Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/CzgtbxbBawUYKrL1Jnk3dS7zloQ.roa
File: CzgtbxbBawUYKrL1Jnk3dS7zloQ.roa (raw, json)
Hash identifier: tOqhj5mGH0pKfeSrLhribHF4nR3/mC7jDciajmZKrHY=
Subject key identifier: 0B:38:2D:6F:16:C1:6B:05:18:2A:B2:F5:26:79:37:75:2E:F3:96:84
Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Certificate serial: 01856C6EF04F4CD7D4933DC45176651052B4
Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/CzgtbxbBawUYKrL1Jnk3dS7zloQ.roa
Signing time: Sun 01 Jan 2023 08:24:47 +0000
ROA not before: Sun 01 Jan 2023 08:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 4755
IP address blocks: 89.39.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6e:f0:4f:4c:d7:d4:93:3d:c4:51:76:65:10:52:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Validity
Not Before: Jan 1 08:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b382d6f16c16b05182ab2f5267937752ef39684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:4b:9c:68:5f:38:32:18:e7:59:eb:bd:08:00:
3a:e6:52:cf:d7:02:59:30:03:1e:36:9b:dd:c1:b6:
42:c9:2a:c3:e5:d6:07:b2:8b:5b:52:ff:e2:79:19:
26:45:54:85:36:64:f8:29:68:a3:c5:af:8e:50:43:
65:a2:9e:d6:ce:04:82:4e:4c:ad:1c:84:cf:e6:0d:
cb:72:98:ab:52:3c:a2:60:8f:9e:14:03:d6:7f:57:
24:ba:2e:8a:d5:9c:cc:a7:38:be:f4:84:87:0d:92:
dc:33:9e:13:d5:16:e5:39:f6:b4:4a:21:2e:b6:e6:
a4:f1:75:49:1c:de:b2:87:7f:74:9f:51:12:f8:e0:
0c:d6:15:8c:15:ae:db:fa:e5:41:e7:8d:ad:41:e2:
ba:73:70:0a:34:30:66:5e:4d:97:96:91:10:90:f1:
38:51:6a:d2:bc:33:a5:f8:b6:2a:c4:c6:90:17:bb:
8a:49:c9:c5:94:ee:06:ab:02:07:79:53:91:eb:0d:
12:50:79:52:05:63:71:0f:51:67:82:04:a3:7d:a7:
17:fc:6a:50:2c:72:90:bb:99:b8:9c:bd:d2:d2:28:
1e:94:b2:57:77:5e:a7:15:4e:f0:e6:2b:b4:2d:aa:
c7:38:2a:23:fb:7c:62:f8:76:8f:79:56:3f:a6:98:
e4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:38:2D:6F:16:C1:6B:05:18:2A:B2:F5:26:79:37:75:2E:F3:96:84
X509v3 Authority Key Identifier:
keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/CzgtbxbBawUYKrL1Jnk3dS7zloQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.6.0/24
Signature Algorithm: sha256WithRSAEncryption
53:4c:12:ac:11:21:51:6e:07:5c:9e:9d:b9:02:47:68:5c:eb:
25:0b:90:6d:34:45:22:b9:d7:81:5d:2f:09:26:a2:4d:e8:0f:
08:08:65:72:6a:0d:aa:b1:d3:41:59:2b:7b:bc:eb:9e:7e:55:
2d:9f:2a:1b:35:9a:28:8e:be:01:52:87:3a:a0:b6:e5:d8:49:
b1:1b:48:c0:1c:4f:45:01:21:f5:e7:4b:fa:42:ae:fd:5e:39:
76:94:a6:ac:74:23:dc:93:b9:49:cc:dd:c6:35:c3:38:12:eb:
51:2d:ca:fb:dc:cc:2a:30:75:58:82:35:85:30:aa:b4:27:45:
da:86:ae:41:17:b8:8f:9c:3e:52:cb:72:e4:e8:31:59:7b:78:
89:71:aa:23:eb:c3:ea:67:25:05:66:76:1b:80:c0:03:34:15:
e1:e6:ca:60:ef:7b:9b:50:d5:68:21:6d:1e:be:8a:7b:f6:16:
48:62:65:39:5a:25:c2:06:98:19:91:5f:52:0c:00:71:d7:3c:
4d:55:17:b0:07:86:6f:0d:f8:d7:96:f8:7e:42:2a:c3:b1:ae:
00:9e:db:f8:bc:9d:f3:e9:0b:ce:0f:35:07:39:43:25:80:97:
4b:32:81:49:af:fc:3a:99:1a:a4:86:ff:cc:9c:62:a2:ef:be:
4d:06:89:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:42 2024 by rpki-client on console-ams.rpki-client.org