Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/zLe3Dn9XoGmzBglKxAwNPFStJ-0.roa
File: zLe3Dn9XoGmzBglKxAwNPFStJ-0.roa (raw, json)
Hash identifier: OaUWH6aE3Wf/dNM+VZc63bCNUYhRNd79omH627B2mcU=
Subject key identifier: CC:B7:B7:0E:7F:57:A0:69:B3:06:09:4A:C4:0C:0D:3C:54:AD:27:ED
Certificate issuer: /CN=89b332d57ce14fab1ebd746817dd701062c74a88
Certificate serial: 018C580486AF9A0A7E769E58A3D0F9129E03
Authority key identifier: 89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/zLe3Dn9XoGmzBglKxAwNPFStJ-0.roa
Signing time: Mon 11 Dec 2023 08:35:40 +0000
ROA not before: Mon 11 Dec 2023 08:35:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34572
IP address blocks: 83.173.72.0/21 maxlen: 21
83.173.88.0/21 maxlen: 24
83.173.96.0/21 maxlen: 21
83.173.112.0/22 maxlen: 24
83.173.115.0/24 maxlen: 24
185.170.151.0/24 maxlen: 24
83.173.64.0/21 maxlen: 21
83.173.64.0/19 maxlen: 19
2a02:6100::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 11 Dec 2023 18:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:58:04:86:af:9a:0a:7e:76:9e:58:a3:d0:f9:12:9e:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89b332d57ce14fab1ebd746817dd701062c74a88
Validity
Not Before: Dec 11 08:35:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ccb7b70e7f57a069b306094ac40c0d3c54ad27ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:19:9e:40:ea:d0:1f:4c:cd:f5:fe:9f:2c:17:
11:80:ba:45:d6:6f:d9:48:83:29:3b:cc:f7:93:25:
84:2f:cf:f3:e6:4c:a2:b9:48:e4:c9:83:6d:56:9a:
7b:db:82:1a:fb:9d:5b:dc:5a:52:a0:75:f3:f9:29:
ce:c1:32:ef:e1:0f:1b:fd:eb:d6:a6:dd:b3:ca:3c:
98:94:dc:4e:68:be:bc:df:b5:4b:87:8c:c0:5a:6e:
2f:4b:10:d8:fe:79:bf:c5:5e:f0:5d:64:c9:b4:8d:
8c:7a:1f:1f:cf:18:ac:84:87:2e:ef:6b:95:ab:7a:
dc:e6:f6:5d:93:05:a6:59:e8:a1:4b:56:4f:a2:c1:
d3:1f:af:e3:8b:59:d6:e9:e7:ff:e2:1f:6b:98:a6:
7d:8f:1e:49:7d:ca:09:b6:e1:f8:eb:f2:8d:de:59:
3e:fd:c0:9c:4b:37:4f:b1:7f:d0:e3:c0:1c:2a:a7:
a7:fe:e2:68:a1:5a:b7:b3:62:44:3c:e1:93:5f:08:
f4:92:46:dc:a6:be:b1:f1:cb:21:dc:89:fc:84:87:
83:49:55:f5:16:14:b5:06:f4:1f:56:a9:f4:f5:1c:
6b:a0:66:11:3b:54:93:cd:ca:44:b9:e8:39:36:36:
ed:04:be:d2:53:c4:47:e9:48:ad:97:27:67:b8:fd:
d7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B7:B7:0E:7F:57:A0:69:B3:06:09:4A:C4:0C:0D:3C:54:AD:27:ED
X509v3 Authority Key Identifier:
keyid:89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/zLe3Dn9XoGmzBglKxAwNPFStJ-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.173.64.0-83.173.103.255
83.173.112.0/22
185.170.151.0/24
IPv6:
2a02:6100::/32
Signature Algorithm: sha256WithRSAEncryption
48:c7:59:9a:2d:d7:83:cb:10:a2:c4:44:d1:b5:be:8e:39:33:
95:21:a5:ea:ea:69:9d:aa:50:a7:2d:02:a2:87:58:f7:1b:29:
5a:40:0b:75:bb:b8:1e:0f:94:9e:05:dd:e8:df:3c:ff:d7:84:
d8:ac:4b:ed:70:8c:b4:a8:07:da:23:ea:10:f9:1c:6e:3e:48:
0a:37:83:4f:6f:77:cf:6e:87:9c:de:f9:ee:02:cf:e2:13:0b:
5b:6e:75:4f:75:6b:40:bf:3c:2a:de:70:b9:c5:d5:2e:f0:35:
5b:b5:44:17:f2:ae:51:9f:69:96:87:ef:3a:02:23:10:9e:56:
f7:9f:15:bb:5f:52:24:5c:6b:0d:fb:32:be:a1:e7:5b:e6:a4:
5d:80:56:0e:8a:d6:7d:e4:22:5a:23:7d:0e:e4:c3:57:83:cf:
cf:d9:aa:8c:7e:ef:50:57:c6:ac:af:7a:a1:99:d6:f2:43:dd:
f3:7b:c8:eb:e3:fb:a6:d6:f9:5e:20:ff:9e:28:35:44:1a:ea:
f3:6c:0b:b1:78:89:ef:dd:47:65:13:b8:38:46:f3:63:1b:ab:
66:40:38:16:34:9c:c5:f9:e2:f7:47:58:27:09:d3:10:36:dd:
c0:df:47:48:ec:ad:9c:63:9c:24:6c:b0:69:6a:ce:98:78:1d:
4d:7a:73:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:53 2024 by rpki-client on console-fra.rpki-client.org