Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/tLVLf0KAqT_x1z97_kUlcySoPcE.roa
File: tLVLf0KAqT_x1z97_kUlcySoPcE.roa (raw, json)
Hash identifier: +hB0LKkfhkHbrCYSdZeFxrdydXOVav54cz9wTJtTzJE=
Subject key identifier: B4:B5:4B:7F:42:80:A9:3F:F1:D7:3F:7B:FE:45:25:73:24:A8:3D:C1
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01876968B49C655239D8937E9295AB178E81
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/tLVLf0KAqT_x1z97_kUlcySoPcE.roa
Signing time: Mon 10 Apr 2023 04:24:42 +0000
ROA not before: Mon 10 Apr 2023 04:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198980
IP address blocks: 89.251.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 May 2023 11:25:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:69:68:b4:9c:65:52:39:d8:93:7e:92:95:ab:17:8e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Apr 10 04:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4b54b7f4280a93ff1d73f7bfe45257324a83dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:25:6a:0f:59:ae:a3:e8:28:e6:91:85:49:64:
b6:09:2b:f6:a3:fd:b2:af:7b:4f:f0:fa:44:1f:67:
db:34:81:c1:15:83:b4:32:9d:7e:60:1b:ce:71:ca:
d3:54:06:9c:3c:5e:dd:9c:1d:cb:48:7c:2a:e5:ac:
ad:9f:34:27:66:f7:4f:9e:5f:b4:f8:89:c5:e9:02:
c0:c9:07:2b:09:69:db:85:a1:59:12:1f:0d:a2:0a:
84:95:76:4e:88:7a:e4:de:a1:fe:ae:60:85:ef:9f:
c0:25:21:66:db:b9:0c:ac:3d:3d:75:56:e2:d7:db:
74:b8:10:52:94:e9:c9:65:b8:11:52:22:72:26:f1:
dc:cf:bd:20:03:3b:86:85:ac:76:74:5b:4c:c8:99:
11:20:83:1b:27:c2:46:bd:39:9b:60:d4:a1:e3:bd:
b5:93:c9:98:17:70:91:b9:a7:b0:b3:7f:56:ab:e0:
64:63:1e:ce:29:cf:cb:81:0d:29:fd:fe:80:1a:d8:
70:7b:c0:19:27:e1:d9:8b:4e:6b:f3:37:b6:bb:5a:
cc:38:af:7c:7c:b4:d1:58:b0:73:9f:07:61:6d:ce:
d4:04:05:33:a1:ff:24:b1:57:aa:06:64:2c:65:ab:
1e:e1:3e:95:4a:74:26:84:fa:62:c3:37:a2:31:da:
92:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B5:4B:7F:42:80:A9:3F:F1:D7:3F:7B:FE:45:25:73:24:A8:3D:C1
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/tLVLf0KAqT_x1z97_kUlcySoPcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.22.0/24
Signature Algorithm: sha256WithRSAEncryption
83:65:9b:8e:e1:fa:77:fc:5f:23:8e:a7:36:9a:6b:d1:48:d4:
66:22:f0:6b:89:89:e9:d8:21:e2:d6:70:a2:6e:d2:30:b7:dc:
6c:3e:30:9b:b6:93:e3:80:58:9d:fe:4a:9e:93:44:77:6b:18:
85:74:13:c3:4b:93:14:d5:b9:d7:92:25:ba:b7:e5:ed:51:63:
42:1d:29:a3:be:66:ed:cc:2c:bb:7a:53:51:2b:1e:ba:fb:69:
40:dc:d1:88:90:8f:3e:0f:9d:0e:23:a3:25:bf:3f:a1:60:13:
03:55:80:1c:f0:43:9c:4d:5e:ce:22:22:9a:c9:b5:18:78:37:
85:28:bc:b8:1a:76:cb:b3:01:ab:d6:c8:84:24:70:0d:90:ab:
2f:22:f3:12:2d:62:b7:d3:6a:b8:7a:76:d2:92:b0:1f:08:d1:
0e:02:70:96:c7:cc:52:01:76:98:c4:25:1b:d4:9f:a5:89:b1:
10:2f:f4:77:c5:68:43:7d:26:d3:04:7e:d7:f0:c6:ab:6d:06:
82:1b:d9:fd:a9:7b:c7:b8:d3:12:d0:83:06:aa:4b:43:87:c4:
6a:0c:77:87:67:1c:a5:bf:8e:36:85:ca:5c:91:7b:cf:83:67:
ae:a5:89:2f:d2:3a:ff:0b:01:43:80:10:d6:1f:0b:93:a0:e2:
a3:53:d8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:07 2024 by rpki-client on console-ams.rpki-client.org