP address blocks: 89.251.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Oct 2023 19:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5c:0e:81:05:26:ab:48:e2:63:02:93:37:c4:7f:0a:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Oct 23 10:22:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=42c27d2efe718571c46cdb3ba6cb52b7adba194e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:eb:32:28:4d:00:86:63:46:dd:ae:3b:0a:b3:
f7:b9:a6:76:34:26:7b:ab:67:9f:0f:a1:15:53:8e:
72:80:b8:ea:5d:d6:ba:cb:33:9a:67:a3:92:3a:eb:
50:4b:7c:ad:81:db:c6:1f:54:34:2c:4c:1c:30:89:
db:d7:32:be:22:f2:33:9e:08:7c:20:42:d3:51:5e:
82:d1:bb:c6:7a:88:8e:63:4c:9a:85:ba:96:4f:b3:
0d:67:b3:38:a2:d4:a1:f3:79:08:d1:b3:2f:17:b2:
8b:58:a9:6e:00:1e:c4:ae:42:1d:0b:4f:8f:96:4c:
d0:c1:56:37:dc:69:77:88:ab:86:61:21:96:04:62:
f9:bb:04:3c:ca:17:56:e8:f4:b4:dc:41:80:54:a2:
d4:a2:e0:86:bd:9e:2f:58:04:7e:34:d3:e4:62:3f:
a7:8d:48:16:77:15:f4:a6:1a:f1:fa:7b:66:8a:a6:
00:d3:d4:45:0d:bd:cb:30:17:f2:a9:c5:92:0f:0e:
48:82:d9:a5:a9:4a:e1:ca:d0:f8:89:06:ae:de:e6:
d3:b1:99:f8:2b:f3:0d:f9:27:0e:e3:c3:01:ea:0b:
7d:9b:d2:20:7a:62:52:b4:52:35:28:f0:11:8b:e0:
ea:fb:95:de:aa:a1:fb:b3:9f:6d:3d:53:d9:84:e9:
20:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C2:7D:2E:FE:71:85:71:C4:6C:DB:3B:A6:CB:52:B7:AD:BA:19:4E
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/QsJ9Lv5xhXHEbNs7pstSt626GU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.27.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:78:f0:f4:80:b4:33:fd:26:f4:46:b9:29:7d:2a:f0:b1:52:
3c:a0:cd:ea:0f:ef:23:06:23:36:de:e8:8d:ea:6f:53:a4:95:
6d:52:7d:73:87:6b:dc:4e:d1:4e:82:07:3b:26:81:5a:33:3e:
6b:dc:73:0b:08:92:f1:c8:65:4e:2b:29:19:41:0a:0b:30:bd:
2a:97:b4:5f:92:1a:3a:c7:5f:e4:d2:bf:49:ab:64:88:af:3e:
48:9f:a6:98:4b:c5:c2:74:0a:50:d7:b1:a4:78:6c:7b:f7:26:
11:cc:3e:c7:5a:b6:b2:84:d5:3b:94:26:4b:92:e7:8d:b7:35:
d5:90:25:20:3e:8a:eb:c3:13:61:a9:52:54:b4:09:80:ff:3f:
07:f0:32:39:ef:73:ae:9c:d0:58:a8:a5:0e:50:f8:e9:97:95:
f0:7f:83:eb:fd:86:70:78:77:b5:16:8c:8e:90:c6:87:94:3c:
b4:26:f0:e3:92:e2:85:24:8d:d3:0a:bc:e7:3e:bc:3f:4f:68:
a1:e6:38:27:98:3f:ab:c2:09:68:72:23:b5:48:36:d2:2d:0b:
73:b9:72:bd:70:b4:40:3f:33:19:c3:31:91:52:24:62:ad:8d:
f1:ef:14:55:2a:ab:9a:ba:b9:4c:98:7b:74:d1:96:e6:34:8e:
6b:a1:f6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:06 2024 by rpki-client on console-ams.rpki-client.org