Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/fRe4E9F3Q-rzzkkWnArW-xHUq8w.roa
File: fRe4E9F3Q-rzzkkWnArW-xHUq8w.roa (raw, json)
Hash identifier: fl5TWrUMDD2xyYZkEYjtz+/P3q2IxvNVeNvdzShiz4g=
Subject key identifier: 7D:17:B8:13:D1:77:43:EA:F3:CE:49:16:9C:0A:D6:FB:11:D4:AB:CC
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018C747D6E89E68F4A6FE038D5C4DE1BFD18
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/fRe4E9F3Q-rzzkkWnArW-xHUq8w.roa
Signing time: Sat 16 Dec 2023 21:17:06 +0000
ROA not before: Sat 16 Dec 2023 21:17:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29802
IP address blocks: 62.106.84.0/24 maxlen: 24
89.251.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Dec 2023 06:39:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:74:7d:6e:89:e6:8f:4a:6f:e0:38:d5:c4:de:1b:fd:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Dec 16 21:17:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d17b813d17743eaf3ce49169c0ad6fb11d4abcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7f:85:bf:96:d4:0a:cb:b8:92:4c:76:d5:bd:
f4:c2:98:ef:59:6a:3e:36:10:7e:93:43:a3:21:89:
ff:ef:fc:5a:e7:d3:c9:5e:4b:6d:06:67:10:78:c0:
ef:e9:00:61:8a:e7:5e:f3:a0:4c:71:90:c7:b2:71:
cd:cf:2a:20:6e:8d:f0:35:ea:a5:15:98:90:7e:d0:
f6:a3:60:3d:0a:c9:2f:e2:0b:ad:d7:5e:2c:8d:a1:
2f:22:a5:4c:25:d3:8e:a1:a7:17:48:5d:a6:56:45:
1d:38:54:45:b9:0e:69:9d:9a:28:2a:99:0e:f7:ca:
8d:2e:2f:6f:f3:fe:8c:f6:7f:6d:36:d7:e4:93:df:
2c:72:d6:5d:0a:8f:50:78:e0:2f:f2:a3:3c:7b:72:
ff:43:2a:f5:8b:e9:b8:ac:29:be:6c:0c:81:f3:d4:
b8:d9:7f:bd:37:09:5c:e5:13:dd:62:d3:54:df:9b:
66:c8:cc:2f:1f:10:18:5c:82:7c:36:c5:22:9c:aa:
fb:f6:e5:f5:e1:ac:b1:05:6c:23:76:04:82:14:34:
19:b4:c9:85:ca:5a:0b:c4:a6:9f:29:0b:27:c3:43:
11:77:61:fe:42:04:0d:29:83:83:7d:c7:d2:d0:7a:
45:35:18:dd:24:44:ea:c6:b2:04:3a:78:77:ef:00:
38:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:17:B8:13:D1:77:43:EA:F3:CE:49:16:9C:0A:D6:FB:11:D4:AB:CC
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/fRe4E9F3Q-rzzkkWnArW-xHUq8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.84.0/24
89.251.24.0/24
Signature Algorithm: sha256WithRSAEncryption
59:bf:7f:fe:41:65:91:8c:12:30:2d:85:80:6d:3f:0c:79:2d:
30:ed:9c:d4:67:17:69:04:6f:04:74:11:a5:e3:07:77:61:6b:
e6:e9:2a:68:71:2d:35:3d:68:21:7c:01:ba:55:1c:5d:aa:87:
17:88:86:f9:75:d7:6d:e6:53:37:08:9e:1f:c1:a8:7c:d1:e7:
22:2c:cc:eb:55:e8:64:5d:47:90:f4:02:3a:2c:5a:ce:d4:3b:
91:41:2e:b1:21:f0:b8:8d:b6:5b:eb:28:20:2a:61:36:f0:f8:
5e:93:d8:59:1e:48:fb:6d:20:ea:0f:f7:2e:40:ec:a2:12:1b:
f5:cd:60:e7:dc:fa:25:d6:17:1f:ee:f8:89:2b:b3:7e:66:0d:
0f:b7:04:de:ad:9b:99:b7:95:7b:9f:19:87:43:51:31:00:6e:
70:d0:99:3b:1d:2f:b6:0e:8c:28:69:bc:a3:64:90:1b:6a:2b:
54:b0:1f:c1:11:02:d1:66:4a:75:b4:b5:69:3c:50:88:3f:e2:
75:40:f4:81:f2:78:24:20:7d:26:c7:da:1a:cd:c5:07:b7:0f:
f7:a3:c6:c6:e6:6e:bd:64:12:d6:a8:34:63:ac:50:ef:73:f6:
d8:14:d3:dc:cc:d1:8f:dc:b9:90:fd:a2:cb:54:c5:91:0c:94:
d8:e2:f5:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:37 2024 by rpki-client on console-fra.rpki-client.org