Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/keg7DVvXYKZ76W4jRlvzNPs9b6s.roa
File: keg7DVvXYKZ76W4jRlvzNPs9b6s.roa (raw, json)
Hash identifier: LHmky3t0SvYvK/Pcvxxh3gjgsI9CxQSKkODNLMkgi8I=
Subject key identifier: 91:E8:3B:0D:5B:D7:60:A6:7B:E9:6E:23:46:5B:F3:34:FB:3D:6F:AB
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01877FC2BD6EAB80D983B9CA968665FCA03E
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/keg7DVvXYKZ76W4jRlvzNPs9b6s.roa
Signing time: Fri 14 Apr 2023 12:34:41 +0000
ROA not before: Fri 14 Apr 2023 12:34:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 135752
IP address blocks: 89.251.21.0/24 maxlen: 24
89.251.24.0/24 maxlen: 24
89.251.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Jun 2023 08:45:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7f:c2:bd:6e:ab:80:d9:83:b9:ca:96:86:65:fc:a0:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Apr 14 12:34:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91e83b0d5bd760a67be96e23465bf334fb3d6fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4b:bc:61:6e:9f:c9:af:41:f8:18:98:6d:2e:
32:fc:e8:3d:74:6a:a3:e7:9d:f4:db:26:0d:5c:2a:
b7:aa:7f:d3:e4:32:bb:c7:a6:c7:70:1b:d1:cb:4f:
0a:10:dc:fe:21:01:ab:42:4b:00:17:3a:31:ac:5b:
5b:3b:00:d7:7d:cc:bf:15:c8:6c:f4:02:9b:ea:0d:
cd:95:23:3b:0a:7b:23:97:1e:c9:df:8f:f8:32:95:
9c:e4:9b:3b:83:79:84:49:59:81:70:79:5f:75:2c:
95:3c:9b:37:b5:b2:7f:0a:de:c5:04:a3:a3:90:4f:
2e:b2:e3:07:83:59:8c:b6:57:90:4a:62:f0:31:9b:
17:0d:d2:d0:66:48:6b:5f:4c:db:73:51:1b:2e:fc:
82:85:8d:75:7a:04:c8:50:14:b1:8a:51:32:f9:40:
7b:26:4e:60:fd:a1:fb:40:e2:a3:1d:1c:19:9c:36:
0b:6c:ba:0c:be:bf:0f:d3:93:19:62:3a:3c:f7:57:
06:58:9e:d3:be:90:a6:d4:d3:db:19:2e:b1:d3:71:
bd:48:0a:11:be:7c:ba:47:23:db:d7:29:c0:ec:ea:
f1:69:25:d7:e3:0f:fd:07:11:af:16:9e:01:fd:c4:
fb:e7:6a:32:e8:8b:20:0d:88:49:16:74:2f:0c:08:
19:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E8:3B:0D:5B:D7:60:A6:7B:E9:6E:23:46:5B:F3:34:FB:3D:6F:AB
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/keg7DVvXYKZ76W4jRlvzNPs9b6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.21.0/24
89.251.24.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:d8:e6:2c:06:1a:22:a4:0e:37:d4:78:25:61:2c:ce:d6:af:
e0:d1:53:a5:85:fe:17:c4:41:7e:91:04:72:f7:c4:5e:45:2f:
e1:f2:4e:52:e6:99:b7:0b:3b:d4:26:61:74:6b:64:98:a9:3f:
9e:04:9f:52:ff:dd:d3:76:50:f3:82:a4:db:0d:41:e1:ed:b8:
5d:98:64:bb:35:57:ed:16:b1:5d:2d:a9:12:f6:be:44:97:39:
77:7e:02:67:2f:82:d6:62:1b:0f:03:c2:33:25:7a:77:62:4e:
b9:b1:1d:1a:a6:65:a3:48:4e:cf:7f:30:ea:ae:67:f5:0c:68:
e6:42:91:d6:9c:55:53:e0:65:af:ec:8a:d9:80:99:82:24:d4:
0c:f9:8a:ca:2d:c1:67:02:dd:df:f2:e0:a3:f4:89:be:89:52:
1e:f6:75:be:b6:a3:bb:d4:58:d7:60:b7:55:53:26:1a:bf:1f:
e1:aa:31:20:04:04:13:ea:0f:aa:81:e8:4f:8e:38:fc:fc:5d:
a3:52:02:09:ed:d6:36:ea:95:50:5c:49:a9:e3:57:a1:46:3f:
b7:2e:cc:29:07:63:fb:6c:ec:0d:08:7a:b0:04:65:12:10:4a:
92:75:bb:86:2a:a9:1b:14:9c:5f:2a:52:a8:da:56:66:ac:91:
21:28:ac:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:37 2024 by rpki-client on console-fra.rpki-client.org