Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/AzwJph6pZ8yxdN91X5dCpPMKPHw.roa
File: AzwJph6pZ8yxdN91X5dCpPMKPHw.roa (raw, json)
Hash identifier: nDckjYWDTNKV49YxJrRJJyBIE97pCBD0+JRjboUnubk=
Subject key identifier: 03:3C:09:A6:1E:A9:67:CC:B1:74:DF:75:5F:97:42:A4:F3:0A:3C:7C
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 01856E41E3A4B5004B2576E5A9347C87A1A2
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/AzwJph6pZ8yxdN91X5dCpPMKPHw.roa
Signing time: Sun 01 Jan 2023 16:54:49 +0000
ROA not before: Sun 01 Jan 2023 16:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61139
IP address blocks: 93.113.34.0/24 maxlen: 24
89.39.126.0/23 maxlen: 23
86.106.129.0/24 maxlen: 24
86.106.130.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:41:e3:a4:b5:00:4b:25:76:e5:a9:34:7c:87:a1:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 16:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=033c09a61ea967ccb174df755f9742a4f30a3c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c7:5b:88:b5:cb:48:a9:ae:5e:9c:5e:60:a1:
42:fc:14:2b:c9:2d:d3:71:98:0d:62:5f:4c:b2:07:
69:4f:49:3e:b2:7b:a9:45:c6:73:f7:11:8c:b2:de:
2c:e6:cb:29:83:6a:1e:92:2a:9d:e5:bb:0e:48:21:
c8:b2:0c:9b:8e:63:4f:68:fc:7b:87:19:3c:8b:f2:
fc:11:73:50:73:c9:8f:c8:34:23:02:e2:bc:7e:bc:
1f:2b:1b:f5:c2:08:d3:b2:b7:a7:79:90:ef:c5:2a:
72:11:38:5f:47:be:81:dc:5d:23:80:b0:9b:82:cf:
ed:cd:d1:44:6b:77:a7:1c:bd:5e:81:53:d1:a0:ee:
4b:d4:f6:03:23:8b:65:9c:cf:f4:07:cb:44:90:9b:
87:c4:52:12:63:47:2d:81:38:da:72:2a:8e:0f:5d:
6c:3d:c4:4a:e8:38:88:13:e4:61:7a:63:3a:9d:74:
bf:cc:94:e4:86:fd:a2:fb:a1:fc:2d:2a:da:ee:a0:
3e:14:71:43:d9:fb:87:23:5c:12:28:5e:ad:d2:84:
49:fd:67:41:a0:ae:ab:ac:6c:31:70:95:f2:98:74:
00:0b:5d:89:0b:38:47:9c:43:81:2f:93:f2:f6:06:
02:eb:91:3d:89:58:25:2d:e3:65:f4:97:47:47:25:
4e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3C:09:A6:1E:A9:67:CC:B1:74:DF:75:5F:97:42:A4:F3:0A:3C:7C
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/AzwJph6pZ8yxdN91X5dCpPMKPHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.129.0-86.106.130.255
89.39.126.0/23
93.113.34.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:3c:fe:44:d8:b2:33:41:e9:73:15:78:14:76:64:9a:66:12:
e3:12:05:17:d3:68:0a:2f:73:39:f9:82:f3:eb:91:57:d0:c7:
08:de:ad:7a:60:68:4e:c2:80:70:5d:fe:e1:cf:e5:aa:20:7c:
cc:7b:be:93:d6:87:e3:8a:de:1a:9b:b5:a0:6a:9e:43:0c:8d:
f2:24:b9:2b:bd:a1:6c:3c:c9:69:97:78:62:cd:cd:5e:e2:2b:
58:77:a0:bd:7c:91:43:c7:a6:91:d9:1c:34:6b:7a:42:9a:e3:
a1:eb:f8:2d:ae:cc:1d:10:78:93:d0:a7:0e:76:52:c8:c2:9b:
e7:db:15:58:57:8a:f7:c8:0e:12:c8:2a:d8:99:e2:b8:e2:66:
cb:77:06:01:52:60:57:40:fc:f2:e5:40:18:68:7e:b8:a1:1d:
b2:cb:c6:e3:d6:92:67:2d:0e:28:f8:62:60:70:da:55:f4:44:
89:01:24:16:41:65:b2:38:b4:fd:6e:97:5a:73:c2:36:3c:7c:
e4:73:fa:ea:04:f0:45:ac:af:e1:97:fd:a5:4d:bc:7a:af:ea:
83:a5:52:8a:22:00:e8:97:94:ca:23:e3:4a:fb:82:09:fd:b3:
1e:96:6d:06:b4:4a:f9:f6:8a:7b:07:45:6d:74:57:cd:22:a0:
42:e1:8d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:41 2024 by rpki-client on console-ams.rpki-client.org