Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/ZxWPybR-aBB7cywTvLZaLEQ9ES4.roa
File: ZxWPybR-aBB7cywTvLZaLEQ9ES4.roa (raw, json)
Hash identifier: 5qr6W5u7pg6wVUgjcG00isBh1H2KMC6jRz4Y35JRO44=
Subject key identifier: 67:15:8F:C9:B4:7E:68:10:7B:73:2C:13:BC:B6:5A:2C:44:3D:11:2E
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018A9904BCBA8E0F49781232E95D80F3DDCD
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/ZxWPybR-aBB7cywTvLZaLEQ9ES4.roa
Signing time: Fri 15 Sep 2023 13:25:38 +0000
ROA not before: Fri 15 Sep 2023 13:25:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 89.251.17.0/24 maxlen: 24
91.226.57.0/24 maxlen: 24
193.93.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Sep 2023 19:47:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:99:04:bc:ba:8e:0f:49:78:12:32:e9:5d:80:f3:dd:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Sep 15 13:25:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=67158fc9b47e68107b732c13bcb65a2c443d112e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:55:74:e0:7f:11:90:e3:74:d0:a4:75:a1:d0:
46:a1:ab:9a:1f:0a:4b:17:5e:4b:df:b6:e1:e0:29:
28:3e:94:99:dd:3b:a7:a7:69:24:53:af:b7:77:1f:
41:2f:43:6d:63:6e:be:cc:d0:69:0e:f2:90:68:38:
55:11:7b:1e:81:51:ad:75:75:5d:f1:2a:a2:14:d7:
b0:8e:38:e2:17:cf:3f:a4:0f:50:68:40:70:3e:17:
6a:47:b8:49:86:e3:53:80:67:93:c5:7f:cf:19:55:
a8:4f:b5:72:8b:9c:c2:c4:68:13:a3:3b:6d:0c:03:
55:c7:56:4b:c0:63:57:96:ad:d5:8f:0c:7e:b7:24:
1f:15:61:04:73:be:00:c5:8c:94:3f:34:22:55:43:
01:5d:99:37:75:c3:97:aa:93:c5:23:0b:84:62:3f:
d2:8f:db:40:52:e9:8a:96:f3:5a:69:45:b2:6c:e8:
18:2f:88:a3:0c:c9:2d:4e:e1:97:3d:45:27:cb:e5:
6e:ad:b3:36:45:a6:3b:bb:2f:af:fc:da:82:dc:3e:
34:3c:31:d9:6d:94:28:14:41:8f:60:b3:13:35:ea:
6f:a2:c9:b0:98:05:48:36:eb:98:16:01:4a:79:b3:
65:fc:ff:9f:d0:41:ce:f9:ba:93:e0:42:b0:ba:61:
d4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:15:8F:C9:B4:7E:68:10:7B:73:2C:13:BC:B6:5A:2C:44:3D:11:2E
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/ZxWPybR-aBB7cywTvLZaLEQ9ES4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.17.0/24
91.226.57.0/24
193.93.53.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:c3:45:a4:4e:40:3d:e7:f9:dd:18:fe:7c:18:85:cb:a3:ca:
4e:9f:21:e4:35:65:04:19:98:f0:5f:c4:90:cb:f8:53:9a:3a:
66:a1:27:90:c9:9a:f6:cc:e9:f8:18:fb:29:9b:2b:c3:66:63:
73:9e:0d:e2:f3:aa:10:96:20:b2:f4:39:7a:62:ef:8a:21:bb:
24:3c:f5:fe:9b:92:be:20:d5:01:10:4d:87:f7:3f:f9:f8:34:
63:f7:62:b7:35:c2:d1:52:48:d8:d8:9d:d5:85:7d:32:f7:a5:
16:eb:6f:2d:8e:98:1c:9f:34:a9:e0:60:e3:c5:44:38:58:e6:
b8:3e:59:f5:1e:ff:13:65:41:82:73:d4:e0:8c:c7:0c:1b:cc:
30:b4:88:d0:3b:95:ca:ee:34:59:1d:cb:37:be:16:57:f0:ae:
eb:b2:01:fc:bd:3e:67:9a:82:c1:d7:fd:b3:dd:96:4b:04:bf:
da:d6:06:1d:15:03:18:fe:e2:f0:f9:82:b9:af:e3:a5:d8:9d:
0a:31:73:2b:ff:62:e9:48:76:8b:3a:73:7a:ae:0b:a4:07:47:
f6:ca:c5:14:17:e2:4a:45:ce:58:e2:79:de:26:31:75:48:07:
db:b3:dc:54:6e:33:f1:e3:fc:90:05:c3:b7:4b:cf:90:4f:57:
58:1a:fe:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:36 2024 by rpki-client on console-fra.rpki-client.org