Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/3ZqEJAQpbuWLI5HynW0Ld9e1SUE.roa
File: 3ZqEJAQpbuWLI5HynW0Ld9e1SUE.roa (raw, json)
Hash identifier: lxP6kHEvF/mkbg3vFBZOj79onCI/QopOUy4xvgC8sRg=
Subject key identifier: DD:9A:84:24:04:29:6E:E5:8B:23:91:F2:9D:6D:0B:77:D7:B5:49:41
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 01856E41E66D1AE9F07CA03B014BA4CAB60B
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/3ZqEJAQpbuWLI5HynW0Ld9e1SUE.roa
Signing time: Sun 01 Jan 2023 16:54:50 +0000
ROA not before: Sun 01 Jan 2023 16:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210485
IP address blocks: 89.34.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:41:e6:6d:1a:e9:f0:7c:a0:3b:01:4b:a4:ca:b6:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 16:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd9a842404296ee58b2391f29d6d0b77d7b54941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9b:a1:32:e6:ba:0a:39:a6:24:f3:1d:a0:67:
85:38:05:4f:ec:d3:9f:71:7f:6b:61:94:00:e9:72:
be:b5:0a:66:65:04:41:1e:d5:7d:7c:a0:6a:19:c8:
33:3e:7b:a3:2d:32:8a:e8:36:c2:54:2d:8d:1f:9c:
4c:f6:d4:3d:a7:77:56:21:d6:48:f2:49:78:88:38:
4a:c8:2a:39:54:fc:e2:35:5f:1c:cc:39:98:d6:68:
32:1e:ec:87:bf:0f:94:53:6f:7a:7c:d5:7b:42:d8:
cb:47:cc:1b:3e:5d:0d:29:de:1c:62:58:f6:e1:fb:
ba:e6:ec:96:0e:80:d5:29:33:74:9b:59:57:17:53:
d0:4b:58:71:65:ca:85:05:97:c0:65:d3:d4:46:58:
72:2f:a5:32:1a:3f:fa:b4:a3:36:05:da:8a:1f:6f:
12:0e:eb:52:26:dd:9c:55:af:39:8e:5f:fa:70:80:
27:6d:b6:70:9a:e9:35:5a:7b:ea:0c:ab:83:4e:92:
2d:17:34:4b:0b:9c:2b:ae:7a:03:17:f2:a8:bd:06:
b5:0e:54:90:d2:88:77:a7:b7:2e:14:af:bd:3a:72:
c1:a0:fa:bd:9a:04:8d:4d:21:5e:96:3d:f7:14:c0:
6f:46:35:cd:1a:e0:37:c2:6b:4e:c7:68:f6:7e:30:
cc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:9A:84:24:04:29:6E:E5:8B:23:91:F2:9D:6D:0B:77:D7:B5:49:41
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/3ZqEJAQpbuWLI5HynW0Ld9e1SUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.1.0/24
Signature Algorithm: sha256WithRSAEncryption
24:02:cb:f5:31:f8:5d:be:c0:f5:1b:96:86:e8:90:c5:29:8d:
54:9b:a4:12:8f:e3:24:8d:93:5e:3f:5e:0d:44:4e:58:f0:31:
94:6b:39:6e:2f:7a:0a:69:fd:e9:1b:8e:6c:5a:99:75:7e:8c:
50:b3:b8:a0:ea:29:de:85:fd:b7:e8:d7:b6:a2:4c:08:d8:cd:
56:51:69:05:83:f1:8c:2e:a1:2a:60:bc:c0:6a:34:3f:a1:1e:
6f:9f:5b:8c:6a:4a:22:d3:0c:7d:5f:db:1d:8d:fe:db:4a:f2:
65:11:69:27:bb:82:cb:87:44:6f:38:c7:fc:89:07:a6:d0:03:
54:3c:4b:11:db:98:bb:33:f3:ec:55:42:c1:5f:1d:4a:ab:04:
3d:c8:fa:ea:06:12:9c:b7:44:2e:e6:70:96:da:d6:ee:0c:26:
23:30:13:33:dc:f0:fe:be:a8:fa:3a:d0:a1:03:77:56:3a:a3:
72:ef:55:68:ce:e0:80:9a:99:54:1d:f4:a5:cb:a7:76:a7:e0:
a1:b6:b8:5d:ba:ba:11:ca:80:7c:90:fa:55:5e:cf:39:ee:da:
2f:4d:e1:40:d7:6c:1f:07:24:d9:5f:c5:f4:bf:ed:62:cf:2b:
2a:f4:7b:73:bd:9a:4b:bc:e4:24:4c:f4:a1:e9:67:dc:9d:38:
d2:40:2d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:06 2024 by rpki-client on console-fra.rpki-client.org