Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ZR60IVsGbfSTgyOe3bMKPyZhmfc.roa
File: ZR60IVsGbfSTgyOe3bMKPyZhmfc.roa (raw, json)
Hash identifier: NHET+Mav980/3sknCRMQ5p0rltkva01CvMsYvr0qQDU=
Subject key identifier: 65:1E:B4:21:5B:06:6D:F4:93:83:23:9E:DD:B3:0A:3F:26:61:99:F7
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01892CF1108D0D1671660134D25950023C16
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ZR60IVsGbfSTgyOe3bMKPyZhmfc.roa
Signing time: Thu 06 Jul 2023 20:42:23 +0000
ROA not before: Thu 06 Jul 2023 20:42:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398343
IP address blocks: 86.107.50.0/24 maxlen: 24
93.115.203.0/24 maxlen: 24
45.88.12.0/24 maxlen: 24
89.35.119.0/24 maxlen: 24
94.177.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Jul 2023 09:51:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2c:f1:10:8d:0d:16:71:66:01:34:d2:59:50:02:3c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 6 20:42:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=651eb4215b066df49383239eddb30a3f266199f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:56:ad:a0:4f:a9:d6:72:9c:95:50:e6:18:21:
4f:ec:a2:1a:83:e9:20:33:42:9f:10:f9:de:67:49:
5b:81:4c:26:55:56:c8:b9:c8:d3:6a:fd:ca:f9:90:
96:e4:2e:c7:e0:19:39:65:1e:43:5b:62:2b:a8:89:
1c:e9:89:2f:c9:20:b0:1d:7c:28:61:0c:99:24:3d:
ef:53:a9:05:5d:e2:ce:16:72:db:3c:3f:79:48:60:
82:21:13:a2:da:bf:1c:02:f2:08:bd:3a:6b:52:6a:
23:2d:1f:0e:b4:1c:8e:6e:c2:d7:b8:18:a4:bc:9d:
40:9c:ef:49:dd:44:a6:ca:9d:90:1a:fa:b3:3a:ff:
b0:2d:b4:57:51:ac:63:cd:c4:9a:0c:30:01:9e:e5:
fe:a8:cd:50:33:70:11:27:ed:41:85:79:46:ab:d0:
de:30:6a:08:6e:77:d5:de:f2:a8:d8:ca:ca:5b:37:
8b:8c:80:42:04:1d:bc:7e:a9:3c:40:0b:5f:aa:69:
ae:f5:2c:55:57:07:ed:63:8c:41:ca:49:1d:0d:d3:
1e:05:fe:2b:e2:8a:86:31:b8:4d:10:18:e3:c6:ba:
24:f0:4d:35:84:67:2f:81:96:73:b5:33:b4:4f:c6:
16:09:85:a8:d3:c2:42:2c:47:98:07:77:ee:45:08:
a1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:1E:B4:21:5B:06:6D:F4:93:83:23:9E:DD:B3:0A:3F:26:61:99:F7
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ZR60IVsGbfSTgyOe3bMKPyZhmfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.12.0/24
86.107.50.0/24
89.35.119.0/24
93.115.203.0/24
94.177.106.0/24
Signature Algorithm: sha256WithRSAEncryption
98:db:41:2a:c2:d2:86:a1:6f:d8:33:75:fa:45:0e:2c:1f:ce:
7c:ca:2b:e2:cc:b0:ad:68:a6:26:87:e7:d2:5d:69:69:5d:5a:
a1:c7:ff:c0:2f:9a:c9:04:fb:38:25:39:c1:2e:28:c3:76:fe:
17:5f:f0:4c:6c:1d:d9:34:0f:ba:02:19:65:67:41:f0:86:7c:
4d:8e:a7:5a:ec:7d:23:77:30:8b:eb:8e:02:5d:fe:1c:a9:4f:
00:29:11:73:8b:e9:39:b6:06:b4:79:36:2f:2d:16:94:99:b5:
13:ef:cd:95:f9:74:c8:42:bb:62:75:35:5f:9e:30:6e:2a:80:
5c:ba:be:53:ff:4d:9e:6f:3e:ad:f8:76:de:ca:d7:e1:a1:4a:
71:3c:62:93:1d:27:0a:b4:a1:9b:07:ec:ca:38:f7:f1:58:6f:
22:a7:b0:a9:94:ea:3c:fe:5b:3f:39:25:56:d9:db:44:8d:fa:
70:dc:93:21:26:8c:c8:fa:7d:bf:da:8d:85:0b:8b:8b:2a:98:
31:2a:52:55:ef:bb:6b:38:35:e1:d8:bb:51:24:b7:bc:a2:bb:
48:c3:58:1c:f1:63:37:16:3e:45:59:e3:fb:61:8a:7d:f3:48:
15:0d:0a:71:af:3f:64:fe:dc:1b:6e:52:07:2d:be:18:94:e7:
f0:ee:43:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:13 2024 by rpki-client on console-ams.rpki-client.org