Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/S8mNnLYNsBaF752UC6u4A7RUO_s.roa
File: S8mNnLYNsBaF752UC6u4A7RUO_s.roa (raw, json)
Hash identifier: mtLoPVrOMJVfxKG+W/KknaZZo9xSeiAAuoY+xtXH2pU=
Subject key identifier: 4B:C9:8D:9C:B6:0D:B0:16:85:EF:9D:94:0B:AB:B8:03:B4:54:3B:FB
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01894689EEBEB94E098C061E5A10F11B1305
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/S8mNnLYNsBaF752UC6u4A7RUO_s.roa
Signing time: Tue 11 Jul 2023 19:59:51 +0000
ROA not before: Tue 11 Jul 2023 19:59:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 91.226.57.0/24 maxlen: 24
89.251.24.0/24 maxlen: 24
193.93.53.0/24 maxlen: 24
89.251.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 15 Jul 2023 11:28:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:46:89:ee:be:b9:4e:09:8c:06:1e:5a:10:f1:1b:13:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jul 11 19:59:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4bc98d9cb60db01685ef9d940babb803b4543bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:69:4e:be:4e:f3:25:7f:7e:cd:e6:bd:19:dd:
5c:7e:21:ab:02:98:f8:fd:4c:dd:41:e8:6f:c4:69:
c5:b1:42:96:42:ec:e3:fc:1f:65:2a:76:90:b1:7d:
16:48:74:f2:bc:4f:53:35:72:46:17:b1:8c:42:30:
6e:85:4c:41:5f:e2:2b:92:1e:ba:a0:5c:e4:10:b9:
d8:f5:cc:b2:97:00:48:af:6b:7a:03:17:98:87:93:
99:29:64:2a:cb:d9:9c:16:51:f9:a6:63:e9:c2:4c:
e6:61:15:0c:27:77:f2:ad:b2:13:23:ea:aa:0e:26:
05:03:c7:9e:68:23:7d:b1:79:0f:79:af:97:6d:4f:
30:90:1b:60:2e:f0:e2:6a:8b:97:ab:12:8b:a7:72:
86:55:a7:cf:be:4b:2f:3c:0f:ed:ce:a3:3f:b9:45:
7c:9c:82:bf:28:db:ab:37:51:09:30:7b:6c:16:40:
d1:0b:b2:30:c6:2a:46:7b:b7:7e:eb:38:94:26:30:
2a:4e:b9:67:e5:3d:fb:9a:a8:4d:9d:22:16:11:f2:
f6:90:8c:0a:89:81:f8:f9:14:69:cb:0a:7f:8f:e4:
0a:f1:7d:97:55:53:5e:5c:65:a6:42:a1:84:79:3b:
61:2c:9d:1d:17:6a:22:ef:b9:2a:8f:19:7d:51:94:
4d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C9:8D:9C:B6:0D:B0:16:85:EF:9D:94:0B:AB:B8:03:B4:54:3B:FB
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/S8mNnLYNsBaF752UC6u4A7RUO_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.24.0/24
89.251.27.0/24
91.226.57.0/24
193.93.53.0/24
Signature Algorithm: sha256WithRSAEncryption
75:2f:a1:8f:09:02:6b:fe:28:d4:59:f4:be:8a:15:bd:88:58:
75:f3:fe:f1:de:e8:1f:ed:da:6a:5d:a2:33:5b:68:bc:ac:47:
2e:e1:1b:0a:2d:67:52:17:5b:82:96:84:c0:da:4d:b0:ae:7f:
18:67:ec:e4:5b:e2:36:7c:71:e0:f1:8d:07:57:76:39:96:14:
42:b1:f3:d8:91:48:bb:a1:4b:d8:49:0d:89:ba:34:16:a6:85:
b1:7e:e2:96:94:a9:da:9d:30:f5:f4:4e:f8:a1:2f:23:76:98:
6a:ed:89:28:b7:90:d0:ae:31:18:5e:8f:96:0c:0e:6f:bd:b3:
d8:0f:70:62:91:97:14:8b:fa:ef:f0:4d:91:7d:46:73:97:b4:
3d:26:a9:f8:8f:a4:32:9e:58:40:24:11:b5:18:27:fa:f9:70:
64:52:85:85:3e:69:dd:3e:ef:2f:17:f0:c7:a6:60:22:1f:92:
e0:21:4e:c8:62:38:e7:25:3d:85:f4:8d:94:eb:2e:b8:7a:3b:
76:b9:fa:61:6b:1c:ab:d2:a4:30:ab:97:74:70:ff:ef:c9:df:
a7:d2:f2:03:a3:62:ec:7a:01:25:96:02:55:ec:d8:db:d6:50:
7e:d6:da:f0:f4:74:96:fe:58:d1:1a:11:64:87:66:c8:8f:db:
1a:71:dd:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:36 2024 by rpki-client on console-fra.rpki-client.org