Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/u76cFlhDF1ic0h9XTGngWO-_M5k.roa
File: u76cFlhDF1ic0h9XTGngWO-_M5k.roa (raw, json)
Hash identifier: e9Izpfg4/Z5qgOscXjLwqMFuI+HspOVjZy+mItH54po=
Subject key identifier: BB:BE:9C:16:58:43:17:58:9C:D2:1F:57:4C:69:E0:58:EF:BF:33:99
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018A1B6960FA774E486097924692A722A768
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/u76cFlhDF1ic0h9XTGngWO-_M5k.roa
Signing time: Tue 22 Aug 2023 04:03:25 +0000
ROA not before: Tue 22 Aug 2023 04:03:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197789
IP address blocks: 89.251.16.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Aug 2023 04:22:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1b:69:60:fa:77:4e:48:60:97:92:46:92:a7:22:a7:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Aug 22 04:03:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bbbe9c16584317589cd21f574c69e058efbf3399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7f:e6:68:e3:be:c7:6e:ac:a8:24:3f:de:45:
f0:8d:f1:2b:e9:05:12:df:90:03:18:5c:1a:fe:54:
2d:f3:70:18:17:21:5b:70:a8:50:48:90:47:aa:ff:
7f:78:2f:4e:8d:95:60:cc:2c:60:05:d3:23:3f:7b:
3c:ef:9c:de:a0:f4:fc:b7:c9:25:8c:85:73:b8:7e:
dd:ce:51:ff:dd:d0:31:40:04:cf:d2:b5:dc:d8:67:
fd:05:8e:c5:45:f2:70:ac:6a:c0:b2:f5:cc:2d:cf:
ea:1c:36:f3:23:4b:2f:10:15:1e:83:27:9c:06:88:
25:40:6d:7d:3e:56:dc:3a:b5:67:e0:0f:d9:f6:02:
eb:b4:63:cb:06:ef:24:5d:29:23:e0:0e:be:4b:3b:
d7:85:47:b9:cc:08:bd:5f:41:f7:26:4b:4e:50:a9:
d1:93:e9:53:23:e6:6c:33:02:d2:e6:d3:09:77:d3:
90:f2:5a:91:73:02:22:4e:59:ea:53:40:25:d8:cd:
07:0d:a8:8e:4c:1a:67:36:49:00:b4:62:d6:fc:d4:
bb:59:01:c9:0f:14:de:e9:52:00:9b:3f:43:66:a2:
39:2c:8c:e5:38:d9:0e:f2:58:14:36:3d:fc:76:b4:
8c:e2:13:56:74:2b:d2:c8:e1:ee:40:cf:f0:18:58:
0f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BE:9C:16:58:43:17:58:9C:D2:1F:57:4C:69:E0:58:EF:BF:33:99
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/u76cFlhDF1ic0h9XTGngWO-_M5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.16.0/24
Signature Algorithm: sha256WithRSAEncryption
16:97:e6:f9:ed:0d:72:36:ed:05:1c:bc:83:67:d2:d2:71:8e:
7e:b0:c7:2a:aa:88:0d:e6:9d:54:39:01:db:9f:8f:8d:51:e9:
76:49:f8:96:eb:f2:f5:41:e9:7e:2a:7b:ed:c7:ed:49:7f:56:
0f:51:5b:ba:12:0a:98:67:07:84:ab:72:eb:d6:f4:ec:42:6a:
b6:49:cc:80:96:94:e5:91:00:e1:54:9e:45:2e:44:e6:f9:d3:
fc:57:8f:ad:08:08:d0:7c:9f:9b:24:37:42:0f:ac:09:3a:a6:
4b:84:62:15:24:47:84:8b:fe:5b:80:8e:7c:f8:8c:86:df:15:
5b:2b:67:0c:bc:87:ee:9d:0f:9e:2a:aa:18:c5:64:c8:9c:90:
fe:d2:19:c4:b9:9d:9a:bb:ce:ea:d0:0c:3b:d0:71:15:20:eb:
b2:8d:61:a7:23:1e:82:cb:2f:87:cf:d7:48:92:2a:17:d8:9d:
23:a0:1f:5f:7b:f2:7e:1b:33:08:a7:4d:24:1e:45:61:99:87:
da:36:ac:0d:2e:52:b7:20:f9:1f:a9:23:98:7b:9b:d3:c1:b1:
7d:b8:4b:5b:9c:0f:ef:19:70:2a:3d:9c:50:da:90:39:ed:2b:
b2:08:7e:57:c5:bd:80:5e:2c:91:e7:98:4c:2a:2e:2c:ce:b7:
62:b6:41:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:37 2024 by rpki-client on console-fra.rpki-client.org