Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Zoq_DnC1i7abvcdcnyW7Vm68woA.roa
File: Zoq_DnC1i7abvcdcnyW7Vm68woA.roa (raw, json)
Hash identifier: CCzt6TWx2e0pA3l+NJRlx7zTwF30FKiMDyW4JJoeHoo=
Subject key identifier: 66:8A:BF:0E:70:B5:8B:B6:9B:BD:C7:5C:9F:25:BB:56:6E:BC:C2:80
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01856FD524B8B416E8AF94D73F0B9BF4E657
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Zoq_DnC1i7abvcdcnyW7Vm68woA.roa
Signing time: Mon 02 Jan 2023 00:15:17 +0000
ROA not before: Mon 02 Jan 2023 00:15:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48459
IP address blocks: 89.42.231.0/24 maxlen: 24
89.42.41.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:24:b8:b4:16:e8:af:94:d7:3f:0b:9b:f4:e6:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:15:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=668abf0e70b58bb69bbdc75c9f25bb566ebcc280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:26:d3:b7:5c:f8:7a:38:79:dc:0b:64:d9:c3:
cf:40:22:43:b7:f0:81:4f:e9:44:c5:66:b8:56:54:
6e:26:ca:bf:42:12:1a:70:d0:29:4f:73:7f:b5:4b:
31:ed:5d:a6:6d:df:b3:76:84:fb:a3:3d:7e:01:ba:
cb:61:87:09:43:b9:ea:9b:ee:a9:7f:9a:fb:a3:ed:
1f:a8:5b:f0:a6:f5:f0:89:ed:ca:e9:f8:51:cd:ad:
c3:1c:c8:94:74:33:b2:c3:f8:81:3c:0f:04:34:e2:
66:3d:8f:11:c5:6c:32:89:63:19:f1:ea:ed:b6:82:
8b:5b:a9:db:d9:8b:f4:c4:87:9c:36:e6:01:8d:34:
f3:4f:29:6f:7a:d1:14:8e:00:44:df:20:a4:28:99:
c8:72:2e:58:3b:6e:40:ab:73:6d:02:4f:63:5e:68:
84:e3:04:aa:a8:7f:15:75:12:b2:8d:21:4c:00:6a:
c8:35:55:d0:be:b2:10:21:19:d2:e8:bd:d0:82:ec:
82:2f:e5:a4:5f:8c:33:54:50:61:2a:85:b5:09:bc:
6f:e9:fd:e6:ec:0b:aa:e9:6f:48:23:8a:02:0d:cf:
8c:c5:08:73:04:73:1a:53:33:d9:fe:37:a1:e7:10:
ab:df:fc:7a:ab:51:d0:6f:a3:10:8a:16:9a:87:31:
b2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:8A:BF:0E:70:B5:8B:B6:9B:BD:C7:5C:9F:25:BB:56:6E:BC:C2:80
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Zoq_DnC1i7abvcdcnyW7Vm68woA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.41.0/24
89.42.231.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:11:d3:00:a7:0d:30:53:f7:67:23:dc:9d:92:71:73:96:c8:
ee:36:b1:e8:2f:af:b9:a9:28:66:b2:c7:95:72:84:a9:04:22:
44:9e:04:e8:58:6a:9e:b0:18:24:9f:59:5a:62:89:a6:42:f9:
60:12:7c:68:a4:b2:a5:57:09:69:5d:ec:86:9f:3b:0c:1f:81:
c5:67:c2:00:62:85:61:2a:0a:e5:64:41:0f:71:77:40:71:4b:
80:0a:44:be:4d:f9:db:2b:9e:10:d8:9b:57:93:3c:52:4f:76:
f9:f7:2c:63:b1:0b:22:45:f4:b0:92:7d:16:b3:1a:17:97:5c:
f3:6f:2b:78:72:d9:b6:9b:33:37:2e:12:2d:ec:c5:38:56:1f:
a4:d7:3b:5a:70:a0:d4:0a:cf:82:7a:41:03:81:5a:b5:5c:7a:
e3:18:67:50:1c:37:88:d0:88:39:db:22:ed:5e:89:d0:2d:1f:
f4:63:2e:7b:73:24:77:66:e7:a2:2a:2a:73:88:6d:52:84:d9:
e4:fd:c1:ff:35:99:eb:4f:2e:1b:bc:7c:b2:58:af:82:c5:97:
d6:45:8f:6d:18:f6:25:ca:cb:7a:8b:df:82:38:87:be:3b:f4:
dc:9d:b1:62:7c:6f:06:c2:49:f2:e0:de:2b:9e:60:50:2a:42:
06:04:44:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:52 2024 by rpki-client on console-fra.rpki-client.org