Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/rLT-ZqzQIDwbWAx5USrBBkOXQCc.roa
File: rLT-ZqzQIDwbWAx5USrBBkOXQCc.roa (raw, json)
Hash identifier: sgDEBdYbJ8f9ohP1F2zqnfeI+tVA0IgH4wrggWVdtXQ=
Subject key identifier: AC:B4:FE:66:AC:D0:20:3C:1B:58:0C:79:51:2A:C1:06:43:97:40:27
Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial: 01857082AE88A0E6B7C84E4BC188F562EC2D
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/rLT-ZqzQIDwbWAx5USrBBkOXQCc.roa
Signing time: Mon 02 Jan 2023 03:24:50 +0000
ROA not before: Mon 02 Jan 2023 03:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199478
IP address blocks: 89.140.116.0/22 maxlen: 24
89.140.229.0/24 maxlen: 24
89.140.234.0/23 maxlen: 24
62.82.32.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:ae:88:a0:e6:b7:c8:4e:4b:c1:88:f5:62:ec:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Validity
Not Before: Jan 2 03:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=acb4fe66acd0203c1b580c79512ac10643974027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:14:69:91:5f:ba:cc:5f:12:34:e8:84:e4:19:
58:2d:bf:00:95:a9:87:67:b9:a9:bf:50:d4:07:47:
81:c2:9a:cc:23:f6:34:50:f4:49:16:7d:2c:b2:0a:
cd:dc:0d:7d:8a:96:ed:a5:fa:4a:a2:c9:81:0b:8e:
49:e3:07:a8:a3:a9:9c:0d:da:1b:0c:b9:ab:68:dd:
61:02:4b:7d:a0:0f:e3:89:ce:a2:aa:6d:19:fd:28:
6e:1a:8e:fe:fb:b8:24:f8:8a:d6:66:54:53:f8:1f:
4a:f2:58:e3:52:e5:3a:83:02:5f:c5:33:49:e1:2e:
72:c7:5b:70:e2:92:d8:e2:04:be:4f:52:fa:a1:53:
b3:f6:eb:34:b9:05:6b:8c:c1:7a:68:eb:38:c2:3d:
4c:a6:07:5a:44:46:61:c5:2c:2e:65:9d:d3:3f:1d:
8f:f8:6e:27:c5:df:63:d6:4c:31:d4:d2:33:14:22:
d3:a2:c2:99:f4:18:52:6e:2f:a5:e7:c9:2f:d8:3b:
91:64:b4:c3:2e:a7:da:04:a9:55:52:a4:8b:4c:54:
8f:af:f2:e9:16:65:9f:85:38:9f:b9:32:12:5b:6e:
b4:e5:5a:2b:65:e4:df:42:1b:e9:56:cf:63:3f:76:
fb:65:5f:87:6e:aa:80:ba:00:9b:1e:b5:00:15:d9:
18:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B4:FE:66:AC:D0:20:3C:1B:58:0C:79:51:2A:C1:06:43:97:40:27
X509v3 Authority Key Identifier:
keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/rLT-ZqzQIDwbWAx5USrBBkOXQCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.82.32.0/23
89.140.116.0/22
89.140.229.0/24
89.140.234.0/23
Signature Algorithm: sha256WithRSAEncryption
71:48:d2:35:0b:f5:06:e5:d4:9a:00:2a:40:75:cf:89:c5:9d:
d3:99:60:4a:14:0f:b1:d8:19:4e:52:98:44:94:f8:17:f4:d2:
e9:00:a0:a2:f2:d6:8b:a5:15:20:c8:a2:c6:1b:3f:7a:80:db:
50:17:39:d5:b0:01:ef:57:42:c4:3e:69:a1:3c:69:04:08:bb:
8b:38:67:6d:8d:dc:42:07:17:51:ca:6d:27:93:1c:c6:5a:70:
4c:41:79:dd:b8:41:40:c6:c7:52:9e:19:56:e1:e1:b4:3f:67:
66:38:0f:58:78:32:ef:65:11:a7:69:69:66:04:7b:45:21:ac:
e9:13:a9:48:e9:7e:92:30:e1:54:f8:13:f7:65:06:ff:68:b9:
e7:7b:e2:9d:bd:87:21:27:e6:0e:51:00:fe:80:93:c4:74:9f:
2d:1f:9b:6c:d2:17:9a:b6:20:94:be:68:1b:90:bf:f7:e1:5a:
98:64:5f:9d:19:ea:43:e2:2d:50:50:cd:46:50:b3:35:45:ea:
73:0d:48:68:2e:74:17:91:36:aa:00:2f:30:a4:07:7f:e9:29:
ea:64:c0:fb:3c:27:4e:63:a3:fa:5a:20:d0:a7:fe:48:66:0a:
d4:e1:b3:8a:28:b8:1d:51:e2:1c:c7:89:e5:b6:c2:2b:54:e2:
84:b6:2b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:17:15 2024 by rpki-client on console-ams.rpki-client.org