Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/cZ9RbmknZWWNF3PaDHMf6Lv6tyU.roa
File: cZ9RbmknZWWNF3PaDHMf6Lv6tyU.roa (raw, json)
Hash identifier: ghNUwupftYbfZb34BBDJUPPmf4ZyXWQKOvCnyFhMr/E=
Subject key identifier: 71:9F:51:6E:69:27:65:65:8D:17:73:DA:0C:73:1F:E8:BB:FA:B7:25
Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial: 01856D663C59886CDAF18BD838E6AD21CF46
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/cZ9RbmknZWWNF3PaDHMf6Lv6tyU.roa
Signing time: Sun 01 Jan 2023 12:54:54 +0000
ROA not before: Sun 01 Jan 2023 12:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3457
IP address blocks: 83.125.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:66:3c:59:88:6c:da:f1:8b:d8:38:e6:ad:21:cf:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Validity
Not Before: Jan 1 12:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=719f516e692765658d1773da0c731fe8bbfab725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cd:7e:93:89:fb:90:8a:50:59:5c:67:1a:9c:
ba:e7:cc:4c:b2:75:e2:bc:af:4b:18:2c:4a:dc:71:
ef:82:68:0e:c0:3d:9b:ce:bc:a9:eb:91:a6:02:e4:
2d:50:b4:e8:e6:62:fb:e6:8e:10:bf:5d:d7:f1:3a:
66:83:c0:70:ec:93:4b:9a:13:e5:8b:b4:7a:a2:ef:
7b:11:16:94:5b:eb:22:79:3e:bb:40:15:d8:5a:c8:
0c:3f:34:81:cf:48:4b:e7:c7:23:d2:5d:dd:5e:1a:
3b:cd:53:36:c1:1f:49:f6:47:bc:e5:6f:3a:54:33:
93:77:76:c0:c8:24:de:49:d0:d5:ec:6c:11:c7:3b:
7f:fe:0f:b9:20:a7:5a:d6:ac:81:2d:bb:95:80:7e:
ee:47:b4:7c:ac:46:7d:ad:cf:ff:4c:c0:2d:43:e6:
f7:cc:4b:cf:06:ee:0e:35:3d:60:e6:41:a5:e8:5f:
f6:38:19:ae:d2:17:ef:f2:df:26:52:f5:3f:9f:8f:
df:b0:b8:69:95:22:2f:97:1d:26:e6:65:a0:38:1c:
e1:40:76:e1:0d:0f:f5:48:d4:91:ed:0c:cb:35:76:
99:ea:18:77:f2:15:3d:63:ab:48:2e:91:67:97:17:
3e:3a:e3:1b:66:97:df:d0:40:e8:d2:e1:58:cf:b8:
ad:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9F:51:6E:69:27:65:65:8D:17:73:DA:0C:73:1F:E8:BB:FA:B7:25
X509v3 Authority Key Identifier:
keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/cZ9RbmknZWWNF3PaDHMf6Lv6tyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.125.26.0/24
Signature Algorithm: sha256WithRSAEncryption
20:a0:5b:89:ce:10:94:1a:73:88:b9:21:c1:97:f5:ad:71:98:
53:ef:e7:82:6d:62:a1:12:e6:42:53:cb:9e:f9:3b:eb:3a:62:
5e:e8:38:b5:4d:dd:16:e8:04:57:df:54:e7:b4:0d:a2:76:ef:
16:42:1c:74:84:fc:63:82:df:d3:2b:0d:05:08:22:76:14:ce:
ad:d8:06:17:ef:5c:74:01:1d:b1:39:c5:e0:a7:6b:09:38:5b:
ff:3b:a1:b7:31:9e:64:08:f5:61:be:e2:79:48:fc:1a:93:8c:
d2:9a:23:62:80:12:0e:d5:17:f1:79:a9:c8:a2:d8:2d:09:9b:
ff:d0:4d:d1:6b:5d:d7:41:b9:c6:be:dc:b6:ab:c7:99:2e:19:
c9:26:b5:fd:f4:a6:3b:fc:c9:8c:e9:5e:55:7e:f7:7c:32:27:
e8:10:c7:82:6e:63:d1:3d:5e:2e:57:57:00:f2:4b:44:2b:76:
21:8b:55:38:9b:8e:f5:8d:40:0a:92:82:75:74:33:e0:54:2d:
41:7e:43:a4:4f:66:74:80:d3:8a:b7:03:f7:f1:a3:96:37:dc:
49:bf:dd:c8:25:b9:ab:00:30:93:8f:34:21:00:18:a7:60:99:
6f:e0:72:c0:ab:9e:36:a9:6d:5b:bc:84:80:9d:6f:9a:73:9d:
ed:c2:14:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:11 2024 by rpki-client on console-ams.rpki-client.org