Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/tlL1F-TAzGbbjpi26wDuKn0ST7g.roa
File: tlL1F-TAzGbbjpi26wDuKn0ST7g.roa (raw, json)
Hash identifier: 0VBqMsw/x4RM/ZQP/3CE2Ok0m1PQKoDFc+TYvijAJeM=
Subject key identifier: B6:52:F5:17:E4:C0:CC:66:DB:8E:98:B6:EB:00:EE:2A:7D:12:4F:B8
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 0188959D4B139D068902231693BAB81E7D45
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/tlL1F-TAzGbbjpi26wDuKn0ST7g.roa
Signing time: Wed 07 Jun 2023 11:28:13 +0000
ROA not before: Wed 07 Jun 2023 11:28:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 89.23.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:95:9d:4b:13:9d:06:89:02:23:16:93:ba:b8:1e:7d:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Jun 7 11:28:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b652f517e4c0cc66db8e98b6eb00ee2a7d124fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:14:09:1b:e9:2b:47:8c:7a:50:1b:1f:e1:10:
9e:54:9e:34:bd:68:3a:09:86:d2:ab:2d:2e:a8:2d:
bf:0e:e7:25:5b:f2:37:4f:ee:f3:fc:5b:ee:30:72:
b9:3c:2b:99:d8:66:2b:1f:f7:54:b3:5d:ad:5e:f9:
f9:c6:80:3a:b4:06:62:eb:e7:22:b0:e9:cb:3d:e7:
99:fc:a9:6f:ba:a8:34:2a:e3:37:4c:e2:70:71:5e:
15:33:5c:b6:b8:da:3c:3c:b2:c1:c1:3e:fc:d4:6d:
f0:7a:af:af:e9:72:a9:4a:d7:97:6c:61:5c:c7:16:
01:a2:10:2a:c7:98:9c:dd:ed:d2:ad:b1:cf:23:6b:
4d:ee:a4:7a:d8:cf:c7:c7:d0:63:53:2c:7f:74:93:
72:bd:e1:14:e8:fe:4e:b1:e3:b6:0d:44:32:cb:de:
5f:fe:df:19:a6:aa:8b:fd:7c:62:38:13:1c:0b:7b:
9d:6c:73:95:76:47:9d:d1:82:86:dd:5b:79:7a:40:
26:03:c4:7c:51:31:65:d4:fb:c4:bc:4c:04:4a:b9:
6c:7a:99:6c:76:98:31:b7:16:4d:3f:ee:b2:14:7c:
c6:6d:94:c5:fd:19:bb:64:5d:dd:6e:f6:05:94:bc:
c6:b7:75:35:1c:37:c4:13:7d:26:4f:12:82:29:d5:
33:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:52:F5:17:E4:C0:CC:66:DB:8E:98:B6:EB:00:EE:2A:7D:12:4F:B8
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/tlL1F-TAzGbbjpi26wDuKn0ST7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.83.0/24
Signature Algorithm: sha256WithRSAEncryption
50:b4:a2:03:6f:1b:1a:29:df:95:6f:b0:30:f4:99:9c:f1:78:
52:27:12:c8:27:d9:14:b0:e5:75:b5:3a:78:db:eb:84:0d:36:
64:b3:60:93:2b:60:d4:09:51:7a:36:e4:e7:95:aa:1e:82:ed:
85:1c:80:fa:3e:79:13:33:19:10:3c:f4:ad:89:be:ed:6b:14:
9a:79:eb:61:fb:fc:1d:13:a5:b1:c7:f1:1a:b5:a5:86:6a:7a:
c6:df:17:94:e4:9c:0c:1e:67:d1:e1:0c:9c:61:34:b2:b4:5f:
b3:bb:01:9f:61:91:67:3d:26:c9:1b:9d:ee:74:d2:26:34:56:
27:e2:74:12:07:bb:92:1d:ca:1c:50:a3:df:28:48:63:ee:b0:
77:0f:fc:e5:62:25:ce:8d:3c:f8:c4:a5:54:53:b4:70:67:ed:
ae:25:e3:c8:44:60:80:d9:f4:8c:89:0b:30:d7:e7:6f:af:e8:
6e:25:e0:c3:4b:19:6e:59:9a:4a:4a:20:fd:17:1e:f0:cf:b5:
17:17:09:08:3c:54:18:0c:8b:29:34:52:ce:ee:88:41:bc:99:
d0:d8:79:78:58:9e:5e:0a:74:ab:48:dc:20:9f:4a:b4:34:90:
9d:bb:8a:58:20:94:e6:0f:d1:41:61:ea:84:da:5b:98:04:b0:
05:d2:59:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:45 2024 by rpki-client on console-fra.rpki-client.org