Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/ZXjV-Mf84jNwgt92zC-uW0yi2Xc.roa
File: ZXjV-Mf84jNwgt92zC-uW0yi2Xc.roa (raw, json)
Hash identifier: cl+aoBpw0+g3zfvE/NlBbZ8mkPt6i3MEnQz9fkQc78A=
Subject key identifier: 65:78:D5:F8:C7:FC:E2:33:70:82:DF:76:CC:2F:AE:5B:4C:A2:D9:77
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018E5DCD64DDBFD128154A5AED66982D9F93
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/ZXjV-Mf84jNwgt92zC-uW0yi2Xc.roa
Signing time: Wed 20 Mar 2024 21:38:45 +0000
ROA not before: Wed 20 Mar 2024 21:38:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47679
IP address blocks: 89.185.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 Apr 2024 07:36:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:5d:cd:64:dd:bf:d1:28:15:4a:5a:ed:66:98:2d:9f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Mar 20 21:38:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6578d5f8c7fce2337082df76cc2fae5b4ca2d977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8a:25:35:9a:7a:40:59:2d:19:7a:15:ce:aa:
5c:c6:f3:19:47:37:ea:1d:e9:b6:10:df:ea:90:90:
2b:91:e3:6c:65:4f:c5:a6:00:59:e6:d5:dd:06:ee:
37:62:32:48:bc:7f:1d:ef:1e:2e:ed:e8:fc:67:3e:
f2:67:7d:ad:8e:fb:07:25:d6:53:ab:60:16:ba:c6:
9f:12:62:01:3e:e4:98:c6:bc:29:f9:ae:80:95:2f:
37:1c:19:46:df:f5:4d:05:31:48:3f:bb:3c:54:05:
f4:67:58:fc:de:37:2a:fa:87:7d:70:7c:3a:86:c1:
6b:b4:6e:2f:8a:cd:9f:57:99:1a:51:2d:e5:9e:54:
76:3f:bf:10:20:5c:5a:cd:ff:30:e1:ff:fc:1a:75:
19:58:60:6b:30:85:03:55:ae:97:9d:ec:64:fc:51:
03:ea:a1:07:66:3d:dc:d6:1d:f8:40:07:30:04:74:
77:2c:88:ff:40:18:cb:69:ae:75:21:08:7f:ba:ae:
d4:36:da:f6:9e:bb:76:d1:f2:fa:ed:9b:7e:a8:ec:
be:aa:15:76:68:a0:b4:a1:fe:0a:3b:e7:ce:32:ee:
41:7d:1f:10:fa:f3:08:76:de:0a:fb:72:b1:d8:ea:
03:bf:a3:00:da:02:54:fa:78:03:3b:b8:3e:17:5d:
b6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:78:D5:F8:C7:FC:E2:33:70:82:DF:76:CC:2F:AE:5B:4C:A2:D9:77
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/ZXjV-Mf84jNwgt92zC-uW0yi2Xc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.0.0/24
Signature Algorithm: sha256WithRSAEncryption
45:bd:48:5e:aa:0e:bb:2d:fb:3a:a9:d8:02:d8:0d:b8:27:55:
b3:12:62:7c:58:30:c3:6b:8d:13:8f:e7:ca:c1:0e:5d:5a:3a:
b0:49:62:68:5f:33:29:82:b3:09:f7:ab:52:bf:dd:62:70:98:
11:50:c6:94:1a:fb:4e:e2:ef:9a:07:4c:e1:55:9b:bd:c8:fa:
af:15:56:b3:76:9a:9d:aa:5b:bc:ff:b4:a6:50:0f:87:93:d6:
67:96:70:bb:6f:e3:89:f3:a8:fc:fe:ff:66:9f:48:a3:d6:e0:
0d:34:23:08:26:1c:61:f8:41:92:0e:9e:53:b6:de:a5:44:73:
18:b2:f6:c4:4d:a2:87:5e:24:6f:eb:cf:32:f3:b0:3f:cb:55:
73:90:e7:5c:06:c1:bb:cd:19:d5:79:7e:1e:4a:0a:31:a3:6c:
c7:fa:37:ce:ec:4d:85:fa:b6:ce:11:53:d3:5c:e5:82:24:a7:
dc:5e:a3:a3:6e:35:f6:4f:49:45:d2:74:5c:57:e0:96:d2:19:
c6:94:96:f6:af:ed:6f:8b:43:df:2d:74:0c:87:ac:2a:c1:84:
db:56:ec:95:4f:f9:a6:02:e8:a6:36:a0:eb:91:1f:d6:8c:f1:
6a:fb:9b:d7:85:d6:ae:62:e5:88:10:7f:3b:d4:a2:2a:17:7c:
be:5e:67:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:46 2024 by rpki-client on console-ams.rpki-client.org