Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/y4XAgmRgagy01UFxn17hWJ7ywQg.roa
File: y4XAgmRgagy01UFxn17hWJ7ywQg.roa (raw, json)
Hash identifier: vTNU1SCXy2ToDRm1V0Uc7ijxWBN1c6QayX8KaNzJtlI=
Subject key identifier: CB:85:C0:82:64:60:6A:0C:B4:D5:41:71:9F:5E:E1:58:9E:F2:C1:08
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01874640571CFC3419A327F366CEEE5321C5
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/y4XAgmRgagy01UFxn17hWJ7ywQg.roa
Signing time: Mon 03 Apr 2023 08:33:54 +0000
ROA not before: Mon 03 Apr 2023 08:33:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.251.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 08 Apr 2023 04:49:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:46:40:57:1c:fc:34:19:a3:27:f3:66:ce:ee:53:21:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Apr 3 08:33:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb85c08264606a0cb4d541719f5ee1589ef2c108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f7:c7:21:91:79:41:ab:e4:44:23:6c:d1:a4:
d6:5c:9d:12:6e:1a:6b:90:e0:25:b5:88:9a:9d:62:
91:5a:05:3c:c4:b7:ab:92:e2:20:86:0f:53:bd:94:
84:ea:b4:1c:17:98:89:6e:f2:1d:55:43:ab:bf:a9:
fd:ef:4b:49:de:4a:9b:ca:13:6f:75:d1:33:3e:ee:
14:fa:48:ae:fd:e6:9e:5b:77:fb:ce:b3:c8:9a:2f:
99:1b:db:76:6d:f6:a1:3a:24:10:bb:20:3d:75:3f:
b9:52:fd:48:80:e1:18:c8:f8:50:19:f9:8d:12:fa:
4e:61:fc:04:91:ae:21:7b:33:96:71:5d:f5:a1:53:
7f:50:10:44:bd:cf:bf:88:21:c9:e4:ed:ce:34:f2:
ee:e0:d3:3b:6f:01:a9:f4:ed:c9:3a:24:f0:86:e2:
e3:17:d4:b7:dd:bf:68:0e:df:b4:ed:1f:3b:33:fa:
21:ae:a7:84:1a:c0:da:cc:21:50:32:e3:7d:1a:5c:
46:53:45:32:00:62:db:8b:d9:d3:56:fc:24:02:70:
b6:ce:8d:a3:3f:10:34:3b:66:8d:62:36:44:f5:47:
61:02:b3:37:56:1a:fc:fb:0a:79:8e:19:ce:d5:57:
57:33:0e:dd:14:15:ef:6c:a0:10:d0:f8:aa:1b:22:
f7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:85:C0:82:64:60:6A:0C:B4:D5:41:71:9F:5E:E1:58:9E:F2:C1:08
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/y4XAgmRgagy01UFxn17hWJ7ywQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.22.0/24
Signature Algorithm: sha256WithRSAEncryption
65:92:76:3a:c7:de:c8:5d:b5:d6:18:89:f1:78:f8:91:13:dc:
9f:a3:19:aa:2c:aa:cc:fe:a4:e1:87:b7:7a:24:fc:88:27:10:
4e:d6:11:03:72:6e:5e:99:df:bf:ce:fd:72:ea:e1:7a:90:8d:
3c:bb:1d:c6:67:f6:f7:97:aa:97:69:c0:0d:af:5e:b5:01:62:
bb:27:12:fb:17:71:5e:8a:6b:c8:2c:16:c5:a0:66:19:64:04:
39:89:c3:bc:f0:51:23:3a:2d:f6:d0:59:9a:6c:d3:f8:58:25:
26:1c:00:b5:ba:3b:f3:b9:41:f7:51:1b:c5:38:6d:55:c9:6a:
32:7b:52:84:9b:04:47:3d:77:43:71:a6:23:75:16:fd:c5:79:
60:be:62:1b:b7:6b:f5:52:e7:49:8b:57:5d:15:b3:02:c8:fc:
f1:13:c8:c7:78:4c:4c:19:2e:0a:85:45:1e:9c:38:e5:e4:b2:
9d:1f:7c:13:c6:a0:19:0d:f5:f7:4b:47:ed:77:09:72:48:4c:
19:a2:52:ac:e3:a5:a9:5c:7b:3c:ff:8e:8e:57:44:79:db:32:
12:96:d6:da:95:8d:06:44:15:5f:fc:b3:0d:e6:e3:21:a6:c2:
43:36:05:ec:3f:d6:ff:83:ff:ad:1a:3f:96:ca:53:bd:0b:b6:
72:f9:7a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:07 2024 by rpki-client on console-ams.rpki-client.org