Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ZdTYz4amJ4vSfJBsCdRBWovukTE.roa
File: ZdTYz4amJ4vSfJBsCdRBWovukTE.roa (raw, json)
Hash identifier: SUEQmnwSWnvtrxCU1QveV8/nKpdKKUd50nl964IwuX4=
Subject key identifier: 65:D4:D8:CF:86:A6:27:8B:D2:7C:90:6C:09:D4:41:5A:8B:EE:91:31
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018BAABC216B807DF119047E586526C31B60
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ZdTYz4amJ4vSfJBsCdRBWovukTE.roa
Signing time: Tue 07 Nov 2023 17:02:17 +0000
ROA not before: Tue 07 Nov 2023 17:02:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 26383
IP address blocks: 93.113.171.0/24 maxlen: 24
92.114.54.0/24 maxlen: 24
89.45.162.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:aa:bc:21:6b:80:7d:f1:19:04:7e:58:65:26:c3:1b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Nov 7 17:02:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65d4d8cf86a6278bd27c906c09d4415a8bee9131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d8:cf:76:7f:38:6e:f0:e5:af:8c:e3:88:88:
5d:f7:1a:13:06:b3:a0:f3:8e:a3:1d:df:22:c2:90:
ac:28:da:0a:ad:0c:c5:e8:bd:f1:21:2c:a1:73:11:
df:0f:55:ea:7d:5c:02:32:ef:0b:eb:9c:77:90:00:
53:05:ba:20:c7:aa:ce:d7:c5:aa:12:6e:64:f5:85:
24:15:fb:45:70:2f:06:de:81:6e:f9:5f:b7:64:b1:
7b:69:74:29:ed:b7:af:7f:a8:26:2e:33:6b:b3:9c:
01:c7:0b:24:91:43:48:75:27:dd:0c:99:5c:7b:9f:
07:c1:23:78:e3:26:7d:7b:5c:00:68:3b:73:5c:52:
5c:13:48:35:9b:d9:fd:ca:88:81:71:ab:b0:18:12:
7e:eb:06:d2:78:4c:22:2f:5e:54:b4:f2:33:03:5b:
ed:96:d4:90:4d:77:c6:ca:3e:da:b4:cb:65:fa:96:
67:69:57:de:45:7b:74:98:25:36:07:c1:1c:61:eb:
d9:1f:a3:21:d9:c8:1b:1b:7b:fe:b9:30:52:75:e0:
7a:f5:03:7f:8a:cc:e6:09:50:3c:74:5d:bc:a1:d6:
9d:ee:0d:5a:09:d9:ed:b7:fa:7c:16:05:17:cb:9e:
89:a9:cc:c0:17:0f:e5:c2:01:f6:a7:ba:1e:a9:e8:
f5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D4:D8:CF:86:A6:27:8B:D2:7C:90:6C:09:D4:41:5A:8B:EE:91:31
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ZdTYz4amJ4vSfJBsCdRBWovukTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.45.162.0/24
92.114.54.0/24
93.113.171.0/24
Signature Algorithm: sha256WithRSAEncryption
38:29:e9:90:2a:88:7d:d8:32:a8:5b:00:47:f0:a1:8b:67:83:
e6:e8:4b:a9:d3:57:5c:e5:be:a5:3f:20:03:48:63:a3:af:d4:
09:47:f4:06:1c:87:50:3d:7a:3b:2b:a9:98:90:72:20:1d:24:
75:4d:77:9c:b0:0a:5e:24:53:2d:f3:59:eb:c1:2a:ad:c8:cd:
bd:91:97:a7:f5:78:a9:99:aa:07:1e:94:3b:29:eb:4f:b5:51:
6a:0b:87:53:e4:50:3a:52:0a:67:6e:4d:7a:df:a1:fb:b0:e4:
7d:2a:93:ee:ef:f7:3f:cd:a1:7e:d9:7f:c1:9d:ce:59:81:8b:
03:6d:d5:b3:2f:f4:2c:5a:83:46:04:9d:9a:a9:dd:ce:a5:c9:
a8:63:e7:1b:b8:1b:b5:ba:e6:9f:ed:98:09:0f:b2:d0:f5:9e:
45:02:76:2e:0d:f7:6b:6e:7f:ec:cd:25:35:90:07:c4:0a:cb:
c1:4e:d9:72:e8:d0:a5:73:96:82:95:4f:ee:3d:0a:4a:31:2f:
30:30:88:5f:24:1d:3a:5f:e1:7c:9f:2b:01:9d:68:e2:ab:d8:
cd:24:1e:63:e8:05:b7:83:a3:cb:47:6e:36:87:49:1f:7a:4a:
ee:03:3c:67:c8:b3:7d:20:bd:14:03:61:0b:c0:14:e4:d9:07:
0f:0b:ad:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:07 2024 by rpki-client on console-fra.rpki-client.org