Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/ZWdxw7aVkN3HlJbVbnT92Lo5MMo.roa
File: ZWdxw7aVkN3HlJbVbnT92Lo5MMo.roa (raw, json)
Hash identifier: mlDZEGz9YxGFCfbB21C5I/mc1RTRSFaeKx0YlVnBI4A=
Subject key identifier: 65:67:71:C3:B6:95:90:DD:C7:94:96:D5:6E:74:FD:D8:BA:39:30:CA
Certificate issuer: /CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d
Certificate serial: 018637CCB6B021D80D263C02301225864D9B
Authority key identifier: B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/ZWdxw7aVkN3HlJbVbnT92Lo5MMo.roa
Signing time: Thu 09 Feb 2023 20:10:08 +0000
ROA not before: Thu 09 Feb 2023 20:10:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40964
IP address blocks: 89.107.128.0/21 maxlen: 21
89.107.132.0/23 maxlen: 23
89.107.130.0/23 maxlen: 23
89.107.128.0/23 maxlen: 23
89.107.134.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 09 Feb 2023 21:55:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:37:cc:b6:b0:21:d8:0d:26:3c:02:30:12:25:86:4d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d
Validity
Not Before: Feb 9 20:10:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=656771c3b69590ddc79496d56e74fdd8ba3930ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fd:01:fe:40:33:51:09:eb:f1:e2:cd:c4:74:
aa:10:9f:9c:9d:0b:36:ec:f3:ca:ee:a2:19:52:2c:
d8:51:eb:e5:51:3d:18:98:e0:30:99:dd:a6:af:14:
d1:f5:bd:10:18:94:d5:5b:13:8d:a6:a2:97:ee:27:
43:a8:5e:64:03:1d:c6:80:a1:2e:27:8e:2c:50:2e:
e9:13:2a:19:f4:79:36:ec:94:31:92:94:c6:5b:80:
6f:bd:db:10:8a:03:87:b4:c6:4a:62:77:2f:8c:ca:
2d:df:e3:8c:cd:7e:f5:a0:74:b0:43:33:91:76:c4:
39:10:2e:8a:60:37:79:9a:97:78:c1:d8:20:fc:be:
09:61:3a:fb:35:b2:31:4b:89:4a:ab:db:d4:15:1c:
48:55:bf:dd:12:c1:34:7f:70:ec:5a:61:e2:dd:8e:
7f:09:33:92:77:c6:a9:f4:f2:2d:eb:5b:a9:e2:2e:
16:4f:18:32:ca:35:4b:4c:f0:f5:42:48:94:3d:be:
91:8a:6f:5e:e5:69:9d:c4:46:d9:67:65:4f:86:dc:
7a:76:08:bb:2d:f3:03:d6:71:94:74:ba:2d:75:7d:
3b:8b:5f:9c:08:ef:09:cb:d6:10:0e:75:84:aa:04:
ff:2a:2c:ed:60:7a:99:d3:7c:13:ba:2e:5b:93:bc:
49:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:67:71:C3:B6:95:90:DD:C7:94:96:D5:6E:74:FD:D8:BA:39:30:CA
X509v3 Authority Key Identifier:
keyid:B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/ZWdxw7aVkN3HlJbVbnT92Lo5MMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.107.128.0/21
Signature Algorithm: sha256WithRSAEncryption
77:e2:43:6e:1d:4b:26:e1:f6:20:cd:8c:80:82:0e:70:07:30:
da:e4:65:6a:65:1e:c7:66:b4:76:b9:3e:c6:6e:f0:56:b2:f1:
7a:18:e8:4e:d9:b0:a4:60:86:92:92:0a:ab:cc:d1:17:cc:fa:
c4:7b:83:ce:ff:d3:19:49:3e:be:9b:f7:d5:8e:f7:d0:ba:e7:
eb:4d:bd:d4:a6:e0:33:09:6b:ac:01:b8:fb:3c:b9:18:98:35:
9c:e8:2e:9e:4d:e2:76:bd:f9:e7:64:13:f9:f6:ed:2f:3d:e6:
75:8b:b1:5c:6b:0a:a2:2d:f6:08:12:3d:95:07:2b:42:10:5e:
99:40:36:b0:36:4b:54:1f:c7:8f:80:09:36:41:b1:0d:b8:92:
67:d7:a9:77:67:23:7e:76:d4:06:23:7e:e4:c2:9a:a1:ed:98:
42:d3:8e:7e:d0:88:57:a4:b9:7a:d0:0a:19:b6:c7:14:b8:75:
21:80:57:9e:ab:24:4f:c3:66:d7:79:1a:0c:1a:d6:16:29:50:
e4:87:72:0e:91:9b:4f:17:d4:d7:72:97:83:c4:f9:a9:9e:4c:
5c:d2:95:12:ba:73:92:6e:b6:0d:b7:20:da:d5:1e:85:a8:1f:
d5:8e:b7:53:35:28:21:f7:3f:ac:49:15:41:2a:8e:8b:c4:b5:
9b:73:44:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:45 2024 by rpki-client on console-fra.rpki-client.org