Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/sKed4tm9RvCJtse3KcFINY8Fl08.roa
File: sKed4tm9RvCJtse3KcFINY8Fl08.roa (raw, json)
Hash identifier: 4GNwAFlBFZ43vsUcHlS+dYVJw2ValJ0Vn5ym50FArGc=
Subject key identifier: B0:A7:9D:E2:D9:BD:46:F0:89:B6:C7:B7:29:C1:48:35:8F:05:97:4F
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018F30FDC5407DDEF94F8EF95DDD4FA215FE
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/sKed4tm9RvCJtse3KcFINY8Fl08.roa
Signing time: Tue 30 Apr 2024 21:51:28 +0000
ROA not before: Tue 30 Apr 2024 21:51:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64267
IP address blocks: 89.251.16.0/24 maxlen: 24
89.251.19.0/24 maxlen: 24
91.200.221.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 05 May 2024 01:11:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:30:fd:c5:40:7d:de:f9:4f:8e:f9:5d:dd:4f:a2:15:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Apr 30 21:51:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0a79de2d9bd46f089b6c7b729c148358f05974f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:61:28:e0:db:45:fa:d8:54:a4:14:a2:81:d4:
97:3f:1b:63:a1:b2:49:82:d8:2a:db:72:bc:52:2e:
bc:46:a1:8d:46:4f:8e:3e:21:e0:a0:2c:99:24:1c:
1b:ab:81:cd:a9:7f:c4:5b:1d:d6:92:df:ef:31:41:
73:b6:54:de:9e:5f:07:d4:67:9d:f7:74:d4:3b:71:
2c:43:8a:0a:05:f5:9c:70:d7:c7:d3:36:64:a7:6e:
f7:db:51:84:9f:24:b9:0c:33:77:71:3b:e1:75:64:
79:db:86:fe:54:5c:90:0f:cd:78:c1:a1:57:4c:fe:
fb:78:1e:1a:a1:9d:ec:f4:0b:5d:ea:6f:74:3a:09:
06:57:49:0d:a2:46:3d:82:a2:e3:a2:b4:dd:24:41:
fb:de:65:50:1c:d9:e1:ff:ce:7e:91:7b:61:bd:05:
38:4b:90:c1:75:7e:56:61:e3:b0:1f:fb:f6:f4:13:
18:b3:b3:88:6d:9b:ee:61:4d:25:63:ba:89:4c:08:
0d:36:83:1d:fa:88:b7:a2:d5:e1:c2:c7:21:1b:01:
91:10:20:5f:ad:aa:67:53:54:21:4b:69:db:55:73:
03:32:7a:69:0a:1a:62:fb:55:4d:b6:95:50:d0:ed:
83:b3:04:32:fc:38:23:db:ab:60:0c:33:25:ef:74:
59:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A7:9D:E2:D9:BD:46:F0:89:B6:C7:B7:29:C1:48:35:8F:05:97:4F
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/sKed4tm9RvCJtse3KcFINY8Fl08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.16.0/24
89.251.19.0/24
91.200.221.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:61:3a:76:58:ec:1b:a1:95:f8:1e:33:0b:4f:da:75:bf:f4:
57:d7:73:7d:fc:e1:12:9a:0f:84:21:77:17:f1:d8:ca:08:7b:
32:07:3d:41:ee:8b:14:29:23:3a:ca:35:9d:98:9b:6b:12:e0:
05:c6:ae:45:6c:b1:84:41:86:55:9c:fc:44:9d:00:56:3b:96:
d1:76:c9:b8:49:dc:de:b6:e8:18:df:76:c5:89:c2:31:59:be:
4f:b4:a6:52:8c:2f:32:bc:76:8b:cf:9d:9b:3e:86:5b:8a:63:
3f:3a:f5:c2:e7:ad:0e:17:4f:f9:7c:05:8f:2b:2c:ce:83:d6:
46:a3:c0:b9:a3:33:b5:a2:ec:df:eb:b7:23:8d:76:e1:36:25:
3a:7b:72:79:89:5f:34:88:14:04:70:7b:c4:fb:38:5a:b8:7e:
3c:06:d1:ea:53:29:f8:c1:b2:ac:d3:44:ff:f7:9c:b9:42:64:
93:90:a9:d7:46:3e:70:14:4d:f1:cf:6b:0f:5f:a8:82:40:0b:
50:a9:f3:15:c7:6f:27:53:07:6d:2b:da:24:db:9d:90:25:c2:
45:7c:30:96:a3:d8:a5:ab:4d:84:6a:73:95:f3:d4:4d:2d:88:
23:35:3f:5c:13:4f:2f:a1:71:e9:42:45:c0:5e:d4:a8:a9:01:
88:9f:14:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:31:44 2024 by rpki-client on console-ams.rpki-client.org