Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/yPoN4I8pYPaI4-4vjo-PwYt4yEU.roa
File: yPoN4I8pYPaI4-4vjo-PwYt4yEU.roa (raw, json)
Hash identifier: nC7TYQn0N2YRdbqAv8zM4YNlUqrrBr74bxB2PnmnfNo=
Subject key identifier: C8:FA:0D:E0:8F:29:60:F6:88:E3:EE:2F:8E:8F:8F:C1:8B:78:C8:45
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018C57854644E6378FE8E52B6B9163C253B8
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/yPoN4I8pYPaI4-4vjo-PwYt4yEU.roa
Signing time: Mon 11 Dec 2023 06:16:41 +0000
ROA not before: Mon 11 Dec 2023 06:16:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 109.122.44.0/24 maxlen: 24
109.122.43.0/24 maxlen: 24
109.122.40.0/24 maxlen: 24
89.251.18.0/24 maxlen: 24
89.251.23.0/24 maxlen: 24
89.251.22.0/24 maxlen: 24
89.251.24.0/24 maxlen: 24
89.251.20.0/24 maxlen: 24
89.251.29.0/24 maxlen: 24
89.251.31.0/24 maxlen: 24
146.19.56.0/24 maxlen: 24
91.200.221.0/24 maxlen: 24
91.226.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 16 Dec 2023 07:13:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:57:85:46:44:e6:37:8f:e8:e5:2b:6b:91:63:c2:53:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Dec 11 06:16:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8fa0de08f2960f688e3ee2f8e8f8fc18b78c845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b8:04:70:8b:4c:ea:58:ca:bc:e3:55:a3:26:
17:0b:a9:29:1a:67:09:a3:d3:7a:57:f2:90:70:8d:
50:bd:06:fd:f5:28:08:f2:92:b9:dd:2d:2c:44:ac:
2c:0f:1d:a3:b9:c8:28:bf:7a:51:2c:66:16:b2:2a:
0b:3d:04:d8:09:c9:b6:70:e2:9b:8d:4c:58:4c:3e:
11:59:93:93:4c:90:74:bd:1a:35:a3:d7:b0:a6:ea:
ed:61:06:db:7f:0e:1c:43:35:1b:15:0e:cf:8b:86:
f3:37:4b:23:9e:fe:65:72:84:0a:72:73:ee:e6:11:
9f:68:9b:37:f0:ec:82:59:44:fb:06:b5:f7:0e:5c:
a8:8b:e2:75:2d:97:90:4e:d8:0a:9a:c3:fa:99:6d:
a2:93:6f:93:30:a2:16:2d:fd:8d:cc:61:8d:fe:94:
ec:f0:ff:91:46:b2:de:74:88:79:28:39:50:78:a4:
b0:0e:54:af:f2:21:2d:e3:9c:65:ad:50:49:b6:d3:
2f:df:c0:b3:3b:5c:de:37:f0:0c:ae:31:63:03:98:
88:31:ab:59:c9:88:ac:72:0b:3e:a8:a9:8f:fa:d7:
27:5a:de:14:15:eb:d9:35:fe:9b:00:66:67:64:2a:
3f:26:ec:7d:1b:60:d9:72:95:f8:48:83:65:57:39:
17:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:FA:0D:E0:8F:29:60:F6:88:E3:EE:2F:8E:8F:8F:C1:8B:78:C8:45
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/yPoN4I8pYPaI4-4vjo-PwYt4yEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.18.0/24
89.251.20.0/24
89.251.22.0-89.251.24.255
89.251.29.0/24
89.251.31.0/24
91.200.221.0/24
91.226.59.0/24
109.122.40.0/24
109.122.43.0-109.122.44.255
146.19.56.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:f0:fc:81:7f:4d:f1:a3:41:f7:96:07:61:7c:d8:15:c5:cf:
4d:6a:7b:b9:be:75:e7:a1:d0:41:4f:e8:3f:ad:e8:57:51:46:
e7:61:f0:11:0b:45:f2:6a:70:d3:00:f3:42:84:a7:f3:79:e1:
f7:97:47:0d:f2:a5:d1:87:9b:58:9d:0f:71:6e:1e:7d:f6:a5:
79:25:e9:13:c7:60:31:48:97:b8:4a:07:6d:49:23:b7:07:95:
b9:c4:8b:98:f7:40:00:b4:76:c2:6e:58:36:37:b4:0e:c6:03:
3d:2b:53:c8:43:eb:52:d4:14:c4:14:0e:3e:33:34:84:86:b3:
5f:50:ba:74:a2:38:44:1c:6d:0d:f8:73:d0:9d:5e:b6:7b:55:
e2:57:9b:0f:7d:03:e0:e3:65:2d:8e:fe:87:01:5b:e8:8d:19:
24:cc:79:75:c5:f7:e7:d2:2e:b9:ef:80:a1:b1:06:ee:f5:c1:
26:7b:25:a2:94:08:b3:4e:fc:e1:f1:7f:08:2c:4e:f0:b4:5b:
44:9f:48:fa:0b:06:92:10:fb:ab:77:8f:38:9e:f5:1f:ad:12:
9e:70:14:cf:dd:24:06:8f:ab:31:08:fe:90:21:19:ba:11:d4:
19:8b:cc:61:5e:b6:62:5f:0a:16:59:76:b8:55:dd:db:82:3d:
f2:93:66:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:07 2024 by rpki-client on console-ams.rpki-client.org