Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/zzOJsXrNmUE5AGgh_PLh4Grv5YA.roa
File: zzOJsXrNmUE5AGgh_PLh4Grv5YA.roa (raw, json)
Hash identifier: gen+7dWYae/UFQav588BgviaIzYaAiPGmz9yUXdWFJA=
Subject key identifier: CF:33:89:B1:7A:CD:99:41:39:00:68:21:FC:F2:E1:E0:6A:EF:E5:80
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01926FEF62FBC76346282B8DE559F6BA0FA6
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/zzOJsXrNmUE5AGgh_PLh4Grv5YA.roa
Signing time: Wed 09 Oct 2024 06:20:12 +0000
ROA not before: Wed 09 Oct 2024 06:20:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215224
IP address blocks: 89.40.70.0/24 maxlen: 24
93.115.104.0/24 maxlen: 24
185.198.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Nov 2024 03:57:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6f:ef:62:fb:c7:63:46:28:2b:8d:e5:59:f6:ba:0f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 9 06:20:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cf3389b17acd994139006821fcf2e1e06aefe580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8b:a7:3e:b4:75:38:47:d5:1b:db:a1:bf:87:
31:4d:8e:99:e0:5a:01:cf:ae:95:ea:b1:64:e5:bd:
f3:3d:54:f4:92:88:e2:2d:45:d9:15:c1:a6:fe:91:
88:55:c2:96:48:f5:fc:98:63:75:70:aa:cd:97:58:
1c:c5:52:67:69:c8:9e:76:55:f8:b1:bc:4c:f6:8c:
c5:4e:78:ae:98:0c:5a:a0:42:08:e5:26:c3:9b:d6:
eb:b2:6e:f4:54:15:1a:f7:f0:a3:a7:b2:bb:16:51:
c4:66:d4:0e:78:3d:33:97:be:7d:16:0c:14:61:53:
5a:98:d2:e9:6d:ca:af:68:f6:6f:1b:59:6e:26:db:
c6:4f:95:69:1e:f3:95:59:20:43:95:53:e6:59:02:
44:cc:7f:2f:d0:f9:15:bb:3e:a6:c7:f0:c1:e3:32:
b3:75:68:2b:5a:ac:65:ce:aa:a0:b7:20:dd:6e:47:
df:6b:c9:52:75:8b:ae:36:56:c4:8f:b4:32:99:3b:
d9:96:f9:bd:32:89:1b:15:8f:e1:75:b5:9e:7d:2a:
0d:78:be:21:2e:b7:97:c9:e7:88:43:19:d4:84:fb:
64:f6:39:ff:90:48:00:9a:d1:e4:5a:70:e5:91:aa:
9e:f3:1f:9c:ec:00:a6:c7:52:57:c3:ef:58:8f:5e:
6b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:33:89:B1:7A:CD:99:41:39:00:68:21:FC:F2:E1:E0:6A:EF:E5:80
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/zzOJsXrNmUE5AGgh_PLh4Grv5YA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.70.0/24
93.115.104.0/24
185.198.235.0/24
Signature Algorithm: sha256WithRSAEncryption
35:19:7e:f0:2d:e2:da:0c:9c:fd:d5:c7:fd:e9:b3:4c:5d:cc:
8f:7c:81:fc:ee:cb:f3:20:f0:2c:26:d8:68:50:b7:93:8d:d9:
1a:dc:29:6d:e4:b7:1e:6f:4e:6f:1c:a6:1d:ec:90:5e:98:ef:
05:f5:64:21:fd:3b:32:cb:a5:23:11:b7:57:24:1a:a8:84:df:
b7:9d:b6:bf:c4:ef:09:a9:5d:ee:4d:0b:8b:54:04:a2:c4:b8:
21:6d:0a:e7:02:57:2a:ff:d0:5e:2c:9f:29:95:ed:2a:18:cd:
ad:ce:8f:54:14:40:48:34:d5:4c:9f:71:05:51:e4:10:ca:46:
b6:f5:21:d7:fa:b6:dd:57:9c:bb:59:c4:7f:3f:23:ab:56:3c:
71:5b:d5:f4:f0:10:22:1f:06:d2:6b:88:4d:ac:27:a1:ea:62:
78:85:17:1d:94:5d:10:4c:a0:4c:22:1f:8d:5b:38:d6:64:bf:
7e:1e:a3:2b:e5:91:16:53:51:92:dc:a0:c2:d2:6e:3a:01:df:
46:6c:71:2b:8e:95:67:1b:12:d7:4a:a0:7d:8f:23:04:c2:75:
94:76:21:ee:b4:54:5b:be:3b:e7:28:21:24:38:60:11:fb:d5:
59:92:98:09:10:20:fd:66:02:c1:75:7b:68:a4:a9:5e:12:16:
30:dc:b8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 07:12:07 2024 by rpki-client on console-ams.rpki-client.org