Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/xh0mkecj3S-AlYUejHZ13IgLmVQ.roa
File: xh0mkecj3S-AlYUejHZ13IgLmVQ.roa (raw, json)
Hash identifier: NWK+k1ffFxfhsTVL3x00Tk58ALxqtje/tHS8tih3erE=
Subject key identifier: C6:1D:26:91:E7:23:DD:2F:80:95:85:1E:8C:76:75:DC:88:0B:99:54
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018D2626298CE06F78741F9F57B97AED7B35
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/xh0mkecj3S-AlYUejHZ13IgLmVQ.roa
Signing time: Sat 20 Jan 2024 09:14:11 +0000
ROA not before: Sat 20 Jan 2024 09:14:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211318
IP address blocks: 89.251.30.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Feb 2024 10:44:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:26:26:29:8c:e0:6f:78:74:1f:9f:57:b9:7a:ed:7b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 20 09:14:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c61d2691e723dd2f8095851e8c7675dc880b9954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8d:3e:c2:97:52:d5:47:d9:ab:2a:af:27:ba:
c7:50:85:e3:fd:88:d6:e5:4d:ee:0b:27:16:43:fb:
ce:4e:7d:7e:8d:a9:63:ca:d1:f7:a4:06:f5:b4:d1:
28:f2:fb:0f:08:7b:5b:4d:94:b9:bb:69:96:f9:6b:
15:05:c6:1b:77:9f:48:d2:63:18:9e:d0:dd:d0:2e:
36:eb:81:3f:99:aa:24:f2:a4:44:c2:45:73:39:cc:
04:0d:62:d1:57:ea:cf:81:54:9f:2a:9d:20:45:5d:
a8:c2:b1:14:51:97:2a:6d:c9:38:02:f7:79:df:4d:
91:2c:27:15:91:76:78:ca:cb:4c:52:25:16:68:55:
29:cb:55:5e:f9:5c:3e:db:90:fa:b6:16:1c:08:c5:
65:05:c7:79:c7:fd:6e:0f:17:21:a2:e1:8a:cd:73:
f2:2a:97:5e:46:1c:8b:c3:35:b0:32:3a:74:76:27:
e9:32:db:18:c5:5f:39:e7:41:69:dd:50:e7:8f:8e:
e0:91:bf:3c:7e:d1:25:84:22:04:ca:81:74:32:28:
18:2a:21:f2:ce:ba:90:cf:62:e2:d3:16:57:07:95:
2f:63:e4:06:92:48:d9:a9:5d:8f:ec:03:65:42:b0:
0e:e5:d3:09:62:8e:b0:83:0d:37:cf:f7:8d:d9:17:
65:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:1D:26:91:E7:23:DD:2F:80:95:85:1E:8C:76:75:DC:88:0B:99:54
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/xh0mkecj3S-AlYUejHZ13IgLmVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.30.0/24
Signature Algorithm: sha256WithRSAEncryption
73:d7:b1:9d:85:fb:be:ce:f8:70:32:16:8e:8c:1a:66:47:d1:
2a:85:5e:40:af:1b:d2:b3:d4:7d:ac:fb:a4:b8:2a:b4:2c:f6:
92:60:f1:c9:df:60:78:61:c0:6f:96:c1:e5:6a:83:5f:2c:c6:
e4:dd:ae:51:9c:b6:cd:3b:a5:8a:f6:c4:68:b3:f1:f3:f8:c9:
3b:1f:a0:e8:6c:d1:0a:65:ef:18:e5:58:b8:b7:ae:3d:22:83:
0f:5c:c9:e7:69:d8:ae:08:b7:1d:3e:4a:bb:85:4f:62:92:dc:
8f:87:06:8b:6b:b6:89:9b:2e:a4:22:ff:87:11:bf:07:0a:a8:
90:79:be:51:c1:e8:b2:8f:3d:1e:84:21:4b:af:7e:1c:17:13:
ab:12:94:fa:32:af:71:f3:7f:37:39:25:15:56:d4:86:9e:47:
d2:e3:2f:ca:b3:e8:9a:b3:3e:d9:ac:e6:ac:41:ef:bd:f0:12:
f5:42:f6:a1:6a:0d:9f:90:9d:aa:c5:47:c0:9f:91:e7:6e:48:
16:56:d7:f4:82:48:69:66:87:48:b6:33:02:72:26:00:9c:fa:
59:22:bc:ca:c6:d8:c3:31:ed:4f:a7:5f:2b:21:d7:f7:66:16:
52:f5:e6:7b:b2:28:da:a6:e8:94:2c:11:b1:a8:19:03:66:66:
3c:83:2d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:37 2024 by rpki-client on console-fra.rpki-client.org