Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/RsFGcu6HJmdnK5aVyVy-ThBTGCQ.roa
File: RsFGcu6HJmdnK5aVyVy-ThBTGCQ.roa (raw, json)
Hash identifier: RgUy/PtuDy+tCy0qRjw/7PGtHyi8S76w2xMwhb0Hs9A=
Subject key identifier: 46:C1:46:72:EE:87:26:67:67:2B:96:95:C9:5C:BE:4E:10:53:18:24
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0186C26E4B65A619C2141083652740BA8C30
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/RsFGcu6HJmdnK5aVyVy-ThBTGCQ.roa
Signing time: Wed 08 Mar 2023 18:14:13 +0000
ROA not before: Wed 08 Mar 2023 18:14:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 701
IP address blocks: 89.251.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 Mar 2023 19:24:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c2:6e:4b:65:a6:19:c2:14:10:83:65:27:40:ba:8c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Mar 8 18:14:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46c14672ee872667672b9695c95cbe4e10531824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4e:ef:9b:d4:47:89:39:c1:20:54:99:a9:cd:
6f:5f:e6:98:0c:c6:41:ff:f1:59:1b:3d:aa:c3:75:
3a:17:55:e7:06:73:c4:16:97:78:a6:d8:26:a9:4a:
91:b5:23:22:37:80:c5:2f:20:ad:95:80:d3:58:fa:
52:cb:4b:2a:8a:0e:a8:fc:b1:65:35:91:8e:31:6f:
c5:aa:1a:fc:41:49:8a:5c:f0:6f:74:c4:af:f8:08:
ec:93:22:1a:36:36:e1:91:65:09:7d:a4:e2:a4:4e:
cb:c5:f7:93:09:e5:7d:8d:bd:f7:b2:61:7b:17:b3:
f3:ad:7a:50:17:76:30:1f:46:4a:13:55:dc:76:49:
98:bf:45:a5:81:26:83:26:2e:21:ab:74:7f:69:61:
c6:c5:8a:c9:88:7b:5f:6d:da:1a:cf:2f:a3:dd:8c:
4e:d4:27:7e:1a:fd:ce:66:bd:06:0e:b8:87:42:08:
87:1b:06:40:49:21:4a:0c:bf:27:ba:a4:88:ba:45:
db:99:32:1c:25:d1:8b:02:97:74:c2:15:3b:5b:79:
b9:53:16:c7:d6:d9:d4:f5:90:b6:c5:55:a0:58:71:
1c:a3:8a:55:27:40:c6:56:45:8b:dd:1c:a0:f4:57:
39:55:bf:32:9c:62:63:25:d9:e8:bd:c8:c7:42:e3:
2b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C1:46:72:EE:87:26:67:67:2B:96:95:C9:5C:BE:4E:10:53:18:24
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/RsFGcu6HJmdnK5aVyVy-ThBTGCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.24.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:92:02:a2:53:91:be:ec:4a:e2:6f:e4:2f:d9:69:72:04:7d:
d4:35:74:6c:47:74:dc:2c:ec:f2:c2:9e:b3:b1:3c:8f:e2:0d:
ec:46:54:87:8c:5f:37:4c:d3:71:79:c9:5e:d5:47:ca:b0:bb:
7e:3e:fe:a2:72:ed:d5:37:35:bf:05:20:d6:75:22:a8:f3:93:
8b:7f:8f:d9:b8:7a:bd:9d:4a:50:11:2a:13:2f:e3:1f:d9:b9:
cb:93:5c:b5:5e:c9:2f:35:c9:22:37:03:5a:2c:00:67:a0:2e:
e3:f3:55:4d:39:3d:40:5a:43:4c:8e:87:75:09:0a:96:11:00:
f5:2c:e6:a4:64:88:4e:a1:7d:a0:2c:45:0f:96:95:80:5a:ae:
11:b5:37:fb:4a:ba:f5:c1:b0:25:e3:ec:6b:f7:7d:9d:d0:a1:
e2:47:73:89:55:4a:c7:91:e2:85:78:f8:c2:77:ee:8a:6d:27:
bc:e3:58:a1:79:13:a2:04:02:5d:04:42:8c:d1:13:fb:12:d8:
c4:49:d7:bf:93:f5:45:6e:3c:22:7a:39:f8:ee:5e:ef:b8:4b:
7e:13:c1:18:53:d0:da:ae:66:71:96:b9:34:1d:6c:a7:cf:66:
9b:95:fe:31:b2:6b:01:cb:aa:e7:19:16:2e:50:42:49:5e:1d:
84:57:98:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:36 2024 by rpki-client on console-fra.rpki-client.org