Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/ZMmeEGF-v3BggorYPMWd__P4sic.roa
File: ZMmeEGF-v3BggorYPMWd__P4sic.roa (raw, json)
Hash identifier: arRiMaNjE+xNTvcy1Pochd7AMZPwZLcOl9W+uNPUGKs=
Subject key identifier: 64:C9:9E:10:61:7E:BF:70:60:82:8A:D8:3C:C5:9D:FF:F3:F8:B2:27
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 0188D37908AA09D2333AB083FE914C5A2CA0
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/ZMmeEGF-v3BggorYPMWd__P4sic.roa
Signing time: Mon 19 Jun 2023 11:45:04 +0000
ROA not before: Mon 19 Jun 2023 11:45:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 103.75.69.0/24 maxlen: 24
103.75.70.0/24 maxlen: 24
88.218.40.0/24 maxlen: 24
88.218.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Jun 2023 07:53:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d3:79:08:aa:09:d2:33:3a:b0:83:fe:91:4c:5a:2c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Jun 19 11:45:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64c99e10617ebf7060828ad83cc59dfff3f8b227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e5:84:76:0a:fb:19:06:70:fd:91:33:a7:84:
35:e2:ac:2c:e5:a4:2b:33:ba:e5:7c:fc:5e:16:b0:
54:89:44:f7:a7:87:d5:01:ba:d2:0d:79:ea:5c:25:
1e:fa:b0:8b:21:85:aa:91:04:e6:cf:56:b4:80:d4:
20:c6:f0:4a:ac:c9:20:77:56:76:74:48:4c:04:fc:
fd:b6:27:50:d0:25:81:dc:c8:81:c3:5d:44:80:cd:
8c:02:97:5e:e6:85:7e:72:e1:16:0f:8e:7b:94:af:
02:63:51:14:07:ea:56:1a:aa:81:8a:aa:69:75:9f:
f1:fc:99:b2:0d:c9:2b:67:06:59:63:e1:e4:2c:66:
bc:5c:a7:03:f4:7e:a1:82:c3:dc:ca:e7:c8:09:13:
b3:1c:fe:b7:3d:17:b9:35:67:25:40:44:20:bf:49:
c1:77:c0:e7:b5:89:96:94:5a:fe:b5:52:2e:8e:e5:
5e:11:87:07:36:75:5b:c6:a3:9e:4f:ce:ca:fa:15:
42:9f:e0:e9:c8:19:50:b8:ea:5a:40:16:20:e5:16:
09:bb:29:7c:df:e2:9b:a7:e5:4e:cb:56:d5:54:69:
53:0f:0c:99:f3:4f:37:c1:44:ad:4a:72:8e:34:e5:
ac:d0:76:e9:f8:fe:cb:0d:2d:78:b1:ad:5e:a5:a1:
88:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C9:9E:10:61:7E:BF:70:60:82:8A:D8:3C:C5:9D:FF:F3:F8:B2:27
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/ZMmeEGF-v3BggorYPMWd__P4sic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.40.0/24
88.218.42.0/24
103.75.69.0-103.75.70.255
Signature Algorithm: sha256WithRSAEncryption
df:b9:41:75:22:6b:14:80:30:b5:4c:76:3e:e1:c2:7f:5e:cb:
bc:27:45:a6:92:8c:b1:c4:bc:92:2b:51:2a:1b:41:5d:a7:c6:
0e:f4:c6:38:d0:17:91:e9:d8:fa:83:60:f5:4e:13:ef:ad:9a:
52:f4:93:56:69:e5:c3:bd:98:ba:a8:34:51:17:83:b1:6e:c5:
c4:3e:f9:13:d5:cb:e3:b5:11:9a:96:10:5d:9e:0d:83:2c:f7:
7c:71:71:6f:e8:df:15:81:fb:bd:bf:98:c7:45:b4:8e:4a:72:
00:37:fa:24:61:f8:e2:74:0d:f3:8a:f6:d1:6a:32:d7:c4:55:
f7:fb:58:32:82:17:ec:c9:2f:20:2f:27:5d:8e:5a:bc:f3:e8:
30:4c:20:74:48:4f:1e:3b:a0:58:38:ca:19:f5:6b:8c:64:24:
37:3b:a7:91:b2:c0:f4:6f:33:7e:d4:9b:12:7b:fa:ed:9a:d4:
55:b6:c9:c2:55:e1:2c:e4:c3:0b:1d:70:47:b6:5b:3a:64:11:
50:f1:1b:bd:a4:4a:cd:b3:12:c9:71:1e:66:9d:a1:65:e0:8a:
45:dc:b9:45:21:c8:9a:45:16:b5:27:49:96:f1:d8:ab:c0:b0:
02:48:6b:31:c3:5a:9f:1f:2b:21:9e:b0:ab:c7:da:5e:a4:52:
47:ff:5f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:37 2024 by rpki-client on console-ams.rpki-client.org