Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/ZhY2xTqmnfet9CJD9GfohvhEAB4.roa
File: ZhY2xTqmnfet9CJD9GfohvhEAB4.roa (raw, json)
Hash identifier: Jot35wr+iDESmsYmGTdiGPufazAeUeBskWvqEH+uvzI=
Subject key identifier: 66:16:36:C5:3A:A6:9D:F7:AD:F4:22:43:F4:67:E8:86:F8:44:00:1E
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 01904F9839D69882701E50BC5EA7B363299F
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/ZhY2xTqmnfet9CJD9GfohvhEAB4.roa
Signing time: Tue 25 Jun 2024 13:31:34 +0000
ROA not before: Tue 25 Jun 2024 13:31:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 89.187.9.0/24 maxlen: 24
89.187.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Sep 2024 18:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:98:39:d6:98:82:70:1e:50:bc:5e:a7:b3:63:29:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: Jun 25 13:31:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=661636c53aa69df7adf42243f467e886f844001e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:41:af:62:2b:d3:6a:fb:17:f0:9a:33:ce:9b:
4b:2d:76:59:f0:19:60:52:78:6f:d7:d4:75:81:68:
92:6c:41:56:98:f5:6f:04:13:fd:a8:21:55:ab:37:
f8:31:95:c4:b1:09:57:09:5d:0c:1b:6e:11:2b:e0:
46:19:17:bf:2b:ba:0f:4d:ba:a1:8b:ce:41:2d:db:
5e:17:8c:36:70:b2:e3:f2:9c:38:8c:d5:4f:cb:53:
1d:cd:38:54:52:7a:a6:a9:be:3a:7f:84:9f:90:60:
d9:24:66:05:3f:d1:e8:5b:2c:60:34:61:1a:e1:7f:
ea:85:18:70:ef:d3:21:b4:ca:ec:95:f5:27:17:ec:
02:72:1a:3d:b0:f9:5d:ad:b1:f9:27:e2:f2:df:b4:
a4:cd:ed:45:8b:9e:d5:cc:cf:42:c6:2c:c9:16:d6:
17:40:ad:d7:f4:1f:8f:b1:a6:ab:ef:f5:85:3e:f5:
70:05:49:a8:3e:a4:b7:98:3f:b9:c2:e9:b2:78:7a:
72:5f:31:95:ef:31:3e:f6:b6:2b:14:1d:07:20:6b:
a6:01:5e:be:2f:a1:92:a4:b5:6c:db:10:00:c4:6b:
d9:8a:12:f6:f2:07:3a:70:c9:ad:e6:5f:21:82:68:
8c:cc:cb:7d:37:07:14:7a:1d:e7:fb:17:c6:d5:2e:
c5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:16:36:C5:3A:A6:9D:F7:AD:F4:22:43:F4:67:E8:86:F8:44:00:1E
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/ZhY2xTqmnfet9CJD9GfohvhEAB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.9.0/24
89.187.27.0/24
Signature Algorithm: sha256WithRSAEncryption
34:9d:20:4c:af:d3:92:a4:be:61:bb:4d:52:7e:c7:2b:1a:ee:
f3:8e:63:c8:56:8c:69:44:de:19:4a:38:93:e4:65:c7:53:61:
86:23:30:a9:2a:f7:67:a1:47:c5:0f:17:83:70:ac:0d:b0:08:
90:34:f9:4e:ed:b8:f8:98:fc:1d:36:e1:2b:74:7e:69:ae:60:
f4:28:99:eb:03:9c:89:62:30:3b:a2:b6:fe:e8:d7:31:3d:8b:
30:d0:c1:c5:a0:ab:ce:16:60:cb:a9:b9:cf:94:ed:ae:57:9f:
1b:9f:0c:2b:18:1f:df:ed:17:6c:e5:1b:05:e6:0e:27:9b:4e:
62:56:a9:92:78:f6:1e:0d:f1:99:20:af:f8:26:a1:06:d8:ca:
e6:d1:dd:58:75:9d:25:a7:6d:49:99:27:ff:51:c6:d1:62:f1:
0f:9b:95:40:95:1c:1e:23:7c:40:fb:77:46:fd:40:16:7f:68:
72:d9:19:23:72:eb:9f:70:09:24:df:87:3c:96:cb:60:19:3e:
d5:b9:85:51:e0:71:d5:2b:30:0a:fa:31:9f:62:5f:27:6e:b6:
a5:a3:83:17:0a:87:40:54:73:7d:d2:71:66:2b:45:13:30:c5:
83:5e:68:b8:c2:54:3b:36:08:92:6f:df:bd:a1:78:b0:b4:03:
13:17:5d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 10 20:38:13 2024 by rpki-client on console-ams.rpki-client.org