Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/cGrZoKnk70oSAc-lvlVqGYexFM8.roa
File: cGrZoKnk70oSAc-lvlVqGYexFM8.roa (raw, json)
Hash identifier: ElcR72MlOmfZX66tvQTLhQGSJL/kF2haY5Nwh8Im9gw=
Subject key identifier: 70:6A:D9:A0:A9:E4:EF:4A:12:01:CF:A5:BE:55:6A:19:87:B1:14:CF
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0188C3F2BA4451CDA5889D8D29FC7B23A506
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/cGrZoKnk70oSAc-lvlVqGYexFM8.roa
Signing time: Fri 16 Jun 2023 11:24:04 +0000
ROA not before: Fri 16 Jun 2023 11:24:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 89.251.24.0/24 maxlen: 24
193.93.53.0/24 maxlen: 24
89.251.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Jun 2023 21:09:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c3:f2:ba:44:51:cd:a5:88:9d:8d:29:fc:7b:23:a5:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jun 16 11:24:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=706ad9a0a9e4ef4a1201cfa5be556a1987b114cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:85:4c:93:76:4e:ee:f7:e9:49:a8:79:8e:99:
0c:48:d7:9a:e5:fa:db:fa:0e:f3:93:46:69:e3:a6:
69:e2:da:b2:d7:ac:ad:73:80:0b:87:a2:43:3c:3c:
d5:ce:c9:d8:da:67:34:bb:2d:e3:97:77:9b:92:59:
13:37:15:23:3d:0a:a4:e3:6c:93:06:53:e7:01:89:
a1:d7:3d:f3:ec:39:d8:c8:36:ed:f7:18:e8:d7:08:
bf:9d:33:bc:7a:29:20:9b:21:da:55:a2:ad:05:98:
c9:90:bb:22:16:ad:1c:60:f2:e8:76:0a:fa:63:09:
a1:14:21:d0:a9:9b:f4:5e:58:7f:ef:28:d7:b2:19:
f8:ac:e6:88:db:71:ed:e2:96:98:4a:55:29:fe:2c:
63:a0:9a:46:f0:d7:11:09:c9:6a:b5:cb:34:33:94:
fa:fa:bd:3f:5c:6d:11:02:f4:16:17:30:e2:87:b4:
5e:50:a0:d0:79:01:d3:98:55:14:71:56:c9:dc:c8:
eb:77:76:91:1a:30:2d:14:ce:e9:1d:54:80:a0:12:
2a:7b:cd:8a:af:ac:00:45:5c:53:7d:03:cb:c5:98:
0a:47:02:b6:95:83:cc:7f:f5:2f:60:9b:e6:dc:3b:
ad:05:92:26:04:d5:9a:60:93:48:f8:7e:93:df:3f:
7a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:6A:D9:A0:A9:E4:EF:4A:12:01:CF:A5:BE:55:6A:19:87:B1:14:CF
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/cGrZoKnk70oSAc-lvlVqGYexFM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.24.0/24
89.251.27.0/24
193.93.53.0/24
Signature Algorithm: sha256WithRSAEncryption
42:fd:6c:e6:e5:29:b7:37:45:9a:13:af:c3:52:7d:5b:7f:dc:
7b:17:72:39:52:c1:f8:7d:c9:0b:d9:3b:2d:ba:87:53:a5:94:
e2:23:d1:2b:47:b3:c6:60:d4:90:3a:34:36:5b:4a:d6:7c:e3:
6f:38:35:15:77:da:df:b6:24:a2:a2:0f:ca:12:4d:2f:e4:5b:
2c:a5:d6:cc:a7:cf:c6:10:a7:9d:89:aa:32:06:fe:ea:ed:43:
30:7f:1a:59:56:21:62:a4:61:e3:1e:e7:91:6d:3c:27:8a:66:
5a:ff:84:6f:92:19:a9:af:72:e4:68:91:e4:4f:c6:88:23:06:
98:c0:63:61:92:73:3f:b4:7a:78:65:a2:ba:76:d3:16:43:bb:
59:fd:0b:fe:7d:04:74:a3:59:c5:96:c5:0a:63:a5:ab:b1:0b:
f0:71:9e:7a:73:8e:95:2a:d5:60:12:93:0c:74:95:5d:fe:c9:
b4:56:90:30:9f:39:4c:59:f8:37:80:25:ab:04:3f:e1:ff:4c:
0c:22:98:19:e0:ad:71:59:92:ff:a2:9b:c6:57:95:b0:59:99:
91:2e:17:ef:d6:dc:6b:34:85:6c:e9:23:f4:3b:b9:25:f2:17:
d9:5a:22:78:f6:7e:4a:e7:c3:15:24:0c:5c:a7:1b:5a:c9:72:
39:e8:72:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:36 2024 by rpki-client on console-fra.rpki-client.org