Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/Z8-X3e_JdthhN3tJ6q0zGqgcVhU.roa
File: Z8-X3e_JdthhN3tJ6q0zGqgcVhU.roa (raw, json)
Hash identifier: ly47ive3cNxKk1a2Z5FwxesUQLnfPGCC/91EPCvXf1c=
Subject key identifier: 67:CF:97:DD:EF:C9:76:D8:61:37:7B:49:EA:AD:33:1A:A8:1C:56:15
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 018B4FF8EE9B9157AC4B62965EF8790E0B8E
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/Z8-X3e_JdthhN3tJ6q0zGqgcVhU.roa
Signing time: Sat 21 Oct 2023 02:03:15 +0000
ROA not before: Sat 21 Oct 2023 02:03:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 89.187.9.0/24 maxlen: 24
89.187.8.0/24 maxlen: 24
89.187.10.0/24 maxlen: 24
89.187.7.0/24 maxlen: 24
89.187.6.0/24 maxlen: 24
89.187.16.0/24 maxlen: 24
89.187.15.0/24 maxlen: 24
89.187.17.0/24 maxlen: 24
89.187.12.0/24 maxlen: 24
89.187.14.0/24 maxlen: 24
89.187.13.0/24 maxlen: 24
89.187.18.0/24 maxlen: 24
89.187.22.0/24 maxlen: 24
89.187.19.0/24 maxlen: 24
89.187.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:4f:f8:ee:9b:91:57:ac:4b:62:96:5e:f8:79:0e:0b:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: Oct 21 02:03:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=67cf97ddefc976d861377b49eaad331aa81c5615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:64:4a:76:76:c0:87:e6:b0:f7:e9:5c:fb:3c:
ab:1a:39:da:44:ea:77:79:f6:06:55:8d:7d:55:33:
62:87:ea:52:b3:76:80:8e:ae:fe:49:3b:89:6c:53:
e1:53:48:98:a9:e3:6d:3d:8b:03:30:7d:62:32:66:
a1:64:d6:74:89:db:40:a9:52:11:00:c2:a6:54:4c:
04:d3:9b:09:f2:fa:73:bf:a1:48:02:e8:06:9b:e8:
fa:83:2d:eb:05:12:b9:65:95:58:c1:af:a4:7f:bd:
4a:6c:bc:60:88:28:67:1c:e5:ed:53:a6:63:f0:3d:
be:c0:19:13:66:17:1c:86:62:96:03:5f:9e:e1:26:
b3:6e:06:17:35:0d:10:b2:94:de:9a:16:08:2a:93:
44:52:a6:98:d2:73:fc:a2:41:c0:7b:ba:10:a8:22:
e8:96:e0:d9:bd:0e:e3:c7:56:06:c4:21:3d:f7:77:
e7:74:21:50:26:05:fe:56:a6:65:70:cf:40:bd:54:
6f:7e:e0:c9:7b:1b:02:6c:b5:df:5d:49:e2:b9:74:
e3:24:ca:a4:26:af:b5:5a:a4:a7:d3:42:86:ee:2f:
fb:29:92:ec:dd:29:dc:f8:83:58:6f:d6:39:b1:5c:
7a:ce:44:1e:c1:67:4c:60:e8:6f:c6:8f:80:37:74:
60:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CF:97:DD:EF:C9:76:D8:61:37:7B:49:EA:AD:33:1A:A8:1C:56:15
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/Z8-X3e_JdthhN3tJ6q0zGqgcVhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.6.0-89.187.10.255
89.187.12.0-89.187.20.255
89.187.22.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:ad:d4:28:38:0f:be:df:f9:7d:b9:c0:94:b6:5f:12:57:59:
c0:64:70:de:76:83:92:2a:c7:62:28:3b:2c:cb:11:fb:1b:e8:
75:88:27:9e:02:aa:0e:1e:87:c9:29:2e:7e:07:1a:81:2b:9d:
0f:da:10:9d:40:56:85:bb:8a:8e:9c:de:81:c5:f2:45:69:6e:
9e:d2:5e:78:6c:e4:6d:38:18:da:ee:9f:c4:9b:ee:db:ef:6d:
f6:e6:26:64:5e:10:a9:f3:e9:a0:eb:3c:5f:f7:04:0a:e8:bb:
7b:45:3e:48:6e:fb:65:95:ee:08:56:45:5b:87:f9:c6:36:19:
1e:32:85:fa:ae:2c:3a:c9:cb:f6:21:ae:70:83:90:0f:9c:05:
0a:0f:60:2b:44:2c:09:53:a0:8c:0d:3d:6c:b1:04:79:74:0b:
e3:0e:95:52:85:f8:7a:b8:b5:19:7f:39:db:03:ca:59:df:28:
2d:93:bf:a8:76:eb:81:99:e9:70:a3:e3:16:da:dc:0a:49:a6:
9d:ab:9b:fa:67:9f:b2:a9:95:fa:07:6a:49:0d:fe:a6:26:ff:
81:ec:33:f9:3b:86:67:30:29:c3:a9:90:65:18:d5:09:dd:05:
d7:ea:da:f9:4a:cc:88:bb:ed:f1:c5:9c:f6:9d:88:08:05:f7:
f8:91:ed:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:03 2024 by rpki-client on console-ams.rpki-client.org