Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/dpwsRO9TlYzzXWDqq8K4B6yVuUA.roa
File: dpwsRO9TlYzzXWDqq8K4B6yVuUA.roa (raw, json)
Hash identifier: WflJv3EYkXswUz0KBa9iSAnpO7KkEUEz4QNc8IoZEbA=
Subject key identifier: 76:9C:2C:44:EF:53:95:8C:F3:5D:60:EA:AB:C2:B8:07:AC:95:B9:40
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018B445DE69ED1E6B8B9B50AD5ED42A43D42
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/dpwsRO9TlYzzXWDqq8K4B6yVuUA.roa
Signing time: Wed 18 Oct 2023 19:58:06 +0000
ROA not before: Wed 18 Oct 2023 19:58:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.200.221.0/24 maxlen: 24
109.122.44.0/24 maxlen: 24
109.122.46.0/24 maxlen: 24
89.251.20.0/24 maxlen: 24
89.251.30.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Oct 2023 19:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:44:5d:e6:9e:d1:e6:b8:b9:b5:0a:d5:ed:42:a4:3d:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Oct 18 19:58:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=769c2c44ef53958cf35d60eaabc2b807ac95b940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f2:23:89:54:29:97:3b:e8:5e:b0:ac:8e:97:
5c:d5:a3:9f:c3:94:dc:e3:9c:3d:43:89:8b:2f:2a:
0e:73:08:30:34:e1:93:39:d7:ae:86:9b:51:d5:4e:
12:78:73:0b:73:49:8a:b3:da:b2:59:fe:85:89:97:
b6:94:9c:86:a6:75:6e:c9:ee:7a:8e:b0:90:c0:aa:
ac:74:aa:a3:ae:08:c2:cd:0f:a3:64:69:d2:b0:c8:
94:e5:3e:6d:47:49:a5:25:8b:8b:f7:3d:87:f8:56:
d2:7f:3e:45:ee:db:29:46:72:a1:9e:11:79:78:13:
2d:50:a7:9d:70:1c:8b:a7:99:5c:5d:b8:87:27:0b:
48:13:51:72:2e:30:2b:33:b6:36:23:ef:d3:39:23:
14:db:d6:9f:bd:e5:da:79:20:b6:68:00:f1:98:4a:
ba:1f:d7:f4:b2:85:a5:b5:92:3f:37:de:ec:f3:08:
44:5e:56:7e:c4:e2:21:c5:00:a8:ef:4e:37:b1:5a:
0e:88:38:64:da:aa:f6:58:bc:e2:45:7e:c0:2d:d2:
8b:b5:65:ce:e2:19:64:fc:5c:9e:b3:1d:a7:93:03:
e7:1f:92:2b:73:b1:f3:bb:c0:e3:07:d0:f4:31:14:
4b:92:be:fb:91:b4:e9:42:3f:30:24:af:65:97:c8:
36:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:9C:2C:44:EF:53:95:8C:F3:5D:60:EA:AB:C2:B8:07:AC:95:B9:40
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/dpwsRO9TlYzzXWDqq8K4B6yVuUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.20.0/24
89.251.30.0/24
91.200.221.0/24
109.122.44.0/24
109.122.46.0/24
Signature Algorithm: sha256WithRSAEncryption
61:fb:2f:b4:5e:37:f1:74:bc:8a:87:09:db:21:14:f2:eb:29:
d0:f8:b6:45:03:15:4e:ad:82:de:73:e7:3a:dc:7d:db:eb:03:
ba:81:5a:4e:bf:01:36:53:6d:97:5a:c2:d1:f2:5e:cd:df:0f:
cd:c3:57:73:a6:ab:ab:ad:42:58:67:8b:ce:8a:51:61:5e:aa:
3d:fd:a1:b5:46:45:83:d9:53:28:f8:4e:eb:15:69:99:60:af:
4e:07:20:a0:f6:9c:6b:fb:26:72:71:84:0f:26:73:d8:f3:cf:
80:4f:66:d0:81:63:d7:6e:28:9a:75:bb:cf:f3:6a:50:f4:7c:
0f:92:0a:35:b2:cc:cb:1e:23:f6:72:fe:28:e3:bf:3d:e8:a4:
78:31:e9:01:d6:ee:c1:2f:a3:69:1f:44:32:47:16:07:fa:b5:
9b:8a:fa:2c:45:f2:1e:52:0c:60:e6:ea:04:3b:10:e6:03:c4:
0d:eb:b8:85:45:41:1d:27:8b:ac:5a:b2:38:e6:35:47:e1:a1:
63:80:90:95:d0:10:c2:da:92:48:83:cd:d8:08:f3:33:ca:7e:
96:54:3d:c0:e3:12:6f:d1:ce:ff:a7:2c:aa:5b:a8:20:bb:ed:
ea:5c:83:b1:61:9b:da:31:99:2b:5f:98:62:d5:f9:dc:d1:c4:
99:24:75:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:06 2024 by rpki-client on console-ams.rpki-client.org