Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/XZo3rL3hFs7DbuWIZujmTJtECNs.roa
File: XZo3rL3hFs7DbuWIZujmTJtECNs.roa (raw, json)
Hash identifier: ldeSdYS3ixDYFlqAJUeSNlq0EsqM9PkD2TsR9e5AQy4=
Subject key identifier: 5D:9A:37:AC:BD:E1:16:CE:C3:6E:E5:88:66:E8:E6:4C:9B:44:08:DB
Certificate issuer: /CN=2dea78b12d435b97defbf92c74265c3433bbd029
Certificate serial: 01856DD43290C79EB18C38B7135AB87B966C
Authority key identifier: 2D:EA:78:B1:2D:43:5B:97:DE:FB:F9:2C:74:26:5C:34:33:BB:D0:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lep4sS1DW5fe-_ksdCZcNDO70Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/XZo3rL3hFs7DbuWIZujmTJtECNs.roa
Signing time: Sun 01 Jan 2023 14:55:01 +0000
ROA not before: Sun 01 Jan 2023 14:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42668
IP address blocks: 89.223.32.0/19 maxlen: 21
89.107.11.0/24 maxlen: 24
31.134.128.0/18 maxlen: 18
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:d4:32:90:c7:9e:b1:8c:38:b7:13:5a:b8:7b:96:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dea78b12d435b97defbf92c74265c3433bbd029
Validity
Not Before: Jan 1 14:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5d9a37acbde116cec36ee58866e8e64c9b4408db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2f:b9:18:8e:42:ae:32:18:ea:aa:47:d2:df:
73:07:52:27:0d:ed:19:b3:11:2c:0e:1c:75:d8:d0:
fd:c9:c4:76:05:29:b0:ae:41:8c:7a:81:3f:58:33:
6c:ba:fb:37:4f:fa:6e:dc:07:c5:8d:b6:aa:92:10:
65:c0:88:39:31:84:a5:57:65:7e:f6:b8:99:bb:c2:
5c:56:87:de:5d:68:60:de:bc:b0:db:b9:2a:ce:f5:
61:cd:fe:c3:0e:7e:18:e8:6b:1d:73:49:54:e3:a3:
25:0e:60:b3:1e:b8:7d:bf:5d:ae:b4:fe:f9:e9:18:
89:3c:fd:6c:5e:0c:8e:d0:f3:94:ff:c7:41:ca:2d:
ed:c2:b0:76:e5:77:cf:44:28:7d:de:9d:e7:41:e5:
c8:49:29:04:50:af:24:da:2e:db:4c:cb:b1:fd:64:
de:65:a5:b0:dd:42:9d:41:00:6e:3e:d0:dd:87:19:
10:90:b9:71:89:c9:b8:1e:c5:14:04:61:73:93:0e:
0a:88:aa:fd:de:4e:c3:fe:74:3b:e7:3d:1f:67:3d:
71:85:0c:c5:06:56:95:bc:5a:38:36:7d:30:62:33:
9e:e6:b9:dd:ce:5f:12:fe:a1:66:03:69:6e:16:a0:
e2:a3:5c:07:bc:ce:0a:11:7d:97:98:0b:f6:8c:fd:
8a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:9A:37:AC:BD:E1:16:CE:C3:6E:E5:88:66:E8:E6:4C:9B:44:08:DB
X509v3 Authority Key Identifier:
keyid:2D:EA:78:B1:2D:43:5B:97:DE:FB:F9:2C:74:26:5C:34:33:BB:D0:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lep4sS1DW5fe-_ksdCZcNDO70Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/XZo3rL3hFs7DbuWIZujmTJtECNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.134.128.0/18
89.107.11.0/24
89.223.32.0/19
Signature Algorithm: sha256WithRSAEncryption
a2:6a:b9:41:89:ff:97:86:4c:17:5f:ec:94:53:21:4e:8b:22:
4c:89:04:20:ad:93:c4:5a:fa:31:62:5f:fd:bd:3e:79:39:5f:
26:40:3e:ae:13:0a:f8:61:a5:8e:d4:b6:31:28:28:c6:f2:fe:
c8:29:84:dd:78:79:d7:f7:ad:12:0f:d0:02:83:52:2f:e4:16:
a6:83:ca:21:76:c9:3e:82:c1:9d:f5:83:6c:7f:1a:57:cb:5c:
bc:86:dd:1f:16:19:3a:70:c4:3a:30:f6:d5:31:c1:74:5f:05:
f6:e8:39:2b:40:76:bd:86:9d:d7:8a:c9:87:27:bb:ad:45:dd:
8e:49:a5:72:0e:02:9d:76:ec:33:2e:25:72:b6:ab:52:0b:e1:
7e:87:db:f8:90:23:bb:54:55:39:7c:fa:2f:57:f1:5a:76:87:
8e:55:91:57:4f:9b:7c:b3:f8:af:ba:98:43:04:5e:5a:3f:f5:
d9:b9:6b:c7:cf:a0:d5:46:74:8c:fe:b6:0b:50:f7:7c:d7:46:
c8:e6:3b:39:24:4c:80:46:50:b0:74:bf:bd:56:97:56:55:98:
61:cc:95:d3:ba:c4:5c:13:60:01:1a:13:26:a8:65:36:78:86:
31:f9:bf:71:66:b3:f8:24:3b:08:0b:85:87:6e:e5:c7:5b:02:
45:bf:6d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:32 2024 by rpki-client on console-ams.rpki-client.org