Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/R5-f6xjM4Lcr1X1RWyH3TN6QOeM.roa
File: R5-f6xjM4Lcr1X1RWyH3TN6QOeM.roa (raw, json)
Hash identifier: bXywBOZx6s7xe1H5CqrkzEC3/v3ywPmdPfXp11Csrt0=
Subject key identifier: 47:9F:9F:EB:18:CC:E0:B7:2B:D5:7D:51:5B:21:F7:4C:DE:90:39:E3
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01877BE5F7FD5860E00B7A4CC77253D84DEA
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/R5-f6xjM4Lcr1X1RWyH3TN6QOeM.roa
Signing time: Thu 13 Apr 2023 18:34:41 +0000
ROA not before: Thu 13 Apr 2023 18:34:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200482
IP address blocks: 89.251.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Jun 2023 10:34:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7b:e5:f7:fd:58:60:e0:0b:7a:4c:c7:72:53:d8:4d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Apr 13 18:34:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=479f9feb18cce0b72bd57d515b21f74cde9039e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8c:b7:87:61:6d:f1:9c:73:a7:62:37:35:5a:
8a:ab:c2:71:c5:65:d8:4f:c8:5f:41:05:d5:d6:6e:
26:7e:41:65:59:15:fd:ba:ff:1e:f4:1b:66:5d:5c:
fa:e3:68:bb:43:06:c3:bd:44:80:fa:87:07:d7:b1:
7e:df:77:9f:b8:df:24:8a:17:fb:04:cf:45:85:a9:
7a:45:ef:e4:61:62:37:44:86:54:c1:e5:2a:b1:ff:
1f:96:e2:9e:d8:b4:d4:6a:bd:ac:70:ea:32:11:04:
8f:94:f2:05:ea:50:71:19:89:dd:8a:77:d3:b2:1d:
6d:98:52:cf:d9:bf:36:51:d5:2f:95:bd:47:ef:17:
35:65:ba:d7:27:d7:cd:6b:8b:95:c8:f8:f8:0c:f8:
b9:95:61:40:9c:6e:1e:b3:e0:f3:ea:ef:63:bb:80:
76:f3:5e:09:93:b6:3f:35:6b:ed:97:71:b7:3f:52:
33:43:43:c8:03:98:39:c6:58:cf:ae:a5:28:81:2b:
7e:8e:62:b8:62:bb:9c:e3:05:78:a8:2e:90:2c:0a:
fe:90:1e:03:13:5e:e1:8c:19:6b:01:48:0d:51:a7:
53:46:8c:30:e3:30:6c:31:b4:ac:7b:70:a2:ef:73:
97:ab:41:22:6e:2c:fc:c1:ba:e0:66:fa:84:39:66:
ea:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:9F:9F:EB:18:CC:E0:B7:2B:D5:7D:51:5B:21:F7:4C:DE:90:39:E3
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/R5-f6xjM4Lcr1X1RWyH3TN6QOeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.27.0/24
Signature Algorithm: sha256WithRSAEncryption
69:30:e6:89:f1:69:f1:e5:11:a6:7e:68:c0:e4:da:0b:10:3e:
6d:e4:42:7a:69:29:7c:10:36:ba:f7:d9:60:29:3c:a1:df:ad:
a3:a9:10:f2:fe:3f:86:db:fc:06:ff:05:ca:df:01:86:be:15:
0f:94:47:10:67:25:e6:7f:c4:cc:8f:21:c2:64:2f:1b:71:e4:
49:5d:cb:0d:4b:75:14:17:d7:5c:b0:49:8f:39:d9:4e:16:90:
76:4e:82:4a:1a:8d:75:5b:fa:d0:83:66:33:c3:b3:26:6c:95:
e4:13:cf:9c:cb:4f:31:d1:7a:b7:15:6f:9f:e0:7a:61:e9:28:
c7:c9:7f:40:07:af:4f:f9:b1:08:06:cf:13:85:22:8e:91:34:
01:8a:bc:8e:b9:e9:c8:b1:78:b0:11:87:65:41:29:64:e3:f2:
b1:0b:95:b6:d3:95:16:0e:c7:3d:9a:5b:f9:18:31:87:6c:b2:
be:ea:44:bc:2e:25:6e:59:59:17:07:8e:67:39:07:c5:8f:5c:
3f:c1:d9:18:a0:10:fb:18:a7:25:f0:f5:53:34:78:f9:a3:72:
36:41:82:93:5e:d2:6f:89:fe:52:6c:76:88:1c:ca:2a:ef:73:
a7:c7:b7:bb:81:66:4d:56:68:ee:38:57:aa:fe:e0:30:e3:b4:
ad:94:41:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:06 2024 by rpki-client on console-ams.rpki-client.org