Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/a9zXtz7gXKVvMFLc2kyjcbImIf8.roa
File: a9zXtz7gXKVvMFLc2kyjcbImIf8.roa (raw, json)
Hash identifier: wy3wt1vl8zhI0HSfEUHX15u2v7fHaK/MJmkgguJbTsA=
Subject key identifier: 6B:DC:D7:B7:3E:E0:5C:A5:6F:30:52:DC:DA:4C:A3:71:B2:26:21:FF
Certificate issuer: /CN=7bd5997ed075c2298b461225e1060f577b1d7d4d
Certificate serial: 0185E324C9808372587D58A77A54C30FBF83
Authority key identifier: 7B:D5:99:7E:D0:75:C2:29:8B:46:12:25:E1:06:0F:57:7B:1D:7D:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9WZftB1wimLRhIl4QYPV3sdfU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/a9zXtz7gXKVvMFLc2kyjcbImIf8.roa
Signing time: Tue 24 Jan 2023 09:38:36 +0000
ROA not before: Tue 24 Jan 2023 09:38:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39442
IP address blocks: 185.124.176.0/22 maxlen: 22
89.249.224.0/20 maxlen: 20
Validation: Failed, certificate revoked on Tue 23 May 2023 07:18:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e3:24:c9:80:83:72:58:7d:58:a7:7a:54:c3:0f:bf:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bd5997ed075c2298b461225e1060f577b1d7d4d
Validity
Not Before: Jan 24 09:38:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6bdcd7b73ee05ca56f3052dcda4ca371b22621ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:97:d5:fc:b3:41:32:6d:5e:71:e1:c2:83:c1:
ab:78:55:b6:e3:3f:db:4b:b1:73:38:6b:ea:63:0b:
04:25:bf:71:b0:45:81:79:e8:6c:79:60:ac:c2:eb:
b6:58:04:97:78:10:72:84:a1:b6:9f:3b:d5:4e:e8:
e9:fa:17:bb:61:bf:59:36:d1:3f:0a:0a:3f:2d:cf:
8b:fa:72:05:da:91:c9:60:c2:df:f2:e7:2c:6c:23:
ff:d5:ea:b8:ba:dd:b7:e1:39:00:6d:52:51:f0:f5:
51:af:3f:9f:ae:10:37:0d:66:d2:a7:fb:10:ec:f4:
6a:67:20:6d:33:7e:a0:66:f2:c0:c0:98:da:e2:4c:
96:54:d6:f4:f7:97:7b:73:07:37:fd:b9:c7:25:cb:
ff:cc:38:d7:f1:f0:d8:76:f1:a2:2d:ed:29:bb:1a:
8d:e1:d1:cf:74:2e:fa:51:bc:84:74:48:45:0b:03:
e1:53:66:26:fe:b2:1c:c0:ae:9d:cb:18:b1:12:6c:
0f:0b:15:77:83:9a:45:45:99:73:cb:b7:55:fd:1e:
47:7b:81:c2:78:5b:51:f0:6b:73:20:de:bc:16:2b:
b7:df:b9:2b:cc:3a:33:85:e1:13:28:58:ba:cc:8a:
ab:59:dd:0e:0a:fd:c9:4c:b4:94:90:be:24:68:ad:
b8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:DC:D7:B7:3E:E0:5C:A5:6F:30:52:DC:DA:4C:A3:71:B2:26:21:FF
X509v3 Authority Key Identifier:
keyid:7B:D5:99:7E:D0:75:C2:29:8B:46:12:25:E1:06:0F:57:7B:1D:7D:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9WZftB1wimLRhIl4QYPV3sdfU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/a9zXtz7gXKVvMFLc2kyjcbImIf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.224.0/20
185.124.176.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:72:14:c7:12:a1:7d:ff:ea:4f:10:16:66:74:af:17:39:50:
43:07:0b:4d:37:4e:70:71:d5:73:08:a7:c1:d8:97:67:7d:26:
d7:2d:71:e1:bf:fa:b2:4c:8d:66:20:ac:70:1a:f1:5e:36:b7:
98:74:af:cb:e6:3f:80:10:45:06:2d:17:b8:c3:24:fa:08:86:
88:66:e6:6f:62:e5:5a:a7:db:34:e5:3e:27:59:f6:48:29:d8:
2b:3e:ec:c7:df:2c:e2:26:70:83:e3:c8:1b:30:51:df:53:0b:
49:95:7b:47:07:e0:dc:93:e8:7d:37:26:ca:0f:06:56:8c:87:
d2:25:e9:97:dc:1a:9a:87:b7:2a:ba:94:0b:4b:a7:6f:37:fe:
48:64:77:88:48:69:e5:29:7f:17:9c:0f:23:35:35:09:29:ef:
67:b2:c0:ee:31:2a:63:04:f2:e7:ff:ac:95:3d:73:07:d7:69:
8f:86:23:a9:7c:ff:25:ce:9b:7f:8f:70:eb:14:df:cc:e0:f1:
60:1a:f9:87:49:39:c2:b8:7f:c4:6e:ab:af:41:f7:12:44:5a:
4e:84:a4:e9:bb:bd:6d:db:4b:f3:a4:50:a6:93:57:db:29:70:
e5:28:a0:9a:bb:f3:41:a9:47:20:cd:95:c5:fc:31:c6:84:a9:
e0:6c:f6:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:11 2024 by rpki-client on console-fra.rpki-client.org