Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/ZiOfAkyUlyEIUDqpDQ9VgkzeWGc.roa
File: ZiOfAkyUlyEIUDqpDQ9VgkzeWGc.roa (raw, json)
Hash identifier: HLuHUls1ou1pQUUrlEzGRGdUzzFMkxi1T89QMbFG6jk=
Subject key identifier: 66:23:9F:02:4C:94:97:21:08:50:3A:A9:0D:0F:55:82:4C:DE:58:67
Certificate issuer: /CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Certificate serial: 018B1E2A135FB053BDB014DDB262E76C9329
Authority key identifier: 70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/ZiOfAkyUlyEIUDqpDQ9VgkzeWGc.roa
Signing time: Wed 11 Oct 2023 09:55:55 +0000
ROA not before: Wed 11 Oct 2023 09:55:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5511
IP address blocks: 194.26.119.0/24 maxlen: 24
109.234.76.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1e:2a:13:5f:b0:53:bd:b0:14:dd:b2:62:e7:6c:93:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Validity
Not Before: Oct 11 09:55:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66239f024c94972108503aa90d0f55824cde5867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8b:ed:cc:47:75:8f:30:e6:3e:14:e3:5e:7e:
ea:90:98:5c:95:53:b4:61:4d:58:f1:9a:e5:83:a8:
73:a1:3e:59:b0:cc:55:2a:71:8f:98:6e:11:57:ed:
e2:3b:1e:6c:f5:0a:d8:9f:64:b8:59:c2:aa:3e:2a:
bc:fa:9e:1d:a8:1d:54:1f:3b:95:d6:41:5e:f8:e9:
47:52:c3:3c:12:d4:80:76:49:89:e7:c6:47:a6:bf:
cd:2e:47:49:18:5b:3c:bc:7e:e2:6e:f0:c7:55:a5:
8c:25:73:84:dc:82:89:05:e1:0d:73:5f:b6:9c:7c:
a4:1b:35:35:53:4d:63:d9:68:eb:3b:34:c8:57:e7:
29:76:3f:d2:89:19:a8:57:0d:8a:30:0a:89:04:26:
d2:43:17:fd:db:02:ef:03:af:4c:e6:31:33:b0:72:
56:36:92:ae:78:6e:03:de:0d:7e:35:6e:9a:7a:04:
16:ab:f5:a5:48:d5:a9:b3:9b:7f:bf:05:5f:15:d4:
52:3e:fb:0e:ec:de:3c:c2:cf:f9:b1:51:48:5d:ef:
fd:9d:94:19:f7:3e:5f:cc:c6:48:c3:36:ac:fe:1e:
c8:a3:a9:75:e5:92:67:05:ee:1a:39:c0:b9:66:7a:
ac:66:9c:9a:b1:68:e6:3d:81:5a:bc:14:a2:ab:b0:
4f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:23:9F:02:4C:94:97:21:08:50:3A:A9:0D:0F:55:82:4C:DE:58:67
X509v3 Authority Key Identifier:
keyid:70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/ZiOfAkyUlyEIUDqpDQ9VgkzeWGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.234.76.0/24
194.26.119.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:f8:be:b9:c1:ed:60:b1:cf:b2:b4:a5:d3:48:f6:68:f4:04:
a4:7c:07:a2:f6:e7:43:29:85:07:fb:78:bf:e7:9c:04:03:8e:
5e:1d:bb:29:da:78:68:69:52:c4:d1:04:c4:0f:99:cf:52:10:
5e:c3:bb:10:65:5a:25:8e:e6:cf:15:29:3d:10:66:1d:bf:c1:
e0:1a:c9:7a:ad:e4:28:d2:ef:d0:46:3f:ba:7c:fc:f7:19:16:
7a:7f:a6:d6:ea:02:c3:ba:40:c5:b9:4a:8e:bd:08:05:01:43:
c9:ce:94:77:15:f1:69:ba:8f:21:1b:70:4f:6c:27:83:c2:84:
d1:26:56:41:ba:78:43:29:33:a9:1c:4d:06:70:e2:7f:90:b8:
63:5c:fc:09:f6:e4:74:23:a9:8e:e7:14:07:7a:cc:47:fe:30:
26:bb:71:a8:22:0f:ca:43:09:05:a1:a5:31:29:00:0c:8b:2f:
bb:f1:32:04:04:27:e4:27:44:9d:50:0e:e4:c3:2a:fd:55:21:
03:25:ee:5e:fe:e5:1f:87:c5:78:d3:8e:81:a4:e7:57:25:f7:
32:10:ed:2c:2b:3d:76:83:06:c0:5f:8c:13:29:b2:dc:3f:36:
22:aa:d8:14:86:c5:32:48:eb:50:ad:f8:cf:5a:7e:af:ca:b3:
0b:27:d9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:47 2024 by rpki-client on console-fra.rpki-client.org