Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/zyTQJVgvUXJdGoEdLu828Z6wOSQ.roa
File: zyTQJVgvUXJdGoEdLu828Z6wOSQ.roa (raw, json)
Hash identifier: LKjURtVWftQABZaBkV/xFY5JBhYCmwMPs2s4B0Eh3dI=
Subject key identifier: CF:24:D0:25:58:2F:51:72:5D:1A:81:1D:2E:EF:36:F1:9E:B0:39:24
Certificate issuer: /CN=5c30d95046331bdce3018b7ffe0f13dbf9fc718d
Certificate serial: 01856F3900AE92A76AA84DB0C252B2245911
Authority key identifier: 5C:30:D9:50:46:33:1B:DC:E3:01:8B:7F:FE:0F:13:DB:F9:FC:71:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDDZUEYzG9zjAYt__g8T2_n8cY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/zyTQJVgvUXJdGoEdLu828Z6wOSQ.roa
Signing time: Sun 01 Jan 2023 21:24:44 +0000
ROA not before: Sun 01 Jan 2023 21:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42160
IP address blocks: 164.138.104.0/21 maxlen: 21
91.230.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:39:00:ae:92:a7:6a:a8:4d:b0:c2:52:b2:24:59:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c30d95046331bdce3018b7ffe0f13dbf9fc718d
Validity
Not Before: Jan 1 21:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf24d025582f51725d1a811d2eef36f19eb03924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4e:56:79:5e:76:4b:f3:33:99:06:ad:cf:07:
e0:f2:b4:ba:1d:2e:eb:40:40:81:a4:87:bd:d1:5d:
59:d0:7f:9d:62:7b:82:6c:20:13:35:59:38:c8:72:
43:d8:2d:ec:f6:41:63:54:82:21:e2:53:f3:34:7c:
6e:7a:ec:b5:89:b0:c6:bc:9f:ae:b9:89:ad:49:25:
d8:84:b7:a5:5f:fc:31:43:0f:29:4b:22:51:af:cf:
fc:ea:52:93:e9:55:c8:b2:a2:5a:ab:d3:c5:21:60:
d8:45:1e:d9:86:73:a0:34:69:0b:e0:0c:28:27:69:
a3:e8:a4:05:98:77:a4:50:ce:95:c9:44:3c:23:66:
33:33:3e:5d:be:1c:8b:48:ee:5c:3b:9d:f2:78:6b:
e0:5b:42:d4:7c:62:50:77:c3:26:c3:47:c2:82:cb:
d7:6f:cf:a6:57:fb:a3:07:55:9f:37:a6:6f:bb:10:
dd:2a:ff:08:a2:06:5f:05:00:31:cd:97:ab:be:b4:
78:59:67:ae:ab:a2:d6:84:46:a4:1f:8d:a9:c7:d4:
ec:9c:0a:86:4f:08:57:02:e7:dd:ff:d5:69:30:13:
51:aa:e9:14:2d:5b:3d:e2:45:39:8c:87:fc:df:18:
45:5c:59:ce:30:d0:18:69:67:92:5d:9b:5d:93:73:
4f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:24:D0:25:58:2F:51:72:5D:1A:81:1D:2E:EF:36:F1:9E:B0:39:24
X509v3 Authority Key Identifier:
keyid:5C:30:D9:50:46:33:1B:DC:E3:01:8B:7F:FE:0F:13:DB:F9:FC:71:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDDZUEYzG9zjAYt__g8T2_n8cY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/zyTQJVgvUXJdGoEdLu828Z6wOSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.64.0/24
164.138.104.0/21
Signature Algorithm: sha256WithRSAEncryption
7a:9e:29:3d:0f:e2:40:d9:eb:04:aa:7a:ec:8d:63:b7:d4:2b:
e3:09:71:8a:cb:e0:00:96:ff:32:6c:7d:b8:ea:03:5f:67:a6:
2d:f9:76:60:96:cc:bc:ea:9e:ae:5c:95:21:e3:71:7a:6d:25:
b1:6c:48:dd:d9:dd:f2:09:cf:6d:6b:bf:1f:4a:db:a5:36:d7:
a6:ca:3d:b1:67:bc:6f:fe:78:3d:6c:c6:02:fd:42:2f:54:f7:
fc:df:a0:2e:0f:37:1d:d8:14:55:f9:18:a0:af:d4:14:aa:5f:
25:a9:55:90:e0:6e:13:cb:36:ec:72:ac:d4:b3:07:46:e1:35:
e8:c5:e4:56:7e:98:2b:7e:bf:9f:c0:6b:30:01:8a:dd:dd:0e:
8f:99:1e:f0:56:d6:48:de:a8:4b:dd:b3:e6:50:1b:19:a9:2f:
82:a5:b8:23:a0:2f:b0:77:8a:77:91:44:f4:1b:e3:31:0b:ad:
c2:0c:6a:c0:9c:34:15:55:49:82:4f:da:bd:2d:82:9d:72:e6:
e7:6c:54:00:7e:f3:64:d0:3d:46:24:e3:a9:81:69:66:da:9a:
fa:43:30:15:6f:94:60:15:ea:d1:cd:55:a4:24:ba:8d:c4:ec:
f8:3a:ef:89:ff:58:35:be:68:a7:c5:1c:37:c5:0a:2b:d7:fd:
6b:2d:95:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:53 2024 by rpki-client on console-fra.rpki-client.org