Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/wqK1YLQPSy7F3iKOcOCJNGsVrX8.roa
File: wqK1YLQPSy7F3iKOcOCJNGsVrX8.roa (raw, json)
Hash identifier: kA7q42/NinZLUxvAaO/0FJqCwEGNaD7HZbnOVN2ZFNQ=
Subject key identifier: C2:A2:B5:60:B4:0F:4B:2E:C5:DE:22:8E:70:E0:89:34:6B:15:AD:7F
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018AB94899663F1F28755C52EB31C0AA8F44
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/wqK1YLQPSy7F3iKOcOCJNGsVrX8.roa
Signing time: Thu 21 Sep 2023 19:47:37 +0000
ROA not before: Thu 21 Sep 2023 19:47:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 109.122.46.0/24 maxlen: 24
91.226.57.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Sep 2023 04:51:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b9:48:99:66:3f:1f:28:75:5c:52:eb:31:c0:aa:8f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Sep 21 19:47:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2a2b560b40f4b2ec5de228e70e089346b15ad7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b8:f0:e9:00:8c:5d:72:d6:df:d0:54:a0:cc:
87:e5:4c:55:b8:a5:a6:2d:2d:77:14:d3:1f:36:a4:
34:c1:f4:ef:e6:a7:a3:ac:72:c2:1f:31:6e:40:75:
bb:83:39:33:7e:7a:d0:68:87:b2:f8:0b:c0:aa:c7:
4c:a2:6e:c8:eb:5e:3a:29:11:14:2f:c1:d0:26:2f:
8a:f7:7e:34:1d:00:1c:1c:30:90:9f:0e:b2:02:d4:
d6:fe:fc:b3:8e:82:ec:66:b8:94:37:70:13:41:c8:
79:8f:25:c5:72:4b:be:47:9e:ad:29:c0:a8:58:78:
0c:aa:0e:56:d2:35:09:4a:4c:83:23:fe:07:dd:0b:
2c:79:7f:c3:b8:a9:bc:4b:1d:5d:51:2a:35:d2:9d:
65:95:37:a7:72:17:cc:fd:1c:ef:06:7c:51:4d:be:
56:e5:90:ca:52:82:5f:58:10:94:ff:10:18:37:75:
e1:cb:27:57:50:35:3b:c0:51:81:98:e2:f5:00:cc:
28:d9:77:22:f0:ce:39:e2:8f:24:9a:20:c5:48:2d:
74:10:dc:c1:62:00:5c:6d:a7:f5:4b:51:a2:f9:2f:
ee:e1:38:e7:17:6d:e0:2f:18:34:2b:d2:34:0c:db:
19:57:58:fc:b8:66:c4:3c:76:c2:4f:e3:7b:54:f3:
2d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A2:B5:60:B4:0F:4B:2E:C5:DE:22:8E:70:E0:89:34:6B:15:AD:7F
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/wqK1YLQPSy7F3iKOcOCJNGsVrX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.57.0/24
109.122.46.0/24
Signature Algorithm: sha256WithRSAEncryption
87:3c:c4:b7:d8:31:ac:dc:10:a7:47:3f:00:f5:6e:f6:84:66:
c6:0b:ed:c6:d1:92:9d:39:f9:aa:d9:a4:04:67:44:c6:85:ab:
61:be:52:35:97:3d:e0:c5:1d:13:e3:c4:c4:b7:48:ad:7f:ad:
36:07:96:cd:24:2a:4a:4d:19:9f:c5:13:59:45:b2:c8:85:7b:
9e:5a:19:92:63:6a:ef:07:05:04:5d:90:5b:fb:59:64:29:f6:
53:6f:bc:d1:a8:0c:a6:a0:e1:fa:dc:51:a5:2a:d2:f8:bf:8c:
a5:95:4a:99:a5:ab:dc:78:f3:d7:72:62:43:e8:38:6d:c9:34:
c3:2c:06:c8:a8:c0:d8:b4:78:a9:ca:5f:cf:f8:4a:17:c1:fb:
6c:8d:02:d2:58:f5:f4:87:34:24:89:0d:cd:57:25:ab:4e:57:
e8:c8:69:e4:93:d3:fa:99:2b:15:70:59:32:7a:ab:84:c6:c4:
78:e2:53:57:a0:6e:a4:2f:0d:6c:d2:44:18:aa:87:6c:05:3f:
4d:bc:51:0f:71:0f:1f:86:b8:d8:9d:9b:26:e9:e1:2c:21:90:
d2:a1:2c:39:8f:59:80:de:c1:4e:79:b5:3a:d3:1e:5e:5a:93:
dd:49:8d:26:59:38:5e:81:20:c6:e6:a7:3c:cb:80:52:f5:ca:
5c:24:ad:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:07 2024 by rpki-client on console-ams.rpki-client.org