Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/rZC4u9Ir5w8wGIKfpqAhg1Bykkw.roa
File: rZC4u9Ir5w8wGIKfpqAhg1Bykkw.roa (raw, json)
Hash identifier: uNRrk/9aGZf0UbyIvXEDyPSNN/h68RLBbngsVbutoAA=
Subject key identifier: AD:90:B8:BB:D2:2B:E7:0F:30:18:82:9F:A6:A0:21:83:50:72:92:4C
Certificate issuer: /CN=3c4d3fb044eb1c0a11be0602aceef88e5f5d2ddf
Certificate serial: 01856AF7E6857DFD33441671EBBA35CCFF82
Authority key identifier: 3C:4D:3F:B0:44:EB:1C:0A:11:BE:06:02:AC:EE:F8:8E:5F:5D:2D:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/rZC4u9Ir5w8wGIKfpqAhg1Bykkw.roa
Signing time: Sun 01 Jan 2023 01:35:09 +0000
ROA not before: Sun 01 Jan 2023 01:35:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 86.36.48.0/24 maxlen: 24
86.36.49.0/24 maxlen: 24
86.36.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6a:f7:e6:85:7d:fd:33:44:16:71:eb:ba:35:cc:ff:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4d3fb044eb1c0a11be0602aceef88e5f5d2ddf
Validity
Not Before: Jan 1 01:35:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad90b8bbd22be70f3018829fa6a021835072924c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1e:3d:f1:29:92:0a:bb:82:f9:1c:e8:32:58:
1c:d2:44:8a:6b:48:9f:94:c2:8d:b8:9f:a3:54:d6:
a9:2a:7a:5b:bd:88:6d:82:28:8e:c2:16:ab:ce:78:
d0:53:fd:fc:98:5d:57:f3:f0:06:37:1a:e5:66:12:
cd:df:ce:82:4a:6e:4b:af:a4:4a:f0:c8:b3:ba:1a:
41:c8:26:d3:f2:04:83:b8:a8:f2:a7:fd:1a:0b:7b:
ad:5a:0b:e7:44:b5:4b:74:42:49:14:52:1f:25:de:
97:04:e4:97:ae:80:16:9f:d5:99:21:fb:cf:a6:de:
e7:f6:8d:6d:cf:fe:13:70:ad:4f:4f:30:90:2d:e7:
22:6b:5d:c2:d9:da:e5:2e:79:f9:51:59:99:66:d3:
c4:d6:b6:c8:5f:f8:4f:9d:ea:43:28:c6:cd:58:2f:
2c:69:f2:40:18:b8:3f:97:6a:fd:c9:42:c1:c7:6f:
87:7b:17:e1:22:2d:7a:63:8b:ee:5b:78:6c:ef:b3:
86:7c:17:21:d0:d0:5f:89:b3:26:d5:2c:20:73:04:
d6:57:34:74:8f:db:17:64:0a:73:bc:50:7b:1c:b2:
f8:ed:80:ce:bc:4a:14:6d:23:64:a2:19:74:4a:ee:
ce:a0:1e:a1:7b:b3:4b:47:f4:85:00:36:4a:25:df:
03:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:90:B8:BB:D2:2B:E7:0F:30:18:82:9F:A6:A0:21:83:50:72:92:4C
X509v3 Authority Key Identifier:
keyid:3C:4D:3F:B0:44:EB:1C:0A:11:BE:06:02:AC:EE:F8:8E:5F:5D:2D:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/rZC4u9Ir5w8wGIKfpqAhg1Bykkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.36.48.0/23
86.36.104.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:75:22:f1:26:6a:4a:2f:f6:a9:f8:19:af:1e:1c:8a:68:d8:
22:7b:fc:a9:36:a6:e7:46:3e:3a:e7:5e:7a:1b:17:ad:21:4b:
dd:f4:09:b1:be:06:6e:dd:09:90:3a:f0:f5:fb:93:c0:67:82:
fc:9f:4f:6b:8b:90:84:51:47:46:9d:62:bb:1a:9c:64:c6:5d:
ce:39:09:f2:7d:ee:d7:52:f3:b1:1d:e2:1c:1d:bf:8b:64:f9:
5c:e7:b7:8f:fc:b6:28:cd:6b:6b:c4:6c:e4:ff:0e:d1:0b:b5:
71:60:f7:0d:01:6a:04:39:63:ad:80:16:ee:3f:80:a2:41:3b:
e2:b5:46:7f:e7:2a:6c:59:79:1a:2f:e9:bc:81:f1:ef:64:97:
a2:42:3d:69:7a:4a:bf:56:ed:60:fb:ee:a2:02:c3:c1:28:60:
27:c2:57:8f:98:12:20:f8:5e:19:8b:f5:c4:a1:b8:82:b0:e8:
8a:42:6c:b8:ef:6b:5c:50:e6:2e:6f:81:58:e9:93:f1:c7:4b:
cc:7e:6a:57:ff:19:c0:32:f8:83:cd:d8:f0:74:4f:03:d4:73:
63:6e:c3:d9:59:53:93:b5:2c:0e:28:77:f3:7b:25:69:da:2d:
21:e5:ae:80:38:91:4a:8a:43:08:ce:fd:53:0f:31:6c:7b:b8:
0e:ac:35:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:38 2024 by rpki-client on console-ams.rpki-client.org