Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/Z09Pyg-OicvV0Cgg78ek3jnPHOk.roa
File: Z09Pyg-OicvV0Cgg78ek3jnPHOk.roa (raw, json)
Hash identifier: hXG4sdEtV0zV5QCNS0rh/gCcG3y2u/P20Bnre7kHNbY=
Subject key identifier: 67:4F:4F:CA:0F:8E:89:CB:D5:D0:28:20:EF:C7:A4:DE:39:CF:1C:E9
Certificate issuer: /CN=6665dd97665a23b1b183e223822b66b5ae536a2f
Certificate serial: 01856D53DC83C369F34F02F8C84D825C5515
Authority key identifier: 66:65:DD:97:66:5A:23:B1:B1:83:E2:23:82:2B:66:B5:AE:53:6A:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/Z09Pyg-OicvV0Cgg78ek3jnPHOk.roa
Signing time: Sun 01 Jan 2023 12:34:50 +0000
ROA not before: Sun 01 Jan 2023 12:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 786
IP address blocks: 89.207.208.0/21 maxlen: 21
81.87.0.0/16 maxlen: 24
193.60.0.0/14 maxlen: 24
194.66.0.0/16 maxlen: 24
195.194.0.0/15 maxlen: 24
83.138.32.0/21 maxlen: 21
212.121.192.0/19 maxlen: 19
212.219.0.0/16 maxlen: 24
194.80.0.0/14 maxlen: 24
212.121.0.0/19 maxlen: 19
2001:630::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:53:dc:83:c3:69:f3:4f:02:f8:c8:4d:82:5c:55:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6665dd97665a23b1b183e223822b66b5ae536a2f
Validity
Not Before: Jan 1 12:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=674f4fca0f8e89cbd5d02820efc7a4de39cf1ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6d:a6:56:f0:12:90:1e:11:48:26:9c:54:15:
c5:72:31:00:b9:eb:57:3a:21:ea:99:49:81:dc:33:
dc:66:ca:3c:42:04:e7:81:b6:72:86:d5:39:2f:26:
f6:4b:64:95:a8:2c:a4:0b:11:31:e4:9b:cf:21:45:
09:b3:ba:16:cb:d9:d9:9f:d8:57:f4:0e:11:f5:c1:
e1:0a:a7:d5:fb:a2:66:14:d2:c2:35:63:33:d2:22:
24:94:ee:17:f2:d8:1f:41:26:e9:cd:7e:0e:94:f1:
96:9f:6f:e2:8d:58:20:f6:23:b0:a8:b7:5a:a1:46:
2b:c7:4a:38:42:ce:66:e7:b8:36:9b:50:bf:9d:85:
17:12:19:96:d3:5f:4e:42:f8:ac:07:fb:13:18:ee:
ed:3b:66:ea:fe:a8:6f:62:03:64:c6:3f:e0:39:8f:
d5:3c:a2:e7:b8:08:c1:12:6c:c8:56:c5:4f:71:46:
c9:59:95:72:5a:19:1c:29:3d:6a:a6:de:26:62:75:
4b:5c:8d:25:df:f8:cb:2e:0a:c7:9e:f6:19:f3:ba:
cf:75:80:fe:fd:40:6b:28:3b:d3:37:46:b5:de:4a:
e7:f5:de:03:22:7e:d1:36:30:ef:e8:81:cf:eb:97:
f3:0e:f5:d4:a4:4d:7a:23:38:fe:99:db:96:70:d8:
d2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:4F:4F:CA:0F:8E:89:CB:D5:D0:28:20:EF:C7:A4:DE:39:CF:1C:E9
X509v3 Authority Key Identifier:
keyid:66:65:DD:97:66:5A:23:B1:B1:83:E2:23:82:2B:66:B5:AE:53:6A:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/Z09Pyg-OicvV0Cgg78ek3jnPHOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.87.0.0/16
83.138.32.0/21
89.207.208.0/21
193.60.0.0/14
194.66.0.0/16
194.80.0.0/14
195.194.0.0/15
212.121.0.0/19
212.121.192.0/19
212.219.0.0/16
IPv6:
2001:630::/32
Signature Algorithm: sha256WithRSAEncryption
30:01:d8:83:73:73:22:80:be:d9:91:ee:5b:bc:f2:7d:60:2e:
61:39:0a:b3:13:f5:76:fd:be:2b:ec:e8:56:b2:4d:55:6d:a7:
7c:af:81:c9:8c:cf:ec:9b:8c:3b:5b:1c:8a:19:ad:63:85:fd:
22:e8:21:a1:cb:60:17:cb:14:81:79:1d:eb:e5:d8:8e:92:bd:
92:c7:63:02:f7:33:87:57:b4:91:f3:c6:01:55:75:c8:5a:80:
8d:e2:db:61:aa:e9:2c:bd:24:63:63:74:87:35:2b:7f:3b:91:
3e:5b:6d:91:a1:1e:08:f6:f4:07:e9:f2:1f:59:42:98:2c:34:
0a:51:e7:5b:6b:75:3b:b1:09:10:7e:8a:af:aa:02:5c:e3:a7:
bc:33:d1:7b:1c:e2:27:7a:d5:7c:5c:d0:68:e5:af:af:ee:2f:
14:b6:0f:0b:1d:ef:0c:df:92:5d:34:9b:a1:3d:80:c5:63:98:
6a:4c:8e:79:d1:77:12:08:c8:7c:39:6b:a0:5d:3f:4c:d7:bf:
26:8e:06:e0:3c:e8:eb:b5:8b:a9:32:66:87:4f:63:a8:a0:86:
fd:3d:d1:2d:e7:3d:8d:e2:8c:f0:b8:a7:20:9a:3a:3c:a9:2b:
6c:38:79:66:89:8c:37:38:45:24:c6:49:64:a9:f1:0c:4c:45:
13:17:56:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:59 2024 by rpki-client on console-ams.rpki-client.org