Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/RzmXR5f8n9pRIjuJidcyL8Nujzs.roa
File: RzmXR5f8n9pRIjuJidcyL8Nujzs.roa (raw, json)
Hash identifier: I5prhMR7gzdfl9LqIzvWgqVdERv8rOS6FiMCCeRPT98=
Subject key identifier: 47:39:97:47:97:FC:9F:DA:51:22:3B:89:89:D7:32:2F:C3:6E:8F:3B
Certificate issuer: /CN=7a5b03e2483bed134387bfc3047a13989fdea41f
Certificate serial: 018CF85136194F440E5FB3C83A6733F12857
Authority key identifier: 7A:5B:03:E2:48:3B:ED:13:43:87:BF:C3:04:7A:13:98:9F:DE:A4:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/RzmXR5f8n9pRIjuJidcyL8Nujzs.roa
Signing time: Thu 11 Jan 2024 11:38:40 +0000
ROA not before: Thu 11 Jan 2024 11:38:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15502
IP address blocks: 89.19.67.0/24 maxlen: 24
89.19.79.0/24 maxlen: 24
89.19.86.0/24 maxlen: 24
89.19.89.0/24 maxlen: 24
89.19.88.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jan 2024 13:36:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f8:51:36:19:4f:44:0e:5f:b3:c8:3a:67:33:f1:28:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a5b03e2483bed134387bfc3047a13989fdea41f
Validity
Not Before: Jan 11 11:38:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4739974797fc9fda51223b8989d7322fc36e8f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:68:2a:c8:e9:ac:2a:45:70:09:7a:36:0d:ff:
6c:21:c9:e7:ce:8f:69:36:78:51:56:71:52:c1:07:
4c:63:b8:ea:61:a7:33:87:33:4f:f7:34:6c:ac:93:
fa:36:9f:59:6b:58:b5:d2:e1:8e:ec:ab:ee:f9:07:
44:9a:ec:d8:69:7b:01:32:bd:0c:30:c7:a5:4b:91:
e7:23:0f:be:45:3e:a9:7e:ac:f3:2f:95:2b:a1:d3:
25:84:21:3c:05:94:75:86:94:30:2a:da:a4:ab:c8:
31:35:30:b9:8f:57:da:f0:11:aa:50:5d:52:8c:34:
11:69:be:03:09:28:4a:11:6f:ce:7a:b4:ea:f6:61:
cb:fb:81:b5:f0:e4:b2:16:f1:b2:de:21:2e:95:0a:
e8:db:a4:04:39:e9:b1:8d:74:b1:8e:ba:97:3d:15:
6a:1a:a6:87:dd:54:8c:05:b4:e6:89:75:3a:c2:2a:
a0:40:c2:4f:ad:ba:aa:4e:33:43:a7:41:d4:5b:2e:
2a:50:fd:ab:07:68:16:0e:1f:e8:70:3d:4b:42:fd:
fe:6f:38:10:58:a1:5d:45:c3:c6:c9:ce:73:59:b1:
80:54:9d:73:ca:c9:be:41:0c:f3:1f:9a:3e:b3:ff:
18:05:64:88:4a:9b:be:d9:e4:90:a2:34:ac:99:bf:
f8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:39:97:47:97:FC:9F:DA:51:22:3B:89:89:D7:32:2F:C3:6E:8F:3B
X509v3 Authority Key Identifier:
keyid:7A:5B:03:E2:48:3B:ED:13:43:87:BF:C3:04:7A:13:98:9F:DE:A4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/RzmXR5f8n9pRIjuJidcyL8Nujzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.19.67.0/24
89.19.79.0/24
89.19.86.0/24
89.19.88.0/23
Signature Algorithm: sha256WithRSAEncryption
56:3b:72:11:9d:7a:e3:8a:d4:d3:c9:17:c7:10:85:14:e3:69:
6b:6a:70:ff:29:5c:fc:d6:4c:52:af:b4:57:d4:f4:ac:d2:1f:
87:9a:1d:ed:1f:7a:f1:69:e7:45:a6:22:21:20:61:d5:4f:9d:
b0:ce:e2:5d:6c:c3:cb:fa:19:c2:6f:1d:91:4e:ad:22:bb:b1:
eb:1a:fd:72:58:cb:80:3c:f3:06:28:8d:0c:42:69:fe:60:c1:
fd:01:95:7f:45:e0:f7:d5:0b:a7:8c:a2:ec:e8:97:e4:9f:f2:
61:44:3d:05:73:5e:c4:30:dc:02:98:02:cd:d4:9e:44:b7:a8:
0a:59:58:45:65:03:1d:19:e5:61:df:15:e2:af:06:6d:ce:50:
57:95:e0:f9:b0:7d:7a:c9:e4:14:f8:71:c4:7e:fa:f5:1b:5f:
df:4d:53:4f:b4:fb:2c:62:f9:d4:ed:d4:05:fa:25:28:31:36:
3f:8c:f1:47:44:49:10:b5:a2:2b:7a:14:6d:4f:7b:bc:5c:92:
84:f2:fc:12:3a:9c:25:08:9d:09:d2:3b:c0:29:f3:7c:13:e6:
33:ad:16:76:08:3e:8b:a2:19:6a:b7:df:9a:32:e2:15:ef:08:
bf:65:ea:0b:a3:a9:5f:01:85:35:f3:34:e7:bb:a1:04:94:0e:
77:d7:46:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:31 2024 by rpki-client on console-fra.rpki-client.org