Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/8ZHfPJzq2m6CelSoyKa0QUiOhqQ.roa
File: 8ZHfPJzq2m6CelSoyKa0QUiOhqQ.roa (raw, json)
Hash identifier: FzdCJDeBJHFCPOYZeeWBYNu6Q79Y7PugdOUv/pImb2Y=
Subject key identifier: F1:91:DF:3C:9C:EA:DA:6E:82:7A:54:A8:C8:A6:B4:41:48:8E:86:A4
Certificate issuer: /CN=4c6319fe7859c342f7cd9f711306f56590828d60
Certificate serial: 0185708299D55D47A322254414DFB8C359D2
Authority key identifier: 4C:63:19:FE:78:59:C3:42:F7:CD:9F:71:13:06:F5:65:90:82:8D:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/8ZHfPJzq2m6CelSoyKa0QUiOhqQ.roa
Signing time: Mon 02 Jan 2023 03:24:45 +0000
ROA not before: Mon 02 Jan 2023 03:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202666
IP address blocks: 89.40.168.0/23 maxlen: 23
89.40.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:99:d5:5d:47:a3:22:25:44:14:df:b8:c3:59:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c6319fe7859c342f7cd9f711306f56590828d60
Validity
Not Before: Jan 2 03:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f191df3c9ceada6e827a54a8c8a6b441488e86a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:cf:bb:27:ce:08:63:bf:95:29:7a:da:04:2b:
e8:e9:50:50:a3:9b:bb:ce:d3:ec:0c:23:57:c1:10:
93:30:b7:f5:12:18:a2:45:a5:5c:ee:53:31:74:61:
5c:e3:a7:d4:66:33:36:19:58:66:5b:df:7d:d8:87:
69:a0:38:9f:15:1e:55:85:f2:e2:01:01:84:98:6e:
6e:8c:91:b8:72:cb:ba:71:e2:3c:cb:82:4e:73:f3:
b9:45:08:90:2a:70:43:45:a3:0a:14:7f:b3:28:66:
3b:69:81:49:eb:bf:47:c1:9d:b3:5a:ad:ed:4c:da:
55:79:9a:15:c7:0b:b3:4c:f2:be:c4:96:a5:6e:c8:
7e:2b:45:0b:8d:9e:06:72:f6:4e:7a:b3:73:22:ee:
ca:67:ef:bd:bd:ac:08:82:78:74:d0:2c:4e:b5:79:
8a:43:87:08:93:97:5f:a0:25:ee:51:d2:47:16:9b:
74:83:9a:b7:0e:90:bd:bd:02:ca:ef:9a:74:5d:f4:
4e:9e:93:f9:4a:45:c5:49:4e:d0:22:31:8e:93:b6:
ed:54:66:a2:4b:c8:f4:21:8b:86:34:e8:77:54:33:
7b:89:22:bf:e5:a0:8f:d2:76:b7:63:03:a9:e5:70:
da:af:98:93:9c:fc:80:6d:8f:18:32:50:90:b2:c9:
4c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:91:DF:3C:9C:EA:DA:6E:82:7A:54:A8:C8:A6:B4:41:48:8E:86:A4
X509v3 Authority Key Identifier:
keyid:4C:63:19:FE:78:59:C3:42:F7:CD:9F:71:13:06:F5:65:90:82:8D:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/8ZHfPJzq2m6CelSoyKa0QUiOhqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.168.0/23
Signature Algorithm: sha256WithRSAEncryption
35:46:61:c0:0f:bc:55:30:66:83:94:f3:47:e8:fa:21:45:34:
d1:68:21:03:1e:1e:ec:ff:f0:bc:ae:32:6b:f3:0f:7f:f8:42:
2d:7e:0b:7e:e4:be:df:18:80:39:30:e9:45:76:4a:a7:42:f9:
95:99:69:9b:15:be:dc:72:49:26:61:59:3e:b7:91:e0:1b:86:
22:a6:ad:09:49:24:65:e6:08:51:f7:c6:13:db:18:c3:5f:03:
df:d9:e5:ab:67:c7:8a:63:71:96:02:e7:69:2c:96:42:0a:fa:
76:1f:46:cb:5a:a7:8a:cc:42:8b:f1:ba:0b:76:f6:17:fa:a2:
72:a3:84:fc:99:42:5d:d0:09:cd:ea:0b:4e:fb:97:1f:f8:f1:
e5:ba:41:10:cb:ef:42:64:37:ed:41:74:9c:e1:fd:c9:e9:63:
c7:4c:4a:89:5d:6a:1e:e4:97:57:ca:70:5e:b5:dc:53:1a:ac:
6a:d2:e6:83:a1:7e:b6:98:22:6c:31:c2:de:12:88:ae:a5:af:
1b:2c:b8:8c:11:c1:59:1b:60:7d:9f:1b:b0:2c:63:a8:81:14:
03:fc:f7:1b:24:91:20:b2:00:bc:87:1e:e8:a9:43:be:9e:b1:
85:09:58:97:2f:50:7d:e3:45:be:1c:9f:23:6f:fb:e9:70:cb:
71:9f:23:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:13 2024 by rpki-client on console-ams.rpki-client.org