Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/1Z8zOwTUpr2xO3yU7TJR-52ZLFs.roa
File: 1Z8zOwTUpr2xO3yU7TJR-52ZLFs.roa (raw, json)
Hash identifier: tctrNAHjXJQzOOggKpOGW95NPayD6WoUcJxIUCd3+Sg=
Subject key identifier: D5:9F:33:3B:04:D4:A6:BD:B1:3B:7C:94:ED:32:51:FB:9D:99:2C:5B
Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Certificate serial: 01856C6EF680707A2D8E0A4FC2CFDB93D378
Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/1Z8zOwTUpr2xO3yU7TJR-52ZLFs.roa
Signing time: Sun 01 Jan 2023 08:24:49 +0000
ROA not before: Sun 01 Jan 2023 08:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41573
IP address blocks: 89.40.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6e:f6:80:70:7a:2d:8e:0a:4f:c2:cf:db:93:d3:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Validity
Not Before: Jan 1 08:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d59f333b04d4a6bdb13b7c94ed3251fb9d992c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d6:3a:62:01:cb:bf:e9:cd:cc:6f:3f:4d:49:
5e:be:31:cc:6e:63:e8:85:c4:3d:bd:7a:bc:78:84:
51:ab:03:b8:c4:b3:99:76:d7:de:88:eb:22:fb:c3:
8d:55:a7:82:66:9e:f3:70:4f:ae:85:9b:89:bd:d8:
ec:30:93:58:cb:62:9b:66:4e:16:c6:8f:a1:b2:2b:
4b:ce:7c:ce:9a:8d:32:3d:f7:52:3b:f0:f8:a8:97:
ee:6b:63:d9:ad:8e:de:39:93:64:e0:51:ba:50:58:
a1:dc:57:a0:a6:6b:b5:8c:f9:db:f9:7a:30:11:b1:
ae:38:81:99:33:ad:6c:41:a5:40:8c:e3:79:11:66:
c5:e1:99:ed:b2:ca:92:65:f6:c4:c9:78:af:2e:e6:
bc:d4:e6:bb:a1:28:e7:50:1c:20:e8:fe:2b:a8:0a:
72:0a:ab:1f:9b:7e:3c:d5:34:27:40:24:16:e4:9a:
12:42:ee:72:f9:ad:0b:ed:6c:19:75:61:46:b4:25:
88:11:eb:20:e7:ae:ca:ac:df:5a:2b:95:74:0b:b0:
62:a0:7b:f8:18:9d:c4:5d:e3:5a:e1:65:c6:48:ba:
38:e3:0b:ba:3f:dd:a7:1b:9f:23:5a:d9:66:ff:0e:
7b:29:98:c4:b4:55:61:d9:36:02:25:cd:87:af:c1:
b7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9F:33:3B:04:D4:A6:BD:B1:3B:7C:94:ED:32:51:FB:9D:99:2C:5B
X509v3 Authority Key Identifier:
keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/1Z8zOwTUpr2xO3yU7TJR-52ZLFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.225.0/24
Signature Algorithm: sha256WithRSAEncryption
11:5c:fc:1d:60:12:9e:b0:de:57:a3:98:ce:27:27:e1:96:1c:
92:f0:5a:fd:bb:92:28:3c:ab:a7:d6:d9:c3:9c:2e:b7:bc:02:
28:b9:42:2d:4e:a0:40:de:fc:b8:8c:13:1f:19:a3:8b:61:0a:
ac:5d:30:d3:df:1c:21:a5:1c:bb:fb:f8:e8:24:7f:cc:cb:3a:
90:ac:81:a8:9f:e7:eb:61:bd:4a:40:7c:d7:c4:60:05:47:ca:
64:62:be:45:e1:88:44:9c:de:ea:34:d2:dc:d8:b3:6c:e9:5e:
ac:9e:7b:b7:6e:b5:ce:d6:3f:6e:22:ba:ed:9f:bc:9b:f9:9a:
eb:8c:f5:48:70:a6:e8:a0:6e:7a:9d:ac:29:b9:9f:3c:2e:ab:
37:e2:d2:c8:af:81:8b:75:a2:56:12:14:ae:51:23:47:9c:e3:
9b:a9:83:f2:6c:c8:a1:dc:18:34:ac:eb:f7:f3:d8:0e:3a:8a:
91:3b:0e:13:27:ae:8c:a8:32:90:95:06:f4:29:d1:e5:55:44:
57:ce:b2:ea:51:80:e5:4a:c0:86:67:44:af:29:2b:8d:a4:9c:
4b:cb:69:89:3e:e8:ad:9b:aa:32:05:d5:fd:76:df:a8:12:78:
69:ed:27:b5:1e:1d:3e:17:b7:7a:0c:34:7d:c1:e3:77:f6:db:
b9:12:15:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:42 2024 by rpki-client on console-ams.rpki-client.org