Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Zg7bbFKXUcqH63CLvVn_cx9yVEE.roa
File: Zg7bbFKXUcqH63CLvVn_cx9yVEE.roa (raw, json)
Hash identifier: fdDaXE3PJ1wD6om6V015KNZMxqL0yKOIm7gcnL0MexA=
Subject key identifier: 66:0E:DB:6C:52:97:51:CA:87:EB:70:8B:BD:59:FF:73:1F:72:54:41
Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Certificate serial: 0189CB405808028FDC09C3E622BC992BB96B
Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Zg7bbFKXUcqH63CLvVn_cx9yVEE.roa
Signing time: Sun 06 Aug 2023 14:28:58 +0000
ROA not before: Sun 06 Aug 2023 14:28:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.89.28.0/24 maxlen: 24
45.89.29.0/24 maxlen: 24
193.160.102.0/24 maxlen: 24
193.160.130.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Aug 2023 13:46:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:cb:40:58:08:02:8f:dc:09:c3:e6:22:bc:99:2b:b9:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Validity
Not Before: Aug 6 14:28:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=660edb6c529751ca87eb708bbd59ff731f725441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:22:ba:05:88:84:df:e7:73:7d:14:fa:c1:64:
cd:cd:b1:08:ec:45:ec:c9:95:84:26:07:30:fe:27:
30:d5:ce:18:dd:8b:85:15:07:45:2e:f4:1b:3d:09:
ed:6f:69:27:e0:f3:63:da:fc:ad:a3:6e:66:7a:e7:
3f:73:b4:50:3e:68:5c:ba:c8:91:67:c4:45:10:38:
e0:df:d4:0e:ad:3d:e8:7f:34:2e:c2:7a:ff:21:e4:
87:16:0c:6f:b2:01:76:c5:ba:0d:d6:22:8a:f0:3c:
db:5d:63:5b:36:12:10:bd:87:34:02:d1:cc:b8:f3:
57:4c:26:15:9a:25:e1:e8:9a:d2:47:ca:d5:a9:9e:
7f:39:fa:e4:60:7d:84:e4:c2:9c:e1:b0:8f:3a:4b:
da:91:77:39:31:14:3e:71:4f:07:cc:4c:71:5e:b9:
05:07:29:54:71:e2:59:8a:fb:5a:a3:f1:75:65:42:
88:e9:e7:9a:93:d8:e1:82:ab:79:5f:a5:2d:d1:36:
60:5f:00:65:f7:5e:fa:de:d6:88:a6:1c:22:33:bf:
cb:f4:db:1d:47:7b:e1:15:a5:f5:26:ff:6b:47:91:
36:d5:d0:3d:5a:bb:eb:96:1d:65:a3:7d:27:63:8c:
ab:45:3e:65:1a:6a:7f:be:37:6f:b8:97:ce:9a:55:
a4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0E:DB:6C:52:97:51:CA:87:EB:70:8B:BD:59:FF:73:1F:72:54:41
X509v3 Authority Key Identifier:
keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Zg7bbFKXUcqH63CLvVn_cx9yVEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.28.0/23
193.160.102.0/24
193.160.130.0/24
Signature Algorithm: sha256WithRSAEncryption
04:aa:5c:11:3f:1a:bf:4f:b1:db:4d:0a:1f:13:e6:01:d6:9e:
b5:d0:dc:a2:31:8c:65:61:0e:83:18:fc:d8:6e:75:fe:4b:ce:
13:35:b8:83:b2:1f:75:0f:d9:fa:f1:42:d3:b5:ff:d1:8c:32:
e6:b7:4d:d2:f2:2e:74:46:91:73:13:9f:f3:ed:72:93:7f:bc:
89:db:40:29:07:e4:31:73:4b:bb:5c:b1:30:f5:0e:94:1d:ce:
8d:a9:22:1f:9d:7e:70:ee:74:ed:6c:09:de:b6:a2:61:52:bc:
e2:a1:89:72:29:d9:91:cc:27:cd:77:7f:9e:37:6f:29:8a:27:
25:ca:01:02:59:da:9f:14:7a:2a:69:a9:bd:4a:b7:5b:a3:d0:
c6:35:ff:3d:74:5d:7f:cd:7f:92:65:84:9e:58:6b:12:23:0e:
09:4b:97:be:ab:ad:a6:c0:b8:d1:06:fe:09:97:ad:8f:a7:a7:
c6:fa:e0:e3:97:17:67:ea:72:5d:bb:d6:b2:e2:7e:e5:f5:ac:
c1:70:0a:d8:49:e2:f7:ef:69:50:d8:da:86:30:17:8b:95:6f:
b9:fc:e6:a2:57:43:da:f7:fb:dd:17:8f:60:05:eb:47:d9:82:
95:cd:8d:a7:20:65:9e:73:51:b4:26:c7:27:2a:76:d5:5c:c5:
a9:7f:01:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:40 2024 by rpki-client on console-fra.rpki-client.org