Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/ZJ2MwVAO8YEck4-x25PwPJ0IBOE.roa
File: ZJ2MwVAO8YEck4-x25PwPJ0IBOE.roa (raw, json)
Hash identifier: z8ijjeJD/PLKUkANEs/AT/RtlBx3W0q36bQYRHrnAFM=
Subject key identifier: 64:9D:8C:C1:50:0E:F1:81:1C:93:8F:B1:DB:93:F0:3C:9D:08:04:E1
Certificate issuer: /CN=d7d0674bd6f0cc9175219a328c8b396829f6c0af
Certificate serial: 019227B41FA62344EEA2D9F49A867A030A1B
Authority key identifier: D7:D0:67:4B:D6:F0:CC:91:75:21:9A:32:8C:8B:39:68:29:F6:C0:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/ZJ2MwVAO8YEck4-x25PwPJ0IBOE.roa
Signing time: Wed 25 Sep 2024 05:42:48 +0000
ROA not before: Wed 25 Sep 2024 05:42:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1136
IP address blocks: 89.147.32.0/23 maxlen: 23
89.147.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Oct 2024 12:47:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:27:b4:1f:a6:23:44:ee:a2:d9:f4:9a:86:7a:03:0a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7d0674bd6f0cc9175219a328c8b396829f6c0af
Validity
Not Before: Sep 25 05:42:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=649d8cc1500ef1811c938fb1db93f03c9d0804e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f5:d7:8a:f1:dc:09:db:7d:35:a8:7d:82:66:
d0:2d:83:c2:e5:da:df:3e:06:da:a4:63:ec:4c:9c:
11:e6:de:9e:2a:15:0b:3b:b3:e1:d0:f9:35:fa:15:
c1:75:4f:ce:c2:ce:9b:c7:84:71:1e:e6:e0:a3:ab:
ff:9b:38:e7:50:a1:77:3d:04:89:4d:93:01:ff:07:
34:6a:ff:10:f9:98:1f:5b:00:68:12:47:11:40:63:
f4:1a:ce:4c:c6:81:f9:2e:3f:63:16:6d:e6:b3:cb:
92:ec:27:cc:37:4e:ca:03:5a:60:04:d6:ec:37:5a:
f8:cc:ab:47:3d:af:ba:20:60:2b:6d:c4:16:dd:f5:
ff:59:a6:3d:49:58:93:97:fb:ec:ec:50:e1:49:51:
69:9b:e1:56:8f:2c:65:60:33:3e:d8:d4:b3:07:e2:
0b:a0:96:44:50:70:94:7d:99:44:35:08:31:93:1a:
4d:56:0b:3f:e8:31:14:98:36:cd:2a:62:0c:90:3c:
29:53:e9:d0:11:f5:99:b7:34:b4:2f:25:cf:72:7e:
7e:0f:a9:8f:82:8d:5e:14:3c:f7:30:3d:05:f0:1e:
b5:b0:81:5b:e8:9b:27:87:85:ee:3a:b6:76:ba:4c:
c5:42:bb:2e:b6:4d:0b:b2:f8:98:51:32:d5:26:5f:
d8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9D:8C:C1:50:0E:F1:81:1C:93:8F:B1:DB:93:F0:3C:9D:08:04:E1
X509v3 Authority Key Identifier:
keyid:D7:D0:67:4B:D6:F0:CC:91:75:21:9A:32:8C:8B:39:68:29:F6:C0:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/ZJ2MwVAO8YEck4-x25PwPJ0IBOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.147.32.0-89.147.34.255
Signature Algorithm: sha256WithRSAEncryption
44:ff:85:25:da:3a:70:51:64:8b:dc:60:46:bb:84:1a:0e:a4:
fc:26:e8:a8:1c:0e:99:32:79:51:29:9e:da:ae:98:a6:49:f6:
9d:39:cd:76:b5:bd:b1:4b:c5:41:c1:49:2d:43:dd:cf:36:55:
04:a6:ea:de:bc:94:f2:1d:40:a4:3d:85:ae:7e:2d:e2:f7:63:
74:bf:5d:5c:11:c7:e4:0a:9e:6c:85:31:94:bc:09:0b:ba:e0:
7f:01:bb:71:12:ee:7e:7a:43:66:78:c9:68:7b:40:c9:ee:da:
ec:fd:eb:8c:59:27:70:63:31:0a:ae:5a:54:79:bb:f3:b2:88:
0b:d9:98:8a:6b:da:14:8f:97:12:05:57:b5:0e:24:bc:b4:d0:
45:02:af:c7:48:a3:59:b5:38:64:bb:67:bc:6a:c2:af:f7:b9:
37:bd:4f:29:c0:e3:1f:bf:d2:00:96:7f:de:0a:cc:7a:3d:92:
9b:15:36:fb:cb:4e:d4:aa:79:88:ad:e1:8d:23:72:57:fa:5b:
5f:6e:8e:26:0f:30:50:85:6f:b0:d3:f7:7e:b1:83:de:d8:8e:
c1:6b:34:e9:42:44:ec:49:19:b5:05:f8:1a:af:28:9c:d4:ec:
e5:0e:4d:78:eb:9c:df:36:a4:cd:a2:d3:71:b5:74:b4:57:9c:
25:01:2b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 16:00:44 2024 by rpki-client on console-ams.rpki-client.org