Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/z0_TWxfiVlry4Zt-Jp06kHLX7NQ.roa
File: z0_TWxfiVlry4Zt-Jp06kHLX7NQ.roa (raw, json)
Hash identifier: KLMiXy1Yk7y8DK0581K6tISEYlS2nQeWkrdGQlcPu14=
Subject key identifier: CF:4F:D3:5B:17:E2:56:5A:F2:E1:9B:7E:26:9D:3A:90:72:D7:EC:D4
Certificate issuer: /CN=74896c544b461d8b062eff9e3d2c29cd3cc960ec
Certificate serial: 0189E42E790458A172BC876E32E70251D7BD
Authority key identifier: 74:89:6C:54:4B:46:1D:8B:06:2E:FF:9E:3D:2C:29:CD:3C:C9:60:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIlsVEtGHYsGLv-ePSwpzTzJYOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/z0_TWxfiVlry4Zt-Jp06kHLX7NQ.roa
Signing time: Fri 11 Aug 2023 10:39:58 +0000
ROA not before: Fri 11 Aug 2023 10:39:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34740
IP address blocks: 89.38.48.0/24 maxlen: 24
89.38.49.0/24 maxlen: 24
89.38.50.0/24 maxlen: 24
89.38.51.0/24 maxlen: 24
188.215.144.0/20 maxlen: 20
2a03:32e0::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 31 Aug 2023 06:55:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e4:2e:79:04:58:a1:72:bc:87:6e:32:e7:02:51:d7:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74896c544b461d8b062eff9e3d2c29cd3cc960ec
Validity
Not Before: Aug 11 10:39:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf4fd35b17e2565af2e19b7e269d3a9072d7ecd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0a:2e:3d:9d:da:cd:42:17:44:b2:23:31:8c:
4e:0a:86:f9:62:12:34:92:9a:90:8c:ba:31:0d:c8:
f4:c6:38:fb:0f:99:fb:22:f6:af:4d:a1:ad:53:e1:
69:bc:7e:b1:a8:9d:dc:df:79:98:01:49:f2:08:14:
60:f0:b9:1b:93:f9:f6:2a:e9:34:59:31:4f:91:41:
90:7a:12:c8:c2:15:9f:10:82:bc:49:71:d5:57:fb:
4c:a8:01:9e:76:f2:12:c2:37:a5:63:a4:83:42:18:
11:a2:98:92:5e:b6:c4:b8:e1:eb:c5:a4:d7:6a:e1:
c0:f4:95:35:e7:65:7f:cd:56:ad:c0:1b:5d:74:46:
7c:f8:36:42:42:d0:3e:00:ae:50:4f:de:63:de:ae:
8d:92:91:0d:9c:10:83:5f:9a:fa:c8:2e:f7:f6:b3:
ab:1f:b3:4c:fe:ff:ad:41:d1:5a:2d:9f:2f:00:c7:
33:c3:b5:49:d7:e2:67:ed:5d:6a:f1:57:f5:cb:c2:
69:c7:9d:9b:3c:a4:f2:5c:55:71:5e:4a:2d:90:36:
d6:b0:07:cf:4d:ea:6c:10:76:f4:77:a0:8e:8b:91:
cc:0c:48:93:97:22:c2:d6:8b:f5:35:84:8d:28:62:
3f:10:f7:66:a6:53:42:3a:0a:42:ec:d7:19:ad:11:
f0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:4F:D3:5B:17:E2:56:5A:F2:E1:9B:7E:26:9D:3A:90:72:D7:EC:D4
X509v3 Authority Key Identifier:
keyid:74:89:6C:54:4B:46:1D:8B:06:2E:FF:9E:3D:2C:29:CD:3C:C9:60:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIlsVEtGHYsGLv-ePSwpzTzJYOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/z0_TWxfiVlry4Zt-Jp06kHLX7NQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.38.48.0/22
188.215.144.0/20
IPv6:
2a03:32e0::/32
Signature Algorithm: sha256WithRSAEncryption
04:1d:f9:32:94:10:2d:9b:13:01:aa:e2:b6:de:c2:c0:ea:d8:
cf:b7:74:83:74:51:36:f9:3a:e3:7f:84:00:4c:a8:c1:47:d8:
79:29:20:fd:67:19:57:b5:85:cd:eb:a3:3e:50:4e:bc:1f:ae:
f1:98:69:46:1b:04:5d:62:ec:f7:86:74:54:1b:d2:9d:bd:31:
42:a1:bd:4f:46:4f:ce:63:47:67:e4:05:63:1c:06:7a:7d:00:
40:92:50:2b:a5:17:e2:f3:e5:69:f7:2a:13:6a:81:96:dc:15:
ec:ba:e5:1d:1b:8f:86:f7:95:c1:7c:0b:ab:d8:3c:f5:58:4d:
0d:b6:29:c3:79:c1:0b:4a:33:4b:f4:56:a4:d7:4b:cd:92:cc:
17:b4:6e:41:c3:42:16:05:5b:5a:ed:82:40:ba:c7:bb:ea:14:
2c:d0:e7:e2:c3:cf:9a:f3:6a:43:97:56:3a:25:a8:26:2d:db:
c8:8c:1b:d0:52:0a:2d:8e:4d:8c:aa:86:d9:69:73:c7:94:d1:
0e:fd:7b:5f:5f:7f:dd:bc:6e:a6:84:71:d3:aa:0a:5e:73:06:
45:75:ad:b0:f7:52:05:52:bf:3f:31:06:5c:fb:d4:0a:78:97:
f0:ba:04:a9:72:72:97:0a:bc:ca:2f:83:fe:4a:4e:03:de:da:
f0:32:71:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:54 2024 by rpki-client on console-fra.rpki-client.org