Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/Z-P5abmAi1N9f3sTMXF3KyiGvlk.roa
File: Z-P5abmAi1N9f3sTMXF3KyiGvlk.roa (raw, json)
Hash identifier: rNQ6RF7bAksfdkH9/RqvWlE7R5puhYkwY/juoyjsm/U=
Subject key identifier: 67:E3:F9:69:B9:80:8B:53:7D:7F:7B:13:31:71:77:2B:28:86:BE:59
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 018AB16E4BDA9219740AE0CBF650E61CF9FD
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/Z-P5abmAi1N9f3sTMXF3KyiGvlk.roa
Signing time: Wed 20 Sep 2023 07:11:50 +0000
ROA not before: Wed 20 Sep 2023 07:11:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16589
IP address blocks: 85.239.144.0/24 maxlen: 24
85.239.145.0/24 maxlen: 24
85.239.148.0/24 maxlen: 24
85.239.147.0/24 maxlen: 24
85.239.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Sep 2023 19:30:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b1:6e:4b:da:92:19:74:0a:e0:cb:f6:50:e6:1c:f9:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Sep 20 07:11:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=67e3f969b9808b537d7f7b133171772b2886be59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d6:dd:dd:4a:d9:68:73:aa:cb:c3:99:7b:10:
a7:9c:fa:e4:6b:03:57:3a:04:ec:67:3c:d0:e2:c7:
1c:40:00:92:8a:c5:40:58:6b:39:7d:95:ff:e3:90:
3b:47:f9:63:57:78:b3:87:11:09:12:63:e4:c4:ca:
5c:12:7a:40:e3:c4:12:3a:84:50:c6:01:5c:29:a4:
7a:12:18:a3:22:1f:c1:1b:12:ad:d4:4f:15:ee:e6:
35:9a:9c:b7:cb:1f:df:ae:1d:38:9a:30:53:8a:a2:
35:8d:c2:4f:2e:bb:b8:23:3e:f2:55:67:40:4d:86:
18:aa:cd:2d:0e:eb:a6:8c:c6:e3:44:d0:99:d9:ee:
31:e8:ba:62:77:96:d6:05:bc:fc:56:4f:2a:82:72:
ee:c0:80:50:8c:fa:e3:28:35:4a:cc:7f:97:76:77:
b3:78:e4:c2:dc:7b:6d:79:1e:fe:14:93:21:6e:16:
03:e5:76:26:05:8e:c3:9b:47:45:9b:1a:07:f6:b1:
02:ac:4a:c5:21:43:7a:78:61:1b:56:e1:e2:e8:03:
00:09:06:54:1d:f3:e4:ca:df:93:6c:41:2d:20:0e:
46:c5:75:6c:db:b5:0f:b4:33:0e:73:fa:ef:df:2e:
3a:63:73:49:a1:59:b2:f5:74:b2:0f:b3:3b:b2:06:
f3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E3:F9:69:B9:80:8B:53:7D:7F:7B:13:31:71:77:2B:28:86:BE:59
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/Z-P5abmAi1N9f3sTMXF3KyiGvlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.144.0-85.239.148.255
Signature Algorithm: sha256WithRSAEncryption
b8:68:46:96:12:22:c3:29:ba:3b:4d:0d:64:ce:6f:db:c8:81:
23:10:0b:a6:5d:fc:0d:65:4c:a0:60:80:87:3d:5b:93:a6:ee:
61:58:22:09:6e:8a:c0:22:c4:aa:09:0d:63:2a:e1:60:f0:cb:
aa:1e:40:bf:eb:9b:22:93:3d:db:2d:ae:3c:b6:dd:97:0b:34:
4b:3b:1e:a7:1c:0c:4b:be:7e:e0:f0:de:9f:35:de:4d:da:bc:
99:c2:4a:e4:44:30:2f:67:3e:ca:1b:d1:0a:ff:75:db:5e:27:
4d:fe:96:ab:fd:a4:02:f1:bd:16:16:38:e0:93:15:51:54:14:
48:e2:2a:68:1c:0e:ba:97:06:a0:3d:74:38:7e:c3:5a:78:ec:
54:34:ae:dc:de:75:66:4c:89:76:92:bb:f9:8b:df:98:0f:f1:
7c:cf:e3:4c:c6:0b:27:07:07:0f:87:d4:02:51:59:3a:f0:8f:
42:d3:73:eb:01:71:1a:e4:e0:9d:e6:f0:1c:d2:9c:5c:8e:91:
00:8b:15:a8:44:06:1a:c8:d5:e1:26:12:6d:59:eb:c0:df:3d:
36:a0:7b:d4:cc:90:ca:71:34:f6:01:fc:b6:df:e2:53:5a:eb:
b1:7b:1c:5d:41:04:ce:00:a1:8f:bd:87:2b:3d:93:7e:c0:dc:
56:20:ab:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:53 2024 by rpki-client on console-fra.rpki-client.org