Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/Z5czActtt2aKrUlFDT5p78PguFA.roa
File: Z5czActtt2aKrUlFDT5p78PguFA.roa (raw, json)
Hash identifier: dXkUBtswbUQ6jI/JkaT0DJ7vABaYw3JRVf+MLokytZo=
Subject key identifier: 67:97:33:01:CB:6D:B7:66:8A:AD:49:45:0D:3E:69:EF:C3:E0:B8:50
Certificate issuer: /CN=09b4bf37f39eec62982c4b63709fab5d146c7373
Certificate serial: 018CC2DB57699448A4A954420DE8F09E1766
Authority key identifier: 09:B4:BF:37:F3:9E:EC:62:98:2C:4B:63:70:9F:AB:5D:14:6C:73:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/Z5czActtt2aKrUlFDT5p78PguFA.roa
Signing time: Mon 01 Jan 2024 02:30:03 +0000
ROA not before: Mon 01 Jan 2024 02:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44756
IP address blocks: 89.44.110.0/23 maxlen: 24
94.247.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:57:69:94:48:a4:a9:54:42:0d:e8:f0:9e:17:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09b4bf37f39eec62982c4b63709fab5d146c7373
Validity
Not Before: Jan 1 02:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67973301cb6db7668aad49450d3e69efc3e0b850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:af:b3:3d:ce:75:f8:93:f8:4d:64:74:e0:17:
b5:34:0a:71:50:3c:39:c5:27:fe:4c:17:7e:12:81:
7f:1e:3c:3b:86:44:06:17:e9:d7:41:ac:b1:1f:04:
39:49:39:6d:85:2d:4b:38:1a:8d:18:cc:0a:9d:b2:
77:ed:fd:64:1d:13:bf:f2:66:ad:df:9e:ab:02:07:
f3:2d:d3:ae:80:53:2b:b2:a1:93:e6:99:78:71:c0:
76:75:33:7d:90:02:1f:89:8e:59:fb:36:5a:58:91:
47:15:04:1f:d4:68:86:1d:e3:8e:5d:83:e2:a7:53:
4b:08:6a:a0:9b:3a:70:2b:e1:db:47:b1:b7:6e:5f:
a4:eb:0e:28:0f:b5:c0:96:05:69:3b:73:38:98:82:
76:db:3a:b2:e9:83:fa:9a:33:e0:67:1a:60:8a:66:
eb:a9:89:cc:b8:ad:ed:4c:cb:89:81:0a:48:14:20:
aa:83:3d:62:a9:b0:e1:c0:cf:e0:2c:55:83:75:8f:
a2:9b:cd:1f:2b:d6:39:c8:10:a3:66:ae:e3:1c:4e:
4f:25:39:03:c5:fc:58:c8:00:50:3b:d6:69:99:cf:
32:a2:20:64:7d:7f:e6:cb:3c:35:1f:16:6a:6a:76:
2f:6d:b8:ce:0b:0d:c3:48:d8:60:dc:18:ea:72:98:
ee:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:97:33:01:CB:6D:B7:66:8A:AD:49:45:0D:3E:69:EF:C3:E0:B8:50
X509v3 Authority Key Identifier:
keyid:09:B4:BF:37:F3:9E:EC:62:98:2C:4B:63:70:9F:AB:5D:14:6C:73:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/Z5czActtt2aKrUlFDT5p78PguFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.110.0/23
94.247.26.0/24
Signature Algorithm: sha256WithRSAEncryption
af:78:97:15:20:14:35:61:c9:09:01:cc:2d:f4:26:49:82:c1:
c7:6c:b6:70:c7:9a:d9:20:bb:d0:79:8b:bd:e4:98:50:06:24:
59:7b:0d:87:71:a1:c8:a9:ba:11:f2:6b:8c:ed:20:98:32:86:
2d:41:62:14:a1:9d:d7:09:37:b3:f1:33:65:f4:28:5e:70:e0:
5e:35:fe:d2:ba:17:0b:03:16:5f:db:05:da:f1:9c:80:18:3d:
28:a9:7d:45:00:ac:cd:d7:45:78:e1:e9:6a:8f:f8:16:32:db:
4a:1f:9f:9b:b6:2a:ef:17:e9:c0:c3:bd:fb:24:f5:ab:60:25:
5b:c3:81:64:c6:a4:39:6d:d7:b3:dd:53:27:4c:4f:3f:4b:16:
cb:52:01:f0:9a:fc:b3:3f:c0:e9:f4:2f:18:68:54:d2:cc:03:
63:89:4a:e1:71:c1:b6:67:b7:56:36:77:92:0e:14:f5:21:02:
8c:70:03:0a:24:8d:1d:97:b8:0b:ab:70:9e:59:d5:8e:ef:1c:
f4:e4:c1:3a:a4:05:5d:4a:3d:35:b4:0b:db:1d:2b:1c:fd:80:
b1:75:10:50:ee:13:a1:ed:72:8a:81:7b:27:a5:b4:14:da:68:
84:5a:9d:b2:cf:0a:ee:94:5d:65:f2:d8:d1:25:d0:6e:6b:cd:
a9:e5:f6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:06 2025 by rpki-client