Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/ZhdX5h7nDckNewQwLlr2IuVGDZw.roa
File: ZhdX5h7nDckNewQwLlr2IuVGDZw.roa (raw, json)
Hash identifier: XLGpbLNlpaHdWsvsO82xAXd9R1SJ6KgW13xrOCR0nrs=
Subject key identifier: 66:17:57:E6:1E:E7:0D:C9:0D:7B:04:30:2E:5A:F6:22:E5:46:0D:9C
Certificate issuer: /CN=84bfc451fc4f2411addd00a9fbb17346ad6e8996
Certificate serial: 018D88EC2B468AA2DD2096CD83E32E0A2D68
Authority key identifier: 84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/ZhdX5h7nDckNewQwLlr2IuVGDZw.roa
Signing time: Thu 08 Feb 2024 13:33:15 +0000
ROA not before: Thu 08 Feb 2024 13:33:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206238
IP address blocks: 91.132.40.0/22 maxlen: 22
188.212.112.0/22 maxlen: 22
188.213.88.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 May 2024 17:41:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:88:ec:2b:46:8a:a2:dd:20:96:cd:83:e3:2e:0a:2d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84bfc451fc4f2411addd00a9fbb17346ad6e8996
Validity
Not Before: Feb 8 13:33:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=661757e61ee70dc90d7b04302e5af622e5460d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:56:3b:12:12:86:f1:c9:9b:7c:9f:8e:45:e0:
a1:0e:fd:f0:7e:65:39:9f:c2:3e:d6:c3:9d:42:5b:
02:5c:1a:de:2e:81:a7:67:1d:88:a1:8a:96:f2:3e:
7f:26:85:2a:b6:04:15:76:a9:39:48:e3:c3:28:09:
d5:9e:8c:57:74:d2:63:b0:6b:4d:75:e5:32:d0:dd:
99:eb:68:69:34:88:34:fa:e0:bc:2a:9e:6c:ba:62:
8e:57:f1:fe:f2:1e:96:bc:cd:03:f4:75:80:9b:ab:
b7:1c:a6:50:13:cd:6e:15:00:55:0e:d7:7b:1e:98:
9d:78:0a:e5:a3:c8:5b:91:c1:16:8a:cc:12:b5:ca:
d6:4c:98:4c:2b:df:b1:5c:8d:2c:4b:95:b6:f3:33:
7a:35:1d:00:c8:f6:79:23:0c:92:c5:1c:01:72:0b:
3b:73:c0:49:97:2c:52:89:46:38:b9:2d:fe:25:df:
ce:24:7e:26:b4:e3:0a:19:2b:1a:12:25:e3:32:69:
d3:a2:b3:b8:51:05:e0:1d:0c:cd:7e:88:e2:03:96:
1d:68:c2:d4:ac:60:40:27:67:48:ea:b6:ee:f5:10:
41:d2:60:21:77:cd:93:34:3f:23:fc:7e:cc:b4:3c:
8f:00:de:45:2f:51:77:05:4c:b0:03:80:f4:c4:f0:
5b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:17:57:E6:1E:E7:0D:C9:0D:7B:04:30:2E:5A:F6:22:E5:46:0D:9C
X509v3 Authority Key Identifier:
keyid:84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/ZhdX5h7nDckNewQwLlr2IuVGDZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.40.0/22
188.212.112.0/22
188.213.88.0/21
Signature Algorithm: sha256WithRSAEncryption
84:ea:f5:4f:7c:1e:1e:3e:ef:ce:1e:6e:3d:5a:b2:93:78:ad:
06:72:cf:70:48:4b:1b:01:75:c9:a5:7f:3b:aa:c9:45:cd:d1:
ff:fd:bf:df:2a:7e:c9:68:e1:65:ac:8f:83:52:0d:d4:c8:c3:
0f:ec:7e:14:3f:63:79:5c:d4:48:66:3a:be:ec:7b:10:cc:98:
9b:c4:c4:3a:f4:38:f7:74:60:72:b6:43:d8:02:29:17:54:da:
68:e5:38:e1:dc:cf:ac:64:e0:30:b2:3e:0a:49:6e:8a:ab:f2:
6b:4f:3b:dd:98:f1:c8:8b:ea:2f:ff:65:8e:80:26:63:c9:58:
34:f1:ce:f0:d2:ec:60:60:96:c0:a7:91:86:44:48:6b:d4:ec:
b1:bf:36:15:3f:0a:f8:98:8e:c6:e4:37:79:41:25:99:0e:e5:
75:af:61:f0:23:4f:35:be:1b:41:65:2d:29:0d:b3:ce:51:e0:
e7:d1:6d:07:a5:90:41:d9:62:da:91:76:38:f3:4e:82:04:29:
ce:30:29:05:ea:2d:87:8f:3e:57:6a:2e:b1:e6:d6:2a:56:76:
b2:eb:ac:ab:6c:f9:ec:9c:fa:9a:fa:fd:b0:62:c3:3a:6f:c1:
c5:06:b4:54:2a:76:3a:5b:ec:a3:2e:6e:d2:eb:66:8d:53:78:
b6:59:8d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:10:44 2024 by rpki-client on console-ams.rpki-client.org