Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ZFI63Gjc-Ws0Ym5OqKz5ShQzj3U.roa
File: ZFI63Gjc-Ws0Ym5OqKz5ShQzj3U.roa (raw, json)
Hash identifier: wwo/cN5S7OfdZDPXWtK08JjilCNxV0HUl5ZvqYesNRE=
Subject key identifier: 64:52:3A:DC:68:DC:F9:6B:34:62:6E:4E:A8:AC:F9:4A:14:33:8F:75
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01887BFBDD414BD9657011639DD7C089CA11
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ZFI63Gjc-Ws0Ym5OqKz5ShQzj3U.roa
Signing time: Fri 02 Jun 2023 12:01:23 +0000
ROA not before: Fri 02 Jun 2023 12:01:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 17447
IP address blocks: 89.46.42.0/24 maxlen: 24
89.39.125.0/24 maxlen: 24
188.215.31.0/24 maxlen: 24
89.40.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Jun 2023 10:43:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7b:fb:dd:41:4b:d9:65:70:11:63:9d:d7:c0:89:ca:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 2 12:01:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64523adc68dcf96b34626e4ea8acf94a14338f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c6:e2:f5:28:5e:1e:9a:05:32:8d:54:c9:ae:
63:c1:9c:85:4a:38:b3:69:5a:2a:0e:1b:a3:4c:97:
17:7f:70:db:1d:a7:21:4f:14:d0:5e:16:72:e5:e2:
01:29:7a:73:e7:67:41:76:bb:82:29:ec:98:07:0e:
ee:a7:8e:05:f4:30:3b:46:86:d3:03:eb:95:53:77:
8b:e9:c4:65:23:8a:f8:e5:a0:ab:6c:0d:f6:3f:b0:
ac:de:e6:de:c4:7c:9d:e6:a7:9a:37:af:b8:c7:c6:
6c:21:88:ea:f7:cb:c1:6d:9c:30:59:6e:af:47:62:
0f:f8:19:a0:63:6e:83:c9:4d:2b:b1:1d:b4:41:e1:
75:75:03:0e:de:8e:5c:39:71:54:87:44:6b:7d:16:
cc:c9:a5:ef:cd:68:1e:61:fa:0b:da:a8:60:36:8a:
f0:f0:46:83:67:ac:3e:e6:57:41:ea:d4:fe:f9:96:
db:56:1b:96:96:91:85:48:e9:4e:4e:3a:be:f1:76:
04:df:48:d6:9d:e3:69:46:81:ab:03:83:77:ca:3a:
92:5b:97:70:8d:7a:13:f3:32:fa:70:2c:9a:60:c9:
22:1a:ea:e2:39:a3:f9:c7:48:64:54:5d:2e:23:98:
70:06:00:06:a3:e0:b4:a7:b3:07:d6:f7:2e:a3:ac:
47:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:52:3A:DC:68:DC:F9:6B:34:62:6E:4E:A8:AC:F9:4A:14:33:8F:75
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ZFI63Gjc-Ws0Ym5OqKz5ShQzj3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.125.0/24
89.40.215.0/24
89.46.42.0/24
188.215.31.0/24
Signature Algorithm: sha256WithRSAEncryption
80:aa:41:de:40:0f:89:a7:79:b8:a0:08:2e:b7:6c:bc:c2:27:
98:71:bd:50:8e:30:94:b3:f9:ae:8e:85:a0:41:a9:0a:09:f5:
94:3b:47:44:b0:78:8b:a4:f0:cc:2f:ad:cd:34:46:55:fb:7d:
a4:e5:05:e5:a0:fd:b9:2a:54:08:18:6e:15:b9:47:07:5d:b0:
ca:67:f4:61:26:1e:88:40:bd:04:ac:f5:98:b4:be:3a:63:78:
0e:b5:99:6d:86:01:6e:1e:b6:bd:3f:7b:5c:7b:64:90:99:33:
cf:f3:a5:1b:70:f1:af:df:cf:5c:54:c8:7d:87:43:11:3e:ca:
60:36:8a:00:cf:d6:61:b8:a5:54:f7:60:ae:ae:4c:5f:0b:e3:
e2:90:de:57:47:6e:ad:a3:32:89:c2:b9:a6:75:6a:6f:4c:4d:
67:7f:82:3b:90:6c:b9:6b:fe:25:b2:8a:f2:40:5f:88:7c:21:
9f:57:a3:65:e5:83:16:27:55:f9:86:20:16:dc:3f:6a:6b:bc:
ef:13:ce:bf:94:21:43:d5:a2:f6:cb:e8:e1:8b:63:fc:2b:9a:
fa:35:be:df:97:2b:cf:33:86:54:29:8c:88:d8:6a:8f:5d:c3:
5c:27:45:a2:7c:82:df:bc:a8:2e:62:60:3d:21:73:40:e2:9f:
f7:12:2f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:13 2024 by rpki-client on console-ams.rpki-client.org