Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Z_VSI1ZfsL5XMlrdPhTfzgHRa7c.roa
File: Z_VSI1ZfsL5XMlrdPhTfzgHRa7c.roa (raw, json)
Hash identifier: AmNEjaiIXgGGnBWZkdagZhWUAVNPJ5Gf51CwEiJqZGA=
Subject key identifier: 67:F5:52:23:56:5F:B0:BE:57:32:5A:DD:3E:14:DF:CE:01:D1:6B:B7
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0185C9B69517339F412C38197D940B1F9DA7
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Z_VSI1ZfsL5XMlrdPhTfzgHRa7c.roa
Signing time: Thu 19 Jan 2023 11:07:44 +0000
ROA not before: Thu 19 Jan 2023 11:07:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62390
IP address blocks: 89.47.232.0/24 maxlen: 24
89.37.116.0/24 maxlen: 24
89.37.117.0/24 maxlen: 24
89.45.12.0/24 maxlen: 24
89.45.12.0/23 maxlen: 23
89.45.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Apr 2023 08:24:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c9:b6:95:17:33:9f:41:2c:38:19:7d:94:0b:1f:9d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 19 11:07:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=67f55223565fb0be57325add3e14dfce01d16bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b2:73:13:22:c2:cf:b2:ac:0d:b7:30:05:ad:
c3:f5:e7:85:d3:ca:30:28:dc:94:9d:34:dc:00:a3:
14:08:d0:20:cf:e4:81:e7:1f:e2:d0:c8:6f:7b:79:
48:69:c9:a1:5c:eb:5e:43:bd:97:1f:3b:52:cb:0a:
5a:da:58:f0:34:20:19:6b:e7:44:35:02:94:65:50:
68:85:3c:70:97:d5:1a:af:e4:3a:28:97:03:a7:fb:
6b:7d:c9:3f:b2:f5:02:4d:f0:6b:22:24:a2:32:cb:
f9:c1:41:cb:25:cb:bd:e1:03:81:d6:ba:24:2d:de:
37:c1:4a:a4:e8:71:42:6a:6c:21:e8:bc:9c:f9:23:
49:7b:3e:31:a2:06:66:3b:e2:02:b5:c7:2c:08:48:
19:d2:27:c0:7a:cd:4d:5c:60:61:5d:a6:7c:ba:71:
47:ce:f2:17:ed:45:fb:ee:f2:aa:b9:ca:1a:10:24:
f3:91:cf:da:21:97:f8:27:50:0c:ab:83:9b:b5:0b:
a9:1e:88:35:1a:ae:a8:11:c0:4c:78:6c:4e:a6:be:
d9:56:db:7e:bf:13:14:9e:bd:c6:25:e8:03:9d:cd:
05:72:13:2e:e0:3e:15:be:30:59:b2:2a:04:51:44:
33:6e:f9:48:ee:53:67:38:7b:88:30:ed:9f:d5:9c:
25:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F5:52:23:56:5F:B0:BE:57:32:5A:DD:3E:14:DF:CE:01:D1:6B:B7
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Z_VSI1ZfsL5XMlrdPhTfzgHRa7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.116.0/23
89.45.12.0/23
89.47.232.0/24
Signature Algorithm: sha256WithRSAEncryption
46:82:6e:5f:e3:26:01:04:2d:7c:3f:5e:ea:7f:99:13:6c:0a:
13:2e:0c:84:7f:63:9d:27:e9:11:4f:41:62:a2:35:45:bd:92:
63:9e:64:68:29:1b:ea:53:23:f8:b3:e0:81:40:ad:6b:8c:41:
bc:61:80:dc:0d:5f:5f:a9:87:9e:3e:19:29:1b:4c:df:70:f5:
5a:e4:7b:a2:94:e8:5c:1a:d9:df:43:1b:87:cd:7e:a3:b6:90:
92:f3:89:0d:0e:5f:ea:05:c0:57:85:cd:35:b2:3c:82:10:ae:
12:1e:a5:62:1d:81:77:6f:6d:82:a2:da:1a:33:62:a2:fa:c9:
72:30:0c:fb:ce:ca:b1:bf:c5:6f:c7:e0:16:77:91:e7:57:c1:
13:e9:70:09:2f:f6:31:f7:d4:36:3e:64:36:5f:2a:f8:34:e9:
f1:fa:cb:c8:49:9e:cf:63:87:bf:8f:f5:4a:05:9c:34:78:ee:
00:a8:ae:b7:b5:99:2a:35:ab:51:1a:1a:74:79:5f:4e:2c:64:
b6:5b:4f:71:0b:2b:bb:be:73:44:10:63:25:89:e9:9e:51:6e:
f5:87:b8:04:dc:b9:7b:e5:c6:55:01:dd:e0:9e:fe:5c:37:a8:
ac:db:6e:3d:9d:0d:9e:d4:5e:9c:6f:4c:60:7f:54:ab:43:fb:
79:56:e9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:50 2024 by rpki-client on console-ams.rpki-client.org