Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/_o23xiJGCkVamHun9KlT_xhoymw.roa
File: _o23xiJGCkVamHun9KlT_xhoymw.roa (raw, json)
Hash identifier: 73UirmEkumIUAk3Hi9Q0O3HF6xd8/ivx614kYHi2lQI=
Subject key identifier: FE:8D:B7:C6:22:46:0A:45:5A:98:7B:A7:F4:A9:53:FF:18:68:CA:6C
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018D27B729A73FE0E1CA6475DBD6744807CD
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/_o23xiJGCkVamHun9KlT_xhoymw.roa
Signing time: Sat 20 Jan 2024 16:32:11 +0000
ROA not before: Sat 20 Jan 2024 16:32:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 91.200.220.0/24 maxlen: 24
91.200.221.0/24 maxlen: 24
109.122.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jan 2024 11:42:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:27:b7:29:a7:3f:e0:e1:ca:64:75:db:d6:74:48:07:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 20 16:32:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe8db7c622460a455a987ba7f4a953ff1868ca6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fe:b4:ab:fa:4c:d9:95:86:39:2d:c9:d7:16:
23:cb:18:96:bd:e9:2f:6e:ce:37:83:4c:a4:3d:87:
9a:88:12:cb:55:2d:64:05:4e:00:2f:d2:93:27:9a:
ef:1c:88:7d:bf:9a:76:08:6a:ba:f5:a9:7a:28:7f:
50:aa:70:52:60:0d:89:1b:e4:a1:94:8d:c0:38:92:
a0:ac:11:9e:77:18:99:bc:cf:f8:aa:39:3b:f6:b0:
dd:72:3a:fe:36:28:3f:fb:c6:58:2c:e1:c2:9a:a7:
30:9c:b0:50:e0:3f:ff:f6:b1:97:4b:a5:92:25:84:
a1:ba:31:0b:78:b2:c5:05:1b:3f:c6:f6:96:9d:03:
60:f0:64:fc:84:c6:e4:08:d5:4b:7c:9c:03:26:cb:
c5:a3:92:30:a0:9f:5a:98:c1:1d:68:f4:cf:7f:3b:
c5:4e:52:2d:8c:a4:8e:e3:35:2b:88:50:fd:7c:e8:
7f:be:48:cf:e0:48:d2:9a:ab:44:d3:51:1c:ce:32:
5a:32:48:f3:c7:48:61:c3:73:0d:46:7a:1a:47:52:
e3:7f:ec:b2:93:83:5c:b3:1c:c7:dc:3a:6d:41:af:
60:21:12:b6:64:b8:d4:b4:5d:4a:f1:59:01:55:0b:
84:c2:fa:7d:8c:9c:b7:10:14:28:14:f9:03:1f:9e:
7f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:8D:B7:C6:22:46:0A:45:5A:98:7B:A7:F4:A9:53:FF:18:68:CA:6C
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/_o23xiJGCkVamHun9KlT_xhoymw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.220.0/23
109.122.46.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:f4:93:e3:1e:ee:34:b7:6a:85:4e:cf:cc:be:cf:37:eb:0d:
66:35:2b:be:77:ab:67:00:ce:6f:7c:cb:ca:a5:7a:d3:37:59:
0e:da:cf:28:0b:6d:1b:f0:20:dd:59:4d:3a:b2:fa:df:8e:a4:
a6:a9:07:33:5a:0b:90:b2:40:e3:35:90:03:a6:43:de:88:f8:
14:d1:83:7d:27:40:6f:6f:21:29:60:08:7d:67:ec:94:21:ae:
dd:b4:d6:f2:22:8e:ed:87:68:bf:50:9c:e8:cd:eb:89:ea:38:
a8:c7:be:36:2c:e0:61:06:2a:cf:3b:22:a6:1d:22:a9:51:a6:
65:e1:d1:19:42:3c:42:7c:12:79:63:63:45:98:d3:d1:36:dd:
bf:52:9c:67:1f:79:22:7a:0e:34:56:43:3e:1a:26:3e:4f:ef:
79:d3:4c:48:f0:61:0b:98:91:bf:be:fc:cd:da:91:4f:7b:64:
11:9c:0f:1e:35:4e:58:13:a5:87:7e:a3:cb:b5:08:2e:c0:42:
fb:34:df:af:84:95:52:b4:a3:a9:ae:21:05:01:20:46:a7:08:
08:46:c2:9a:19:c5:3d:f7:b3:44:88:c4:46:06:e2:be:ba:24:
af:32:f4:db:ae:01:2d:dd:8b:73:60:c7:30:41:9b:39:b5:b0:
7e:0c:c6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:36 2024 by rpki-client on console-fra.rpki-client.org