Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/ZJXvKFzQWiUp_18-FXXwVubCS3U.roa
File: ZJXvKFzQWiUp_18-FXXwVubCS3U.roa (raw, json)
Hash identifier: EYe3+5c6R6JKF1R/s3d1OqhDPn3k5YutidQBOLJ7Lgs=
Subject key identifier: 64:95:EF:28:5C:D0:5A:25:29:FF:5F:3E:15:75:F0:56:E6:C2:4B:75
Certificate issuer: /CN=2c96946c501ddf48696da2cf110fdceb286fac98
Certificate serial: 01857183212BB43B8F9D2BA6C65B2E8FF40E
Authority key identifier: 2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/ZJXvKFzQWiUp_18-FXXwVubCS3U.roa
Signing time: Mon 02 Jan 2023 08:04:57 +0000
ROA not before: Mon 02 Jan 2023 08:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208728
IP address blocks: 89.255.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Jun 2023 12:35:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:83:21:2b:b4:3b:8f:9d:2b:a6:c6:5b:2e:8f:f4:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c96946c501ddf48696da2cf110fdceb286fac98
Validity
Not Before: Jan 2 08:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6495ef285cd05a2529ff5f3e1575f056e6c24b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:20:cd:d1:61:10:c8:a1:c6:bc:f0:60:49:48:
52:ca:bf:0a:ec:25:32:52:1e:70:db:f4:d2:57:ef:
4b:e3:67:a3:0a:92:fa:e2:b2:4f:a9:20:24:e7:21:
f9:38:c2:b0:37:bf:42:84:5e:5a:34:c3:1e:a2:29:
06:7b:af:15:52:8a:de:4e:37:be:1f:84:c9:da:f7:
49:56:df:b9:46:83:78:66:43:3b:ad:a3:78:d7:1b:
89:8c:04:46:dd:7a:54:32:7a:c2:dc:64:e4:a8:67:
d0:ca:91:c5:d3:c6:ed:40:40:92:e2:33:c9:b4:e1:
d8:2b:59:5a:39:cd:db:b6:c1:e8:dc:d8:01:ba:9f:
b3:29:c6:7b:91:d9:28:c7:1c:8a:0b:a0:66:fd:c4:
19:c9:fb:1b:24:58:48:d0:f5:91:09:5d:b0:02:9f:
81:e1:7a:08:62:64:63:6a:f7:7a:f0:76:d7:37:77:
ee:22:9b:04:e2:a4:a5:f0:86:1b:8d:82:21:42:18:
81:c3:4e:36:61:cb:ae:ef:e2:5d:e5:05:cf:89:05:
33:03:02:b3:03:d9:e7:41:35:0a:e8:46:8a:1b:19:
5f:cf:d4:6a:8d:d5:7a:0d:78:4a:b9:a5:49:7c:0c:
16:4f:49:aa:63:fe:11:df:4d:a5:79:ba:20:d8:81:
f3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:95:EF:28:5C:D0:5A:25:29:FF:5F:3E:15:75:F0:56:E6:C2:4B:75
X509v3 Authority Key Identifier:
keyid:2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/ZJXvKFzQWiUp_18-FXXwVubCS3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.255.207.0/24
Signature Algorithm: sha256WithRSAEncryption
13:f5:7f:47:41:b2:70:30:3f:a7:a2:c9:44:b4:e9:eb:6a:a8:
52:2b:f6:31:1b:1f:47:b5:9d:46:ff:58:38:e6:98:fe:1e:80:
0f:22:13:4c:51:1a:06:dc:e7:e3:a1:26:07:a5:fd:7e:23:d0:
72:74:e8:65:c6:fb:dc:f6:49:6e:1f:b9:8a:e7:28:05:78:f6:
79:77:13:d3:82:fb:3e:6b:22:f5:6d:61:26:3e:0f:b1:52:df:
0f:d7:0d:da:f4:bd:b5:60:c6:e0:2b:0b:98:79:8c:fc:54:8d:
43:cc:db:9b:91:2a:bf:12:95:de:b3:a4:f1:dd:d2:6d:1a:09:
b9:ab:be:43:b4:09:96:12:75:d0:41:04:f6:49:d5:5e:fb:a0:
c9:f5:2f:67:3b:6c:b2:38:25:36:7d:da:47:b1:16:cd:ac:6e:
39:44:09:cf:b0:81:48:0e:90:09:6e:9a:26:57:de:2c:2b:0e:
7b:59:41:2d:b5:a7:e7:d3:91:94:83:eb:f1:4e:b0:8c:3d:34:
cc:04:c0:4a:80:e4:65:1c:49:89:32:14:2c:04:88:70:ac:b5:
3b:c6:2d:9b:6a:24:07:6a:8a:86:9b:47:db:1f:aa:c9:f5:a3:
17:68:52:9f:04:4c:1a:b5:f4:b2:47:a9:ba:72:f2:c1:5e:be:
f7:f5:d4:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:00 2024 by rpki-client on console-fra.rpki-client.org