Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/ZAIflgdomFZSe_bkbt91CQuqP1o.roa
File: ZAIflgdomFZSe_bkbt91CQuqP1o.roa (raw, json)
Hash identifier: U89WFZYL4axtrb+Q4uHZkTOo5ogrNPSAu9CNEOOhM4w=
Subject key identifier: 64:02:1F:96:07:68:98:56:52:7B:F6:E4:6E:DF:75:09:0B:AA:3F:5A
Certificate issuer: /CN=2719412918a6627f99cce55c7aca139057b8574e
Certificate serial: 0189AC8112107AEBAB18E8BA144B93C083A2
Authority key identifier: 27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/ZAIflgdomFZSe_bkbt91CQuqP1o.roa
Signing time: Mon 31 Jul 2023 15:11:26 +0000
ROA not before: Mon 31 Jul 2023 15:11:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 194.50.0.0/24 maxlen: 24
45.149.62.0/24 maxlen: 24
45.149.62.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 23 Aug 2023 11:54:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ac:81:12:10:7a:eb:ab:18:e8:ba:14:4b:93:c0:83:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2719412918a6627f99cce55c7aca139057b8574e
Validity
Not Before: Jul 31 15:11:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64021f9607689856527bf6e46edf75090baa3f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d3:28:2e:50:00:b3:72:0a:11:a4:06:3f:32:
89:66:3e:bb:dc:9d:8c:cc:02:97:c5:7a:61:a2:e1:
7e:bc:58:c7:45:46:a1:e6:77:05:0d:97:5d:30:06:
99:8b:1b:5d:65:b0:bc:d1:a0:23:cb:03:2c:df:db:
56:62:04:af:95:d6:a9:1a:d1:8c:19:c5:7d:b6:bf:
21:d2:78:b0:99:77:18:fa:44:4f:f3:5c:c5:14:69:
73:44:6c:09:fa:78:bf:fe:dc:34:66:82:a2:2d:7a:
be:04:4d:7e:fc:a7:8e:2c:1c:09:cc:9c:47:74:4a:
93:80:0c:63:3b:da:32:db:92:03:f0:3c:c8:2b:06:
68:57:1e:79:e7:19:46:01:3a:6f:f8:61:0b:bd:88:
24:3a:42:3f:f3:be:85:23:9b:96:1d:9b:31:21:97:
d6:84:b7:14:f6:57:58:0c:13:77:56:eb:6e:f9:09:
ee:0b:90:00:4b:06:00:aa:27:30:85:04:6b:b1:5a:
00:ab:4b:05:ed:1a:51:cb:e0:3d:4d:d2:e2:06:3b:
e6:e0:e7:6f:d6:0b:78:ec:77:bf:34:a4:59:ba:a0:
12:5d:63:60:4a:ee:ff:b7:7d:97:ea:2c:d3:8c:de:
90:9f:8d:8d:69:b6:c9:5a:86:f2:58:93:9e:38:17:
c2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:02:1F:96:07:68:98:56:52:7B:F6:E4:6E:DF:75:09:0B:AA:3F:5A
X509v3 Authority Key Identifier:
keyid:27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/ZAIflgdomFZSe_bkbt91CQuqP1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.62.0/23
194.50.0.0/24
Signature Algorithm: sha256WithRSAEncryption
96:f3:22:30:81:c4:52:43:5f:ca:3e:06:9a:da:08:b0:d2:1f:
b6:e0:43:d4:12:ed:5a:9c:33:56:4c:37:8c:84:cd:0c:69:f6:
d0:5d:76:88:5f:a3:af:9e:d7:5e:6b:40:7a:cb:f6:66:4a:20:
a2:79:e8:0e:fb:de:63:ef:0b:8b:f2:84:e9:fd:fd:5d:39:73:
b2:87:22:60:0e:44:0c:93:b7:c4:0d:fa:a8:d3:7f:18:fd:f5:
31:c2:80:f0:00:ef:38:26:46:1b:56:4a:06:05:5d:85:9d:f6:
a1:9d:a6:64:6c:39:1f:aa:ac:20:09:ac:07:7c:67:38:46:62:
44:7e:07:a8:cf:2d:2f:b5:29:98:1c:f3:32:c9:c0:62:c7:b8:
da:1c:33:3c:90:6f:08:2c:8f:e3:f1:ed:07:05:5d:4e:3d:91:
9c:ca:37:76:32:a3:73:23:1b:26:41:52:e8:21:13:5f:c5:5f:
1b:5c:5f:6b:cd:68:1a:8a:26:4f:4f:f5:47:9f:00:17:76:3a:
e1:4f:ca:c7:10:8c:88:50:29:40:c2:ff:9a:f2:c9:b5:c1:7e:
02:0f:9a:88:fd:7a:98:11:91:af:d6:cc:a7:a4:9d:fb:14:48:
9a:57:fe:51:89:36:2e:25:67:8a:f1:7c:bf:f4:52:2c:b6:51:
e8:04:94:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:31 2024 by rpki-client on console-fra.rpki-client.org