Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/VoxLtZbVUEEX3tXa8xyaRFda3Cw.roa
File: VoxLtZbVUEEX3tXa8xyaRFda3Cw.roa (raw, json)
Hash identifier: duIHMrX4ZdvSUBQcF0rg5igFKpWXzdt9RmU1gi5gvHs=
Subject key identifier: 56:8C:4B:B5:96:D5:50:41:17:DE:D5:DA:F3:1C:9A:44:57:5A:DC:2C
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018CFC9BD6FC478C3D144027B4AF0EA8E5EE
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/VoxLtZbVUEEX3tXa8xyaRFda3Cw.roa
Signing time: Fri 12 Jan 2024 07:38:40 +0000
ROA not before: Fri 12 Jan 2024 07:38:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397630
IP address blocks: 89.251.16.0/24 maxlen: 24
89.251.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jan 2024 12:25:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:fc:9b:d6:fc:47:8c:3d:14:40:27:b4:af:0e:a8:e5:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 12 07:38:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=568c4bb596d5504117ded5daf31c9a44575adc2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c3:00:13:4a:2d:e1:67:4d:f8:0b:6b:d0:a1:
24:a7:9d:8d:00:ac:39:51:81:56:b4:b5:56:94:3a:
b8:ea:ab:9c:27:e7:00:48:dd:cb:a3:f7:ac:34:f0:
36:41:ca:e9:30:55:4b:cb:eb:6b:ca:8f:30:1c:11:
ec:5b:66:4d:a9:39:f3:a5:a1:d9:9c:73:63:cd:0d:
37:01:70:dc:18:7c:92:58:70:f6:69:26:31:e8:ad:
19:55:98:90:2b:2d:3f:30:45:73:ea:ed:8d:77:8f:
f2:3d:45:2e:58:59:00:91:94:3c:d2:2c:b8:96:cd:
8a:e5:fd:56:da:02:eb:56:87:d5:3b:03:ce:f6:e6:
07:af:6a:8c:c8:03:87:c7:21:7b:c7:8a:87:f6:2e:
3d:ff:64:d9:54:03:65:61:3f:52:41:28:81:61:6d:
e9:ba:80:22:f5:bb:4c:b3:fa:da:98:ab:9d:08:8b:
54:90:40:f7:3e:f3:c9:57:0d:c2:89:78:82:02:e5:
1b:d4:49:cf:8f:19:79:d6:5b:4b:3d:a0:bb:c0:a4:
8a:36:23:e9:0a:22:00:2f:ea:6b:da:f8:50:82:71:
db:47:3b:17:75:6f:38:be:50:af:93:ab:2b:84:5c:
5b:76:38:0b:2b:f2:c0:77:9e:68:65:d4:b5:e7:fe:
5d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8C:4B:B5:96:D5:50:41:17:DE:D5:DA:F3:1C:9A:44:57:5A:DC:2C
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/VoxLtZbVUEEX3tXa8xyaRFda3Cw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.16.0/24
89.251.19.0/24
Signature Algorithm: sha256WithRSAEncryption
54:c0:23:7d:39:77:12:8d:a1:31:32:f8:1a:6e:fb:29:ab:ed:
a1:8e:18:4e:09:a0:b6:0d:f0:6a:92:64:61:c7:ba:ef:04:dc:
e2:ae:76:99:68:1c:eb:d8:e6:ee:fc:85:4d:f4:07:62:d3:4d:
b0:d2:f6:13:14:6d:13:4c:7f:e7:f9:b3:0f:f4:57:9d:08:f2:
b6:ae:6e:8b:77:d7:70:05:af:14:d4:ff:b8:25:99:86:74:c7:
06:fd:ee:f2:7a:14:c4:e7:04:f9:d7:67:0f:bb:ba:9c:81:c8:
ce:85:60:98:b3:f9:0a:f3:c2:21:f9:cd:85:a5:a0:2e:b4:1e:
65:dc:02:da:e8:e1:0b:b0:ea:06:00:7d:fc:17:3f:33:74:67:
ad:bf:17:4f:df:2f:0b:cf:c0:09:e5:2c:1c:76:cb:2f:df:ef:
9b:e5:7a:c5:dd:26:7b:da:53:d4:fe:ec:e3:12:2d:ed:ca:de:
ce:c4:17:ad:f1:c2:3f:27:b7:a9:cb:96:c9:2a:77:b8:1a:ab:
5d:c2:91:5d:27:1d:49:65:6b:ac:f1:02:a2:55:f9:37:76:8c:
88:05:3d:fe:80:35:c2:55:09:b8:4f:f2:8c:ed:1a:ab:26:2a:
9d:1f:1a:fd:01:2f:8c:26:c4:55:7f:d6:08:8b:8d:e6:96:57:
fb:0a:7b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:06 2024 by rpki-client on console-ams.rpki-client.org