Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/ZiY3oXIMjvqH1kIYfX_Wv2KRJI8.roa
File: ZiY3oXIMjvqH1kIYfX_Wv2KRJI8.roa (raw, json)
Hash identifier: v60eM4tQKE1mI53KRT4uZMXm+tuU0UjPSM7NPhMwN/U=
Subject key identifier: 66:26:37:A1:72:0C:8E:FA:87:D6:42:18:7D:7F:D6:BF:62:91:24:8F
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 018CC94E00FBAD150D13DC46D6348CB6B397
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/ZiY3oXIMjvqH1kIYfX_Wv2KRJI8.roa
Signing time: Tue 02 Jan 2024 08:33:01 +0000
ROA not before: Tue 02 Jan 2024 08:33:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39391
IP address blocks: 89.33.176.0/22 maxlen: 24
89.47.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Mar 2024 13:19:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:00:fb:ad:15:0d:13:dc:46:d6:34:8c:b6:b3:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jan 2 08:33:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=662637a1720c8efa87d642187d7fd6bf6291248f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:89:e3:55:25:6f:f1:27:9e:0a:0f:dc:ad:0d:
ec:64:81:f5:8c:43:31:b3:fb:6b:4e:df:a9:83:ea:
1a:4c:c0:c1:4c:24:ad:57:a3:63:a7:de:37:d5:f5:
7e:1a:60:c9:ca:e2:e8:9b:ae:c8:de:d9:27:56:1b:
b1:ba:b1:fb:99:04:54:ea:59:be:fa:47:8a:d4:5a:
84:bd:5b:4d:d8:27:49:63:0b:68:fd:49:2f:f8:b9:
87:5d:dd:bb:2d:98:c4:ab:12:4f:55:36:37:99:24:
43:7a:55:f3:cd:e8:47:4f:07:e5:38:fc:ad:1b:b5:
20:e6:3a:4f:c0:ec:66:7b:e6:61:ac:9a:f8:57:b5:
e9:27:95:4e:7b:0c:19:82:4b:b5:c2:73:83:42:b5:
1f:60:5e:09:61:e8:7f:ce:96:1c:3c:c1:e5:15:20:
f1:30:e5:1b:05:b4:22:28:bc:f8:f0:7a:71:0a:82:
6a:e0:1a:87:24:ac:a0:6e:13:91:57:c3:fe:c4:64:
38:65:f4:d8:dc:88:34:c7:f5:c8:ce:5d:c5:b0:3a:
99:ca:48:6f:82:34:f9:54:f9:c1:df:0b:d7:bc:04:
81:64:11:31:d1:35:54:06:87:f4:55:6a:38:39:83:
05:c2:9e:63:95:8e:04:ae:f8:34:00:1c:80:d3:9c:
c3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:26:37:A1:72:0C:8E:FA:87:D6:42:18:7D:7F:D6:BF:62:91:24:8F
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/ZiY3oXIMjvqH1kIYfX_Wv2KRJI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.176.0/22
89.47.91.0/24
Signature Algorithm: sha256WithRSAEncryption
02:50:6e:64:33:1b:85:2e:ff:27:85:51:14:b8:65:e7:c6:2f:
cd:4e:08:eb:13:70:00:01:40:e4:95:a5:78:29:5c:5a:01:2c:
cd:2e:c1:28:18:06:2b:ae:aa:0a:33:40:5b:f4:37:df:cc:db:
2e:cb:b5:1a:3e:d2:0b:6b:cd:60:0d:85:e4:ce:d7:53:34:4c:
c3:0f:5d:d5:3b:17:92:86:40:44:6a:da:ae:d1:aa:0e:16:1b:
b0:d6:23:31:69:07:b5:96:3e:9e:21:b5:31:6e:47:b5:bc:66:
00:84:ec:7c:1e:79:be:04:74:ec:bd:f2:5d:68:fe:86:cc:10:
fa:c0:18:c6:6e:19:d1:e1:ed:4c:dd:59:95:94:49:b1:54:14:
a9:8b:e9:54:20:33:18:36:5f:f2:af:90:f2:11:f7:f1:0a:67:
ef:11:07:e8:cb:8f:e7:0a:18:2f:55:48:89:40:d5:ce:50:c4:
19:6d:5e:8c:ad:b8:bb:37:91:fc:e8:fa:ed:e1:f0:c7:37:cc:
73:a4:f8:fc:41:ff:42:4d:38:82:b6:2a:29:0c:93:00:e8:48:
c0:e6:e6:23:44:fb:7f:f2:a6:8b:71:fa:07:30:53:5e:4d:4d:
c1:13:cb:54:23:54:68:a3:ff:9e:d4:32:5f:e1:ec:91:ee:d2:
d4:03:04:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 1 16:01:12 2024 by rpki-client on console-fra.rpki-client.org