Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/_e6T8nQFzwZrdSlOVC2E4aV3s7Q.roa
File: _e6T8nQFzwZrdSlOVC2E4aV3s7Q.roa (raw, json)
Hash identifier: LuJwREYSTH+HbAXGH5HXkYrRIrRC3BtMGHpGpIwNnfk=
Subject key identifier: FD:EE:93:F2:74:05:CF:06:6B:75:29:4E:54:2D:84:E1:A5:77:B3:B4
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01877BEBC29E94CBD6DF0C226A2CD0BE95F7
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/_e6T8nQFzwZrdSlOVC2E4aV3s7Q.roa
Signing time: Thu 13 Apr 2023 18:41:01 +0000
ROA not before: Thu 13 Apr 2023 18:41:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.200.220.0/24 maxlen: 24
89.251.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Apr 2023 12:34:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7b:eb:c2:9e:94:cb:d6:df:0c:22:6a:2c:d0:be:95:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Apr 13 18:41:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fdee93f27405cf066b75294e542d84e1a577b3b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c2:ab:18:e4:91:55:ce:ca:f8:dc:4a:27:7e:
ea:05:57:d1:87:c1:3a:67:41:da:f2:e8:31:5e:83:
57:4a:51:db:2b:41:d1:70:f0:46:cc:b3:4f:a9:aa:
2f:64:ff:b5:6e:a7:e2:e4:41:a8:95:1b:de:a9:62:
9c:ed:94:39:56:0d:0f:bb:38:6b:9e:ac:74:ed:04:
80:bb:af:13:6c:7b:0e:e5:1e:1a:9e:c1:12:08:65:
99:c7:00:f7:cd:e7:d9:8c:2e:1c:de:50:b1:cd:9f:
70:ba:84:cf:cd:b5:d0:27:dc:16:4f:6f:dc:7f:28:
9c:0a:8e:ad:cd:a2:d0:66:d5:65:f9:f4:08:ef:72:
4f:3d:dd:62:41:6c:2f:d0:ad:bf:54:36:45:1f:3e:
3c:81:51:1e:94:29:db:8d:c9:69:93:fe:10:f7:38:
52:ab:58:74:5e:f2:78:31:2a:76:30:8b:34:46:2c:
59:79:cc:d2:49:14:af:45:90:d5:f8:57:b9:91:4a:
1c:4b:6b:f3:58:2b:7e:58:d8:20:0d:90:96:a2:0f:
ca:07:e6:81:bb:19:00:95:45:c0:18:35:36:0b:57:
0d:2c:4a:9d:0a:55:f2:15:93:b8:c0:a5:11:2a:33:
7b:d2:9c:06:82:53:79:fa:ad:f1:f5:46:0e:54:5c:
b3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:EE:93:F2:74:05:CF:06:6B:75:29:4E:54:2D:84:E1:A5:77:B3:B4
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/_e6T8nQFzwZrdSlOVC2E4aV3s7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.24.0/24
91.200.220.0/24
Signature Algorithm: sha256WithRSAEncryption
13:2d:c3:b9:7d:13:ca:cd:ca:d1:92:78:ab:e4:3d:ee:c0:6f:
a6:25:29:de:17:ae:07:40:17:12:4c:0d:13:e7:ae:7d:df:b5:
b8:ab:f7:4e:6d:86:11:9f:f1:3c:0a:a5:63:5c:fe:ed:f7:a4:
9e:c1:63:1f:6f:49:b2:b4:77:3d:1c:71:79:f4:9b:31:11:67:
c8:a1:25:c9:e0:38:b4:02:01:74:5d:ae:6a:a9:10:55:40:96:
a7:ec:00:74:e9:fe:c4:29:cc:ed:4a:d9:aa:99:dd:95:7c:58:
43:0f:8f:94:29:83:aa:90:7c:01:e1:84:fa:17:fc:1c:97:56:
0e:db:28:70:be:a9:db:5b:01:83:ee:ff:9f:a5:ab:19:22:e5:
01:87:35:e0:fd:cb:15:e5:e7:64:f5:fc:82:3b:a1:b6:20:9f:
ae:ac:92:22:36:80:8d:a4:ab:3f:a0:16:84:5c:3e:c3:53:21:
ed:f5:d4:fd:4d:28:4b:9c:2a:59:7d:cf:06:89:56:29:d8:f2:
6b:08:d2:e8:df:bf:17:82:63:c0:54:6c:d3:5b:d9:e1:c4:dd:
ba:6a:95:51:56:fd:73:fa:5a:8b:fa:9a:e6:64:ad:f6:e8:2f:
63:89:e3:fd:b9:09:a1:2d:3f:c7:e5:96:42:e6:8d:02:e5:40:
eb:48:45:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:06 2024 by rpki-client on console-ams.rpki-client.org