Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/hdqeapOh1EAbtazmY31tp4iyZy4.roa
File: hdqeapOh1EAbtazmY31tp4iyZy4.roa (raw, json)
Hash identifier: 7kT5A/GA2H+N6nEjd07ve8V6CXQkeTHAkwpt7dsugRo=
Subject key identifier: 85:DA:9E:6A:93:A1:D4:40:1B:B5:AC:E6:63:7D:6D:A7:88:B2:67:2E
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018D1D88AA3AA6A96981D59BEA516FBF5DD0
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/hdqeapOh1EAbtazmY31tp4iyZy4.roa
Signing time: Thu 18 Jan 2024 17:05:12 +0000
ROA not before: Thu 18 Jan 2024 17:05:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 89.251.30.0/24 maxlen: 24
109.122.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 20 Jan 2024 09:11:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:1d:88:aa:3a:a6:a9:69:81:d5:9b:ea:51:6f:bf:5d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 18 17:05:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85da9e6a93a1d4401bb5ace6637d6da788b2672e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9c:0a:c4:07:d7:24:2d:93:08:7a:39:5f:6c:
3e:1c:13:8d:90:52:e7:96:13:c1:81:99:44:26:89:
88:9a:41:96:1a:7b:2d:9f:a1:ea:1d:76:f1:91:14:
6a:a8:60:0d:42:8a:5c:fa:0c:1e:8f:7f:09:b3:6c:
e9:29:e2:64:14:4e:01:2d:c4:54:dc:16:da:f7:38:
26:74:51:31:bc:30:a3:59:82:17:87:eb:c5:87:b8:
24:0c:55:45:f0:35:e0:67:8f:1e:8a:75:42:1e:60:
6c:1a:78:a5:6b:25:39:a1:96:dc:9c:ee:c9:6c:33:
93:28:50:25:7b:3c:c0:a8:df:10:5a:37:61:5e:86:
4e:9c:99:30:06:99:13:a0:08:16:7a:15:10:7b:6a:
51:c6:72:27:2e:8f:f9:16:1c:1c:c0:f7:7b:72:fa:
c3:97:fa:5b:77:30:e5:1f:a7:2d:5a:3c:d8:b3:eb:
9f:d2:84:a4:f6:da:c9:59:3b:e3:99:37:93:a6:a6:
ad:de:e4:08:86:4c:33:75:36:a4:94:56:3a:a0:5b:
b6:01:6b:1f:14:fd:00:36:92:a8:a1:77:6b:97:97:
76:35:5a:ec:1b:cc:61:c2:25:a2:35:04:03:0f:07:
a3:c8:6d:8d:9d:79:08:01:5a:46:8f:e1:a3:19:71:
c8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:DA:9E:6A:93:A1:D4:40:1B:B5:AC:E6:63:7D:6D:A7:88:B2:67:2E
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/hdqeapOh1EAbtazmY31tp4iyZy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.30.0/24
109.122.46.0/24
Signature Algorithm: sha256WithRSAEncryption
60:74:15:52:2c:1b:bc:5c:1a:20:03:cd:f6:9d:c7:16:4c:7a:
49:3d:06:5e:90:77:ab:26:0e:49:97:5e:85:07:33:44:fe:3a:
d8:fb:02:5e:70:e9:98:97:40:e4:50:45:b5:a1:77:34:14:dd:
b6:d1:2b:5b:1c:2b:3d:e4:75:5c:a6:18:3e:d3:c9:c0:62:b8:
78:c1:9f:e7:9b:69:9b:93:20:d3:31:01:11:0c:16:13:7e:b6:
3d:28:1f:2f:51:b8:cf:1b:11:f1:ef:f4:bc:a6:1f:0e:23:bf:
57:fa:ae:41:1b:ff:bb:b0:51:a0:5d:3c:6d:11:a5:e9:ea:5c:
62:ce:9f:54:b6:30:e3:f4:e4:c2:da:84:df:19:03:55:3a:68:
f2:6c:1f:de:4a:d9:d4:7c:d4:c2:e1:c4:a0:62:f0:e2:47:08:
d6:d5:20:4f:b7:c4:1d:87:8a:b7:cc:76:1b:a7:5b:f6:a1:7f:
a4:67:2b:ed:70:fe:17:c2:db:d1:a2:c2:ed:56:4c:3e:33:7d:
b1:ac:89:47:0d:c2:87:0c:74:81:3a:27:60:cc:18:7e:53:d4:
65:bf:c6:42:97:65:78:c3:0d:7a:d4:b8:c4:b5:64:9c:d2:44:
58:42:80:e2:44:ef:3b:88:79:c4:19:b0:40:62:2c:c2:71:da:
81:d5:65:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:37 2024 by rpki-client on console-fra.rpki-client.org