Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/zzn-bh6XSdZLc6uqGzmwfaVUQPI.roa
File: zzn-bh6XSdZLc6uqGzmwfaVUQPI.roa (raw, json)
Hash identifier: ytyGEd0Z7H8/+eQiSlGWUr8DuXLxFxOVO7/7vwipIiI=
Subject key identifier: CF:39:FE:6E:1E:97:49:D6:4B:73:AB:AA:1B:39:B0:7D:A5:54:40:F2
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0188D1F30177E8B3B041E0FB9B07A9437C5E
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/zzn-bh6XSdZLc6uqGzmwfaVUQPI.roa
Signing time: Mon 19 Jun 2023 04:39:03 +0000
ROA not before: Mon 19 Jun 2023 04:39:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 89.34.202.0/24 maxlen: 24
85.204.18.0/24 maxlen: 24
89.37.195.0/24 maxlen: 24
89.36.140.0/24 maxlen: 24
89.40.36.0/24 maxlen: 24
86.105.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 24 Jun 2023 18:48:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d1:f3:01:77:e8:b3:b0:41:e0:fb:9b:07:a9:43:7c:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 19 04:39:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf39fe6e1e9749d64b73abaa1b39b07da55440f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2b:1d:33:3d:61:b7:ba:26:0f:0c:f0:48:a1:
8b:90:8f:e4:57:34:3b:31:20:1b:48:86:02:5e:90:
8b:86:f9:50:7c:c2:1e:f7:67:bf:eb:5c:fd:97:4f:
ac:58:53:71:f4:eb:e3:a6:e1:6d:0e:4c:71:95:b5:
0c:e5:d3:1e:ac:af:05:35:de:d1:43:c3:1a:75:a9:
26:d7:c2:e3:1a:26:92:f8:87:a9:d6:85:34:ad:5c:
ba:46:9a:b0:bf:7f:3a:7e:94:2b:3d:d6:eb:72:c7:
8d:d2:f5:42:11:e6:df:83:a7:66:df:cb:96:c0:d2:
66:36:19:de:4a:e7:85:4f:d4:20:41:9e:d9:bd:d7:
0a:79:63:a1:08:83:79:75:b2:7a:62:b6:45:1c:92:
6a:4f:b1:b0:89:7e:a1:83:1a:82:81:52:f7:af:94:
03:bb:df:3c:5d:9f:2d:cd:02:81:da:ff:e4:d8:b3:
6b:98:dd:71:a4:d8:65:6a:1e:60:01:c6:37:bf:b1:
10:b6:16:53:e7:69:64:03:e6:fd:bf:23:a3:b7:7f:
63:0b:82:c0:19:67:ba:b8:82:35:f2:d0:8d:d1:c1:
e7:eb:c2:bb:4f:3c:a6:4c:0f:6b:68:58:ee:0f:b3:
33:71:fb:a0:75:5c:6a:c1:88:fb:3b:c5:02:03:b8:
5a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:39:FE:6E:1E:97:49:D6:4B:73:AB:AA:1B:39:B0:7D:A5:54:40:F2
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/zzn-bh6XSdZLc6uqGzmwfaVUQPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.18.0/24
86.105.4.0/24
89.34.202.0/24
89.36.140.0/24
89.37.195.0/24
89.40.36.0/24
Signature Algorithm: sha256WithRSAEncryption
02:88:64:57:b9:c3:42:13:0e:09:4d:7d:d6:ec:10:7a:f5:62:
c9:18:20:97:44:c6:8c:9f:bd:be:d3:f6:7f:4a:cc:f1:4c:f9:
b5:14:b3:c6:8c:34:32:ad:57:81:5b:93:03:ee:42:18:6e:ed:
c9:ca:39:46:85:27:bd:ba:3b:76:c7:24:81:68:ee:f0:e2:0c:
b4:b3:88:f7:f8:70:56:81:20:93:08:af:4e:57:3f:16:7f:d8:
e4:aa:94:d3:13:f3:bf:74:e7:a7:fd:34:8d:6c:8d:0b:b3:c9:
8e:2f:75:6e:26:36:88:c0:71:4a:ba:17:29:f7:5a:09:32:f2:
91:7e:73:c3:b3:ae:ab:ec:4d:9f:93:ef:bc:cf:c1:f4:71:7c:
de:45:63:c9:c3:46:c7:d4:4f:17:bf:a4:ad:27:94:d4:0c:e4:
6c:14:bb:20:8b:70:19:ed:54:57:f2:e9:d0:a8:62:39:af:9e:
22:54:0b:f6:db:b5:ff:18:e4:1c:7f:6b:0c:b2:d7:7f:07:b0:
08:16:41:dc:8a:b4:1a:6f:d1:a5:6e:08:aa:b3:19:c8:b2:6e:
9b:e3:5b:84:40:46:0e:25:18:92:e3:1e:c7:30:20:4e:1f:2d:
7f:7d:bd:bc:94:08:8e:b3:33:a7:2b:93:dc:12:94:8d:c0:3d:
c3:ff:1b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:11 2024 by rpki-client on console-fra.rpki-client.org