Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zbPXAC0ukuFhP2nM5MenkE89zbo.roa
File: zbPXAC0ukuFhP2nM5MenkE89zbo.roa (raw, json)
Hash identifier: EAhqSN3NIMTtLKaCei6zVU5H+8IS/qhSR+T/BiOB3KE=
Subject key identifier: CD:B3:D7:00:2D:2E:92:E1:61:3F:69:CC:E4:C7:A7:90:4F:3D:CD:BA
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018B3E66CE3B88CD12D0DDB1BB3493901FE5
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zbPXAC0ukuFhP2nM5MenkE89zbo.roa
Signing time: Tue 17 Oct 2023 16:10:06 +0000
ROA not before: Tue 17 Oct 2023 16:10:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 269862
IP address blocks: 89.213.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3e:66:ce:3b:88:cd:12:d0:dd:b1:bb:34:93:90:1f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Oct 17 16:10:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cdb3d7002d2e92e1613f69cce4c7a7904f3dcdba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e1:04:9d:d9:72:e0:b0:05:d4:cc:ff:14:37:
32:a5:2e:6f:25:69:45:f3:b6:c7:a6:71:68:a3:b4:
3e:0d:2a:b6:7e:18:5b:86:3b:a7:44:98:01:57:28:
26:3b:a9:27:9b:d2:6c:3c:24:11:e8:07:0a:a0:72:
40:3f:39:6f:08:ca:d1:8f:9b:aa:e8:35:a0:67:c7:
9e:f3:a6:d3:bc:79:c1:67:57:c5:3d:28:c0:d7:c4:
68:21:15:21:ef:31:45:a9:e1:8a:96:0b:20:c8:bb:
d6:0f:d8:94:5f:7b:4f:28:7b:90:10:4d:92:21:36:
88:a5:cf:43:71:e8:7a:c9:fc:80:a1:2a:1e:1d:8e:
da:c8:bf:88:48:ab:9c:a9:0b:49:cc:6c:2a:97:ab:
82:02:f5:93:4b:81:ce:dc:13:f9:81:37:f7:ee:61:
fe:fc:ed:36:b9:bf:b3:d3:7c:a7:fc:93:de:fd:31:
3d:60:c8:51:0d:49:aa:da:9f:3e:02:88:3c:23:e3:
0b:b0:52:2c:4b:59:f0:f3:58:39:3f:a0:4b:1a:79:
3a:41:cf:cd:0e:50:a6:04:86:8a:15:34:22:49:2a:
54:bd:22:0b:88:07:65:03:77:ef:be:f1:14:52:19:
81:22:d9:fe:e1:dd:0b:52:05:7e:cb:d5:d9:88:6d:
f5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B3:D7:00:2D:2E:92:E1:61:3F:69:CC:E4:C7:A7:90:4F:3D:CD:BA
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zbPXAC0ukuFhP2nM5MenkE89zbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.167.0/24
Signature Algorithm: sha256WithRSAEncryption
62:97:50:97:ad:fe:6f:a2:a3:8d:a7:b2:f9:e6:cb:d8:b3:a6:
d7:8e:57:5e:67:0a:83:ec:e5:dc:da:3d:5c:be:74:46:a4:3b:
08:ce:57:d8:93:0d:59:eb:87:2e:85:b2:74:00:8c:fe:ae:39:
2e:a3:80:ed:76:c1:59:15:e5:81:a5:82:fc:f0:81:20:0c:fd:
2d:df:52:f9:62:72:3d:59:7b:c0:e3:01:ad:2b:f9:91:f3:61:
b9:83:af:78:9f:91:d7:5e:ed:f4:4f:86:22:69:3a:b1:05:9f:
a9:cb:ea:aa:cc:9c:d7:b0:9c:33:af:ef:0e:f7:63:f2:e6:19:
8c:75:72:6c:e1:11:10:02:3d:4b:a2:a9:64:81:12:a9:43:21:
94:65:96:5b:a4:8d:8f:00:52:4e:d6:cf:e9:3a:c5:7a:62:d8:
54:95:4a:22:79:10:54:6b:3d:1b:3e:9b:ff:55:cd:07:1b:9c:
c4:74:a5:32:e0:63:a5:da:c7:af:d1:5e:ec:91:15:6f:9b:4f:
43:9f:2f:6a:b6:f0:73:0b:bf:3a:0c:ca:50:0f:b6:9c:e5:8a:
e7:aa:d0:9c:84:e3:cc:60:65:23:36:68:05:3f:29:a5:61:2e:
f2:a5:4e:f8:e3:d9:b2:7c:53:a5:0c:b4:72:88:9a:05:30:70:
36:3a:93:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:18 2024 by rpki-client on console-fra.rpki-client.org