Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/znbr_3tLQVFZlsNyfrYursSZcR4.roa
File: znbr_3tLQVFZlsNyfrYursSZcR4.roa (raw, json)
Hash identifier: 1TWgyss7sWXqBu4pPYgoD6laUx0UvYzdudGauPI8xGk=
Subject key identifier: CE:76:EB:FF:7B:4B:41:51:59:96:C3:72:7E:B6:2E:AE:C4:99:71:1E
Certificate issuer: /CN=a71cc0d58b16adbbf7fa5c2fdbc3659f9c73c7ba
Certificate serial: 01856DDD696499B7B23562A667446618ECDB
Authority key identifier: A7:1C:C0:D5:8B:16:AD:BB:F7:FA:5C:2F:DB:C3:65:9F:9C:73:C7:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxzA1YsWrbv3-lwv28Nln5xzx7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/znbr_3tLQVFZlsNyfrYursSZcR4.roa
Signing time: Sun 01 Jan 2023 15:05:04 +0000
ROA not before: Sun 01 Jan 2023 15:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5588
IP address blocks: 5.56.37.0/24 maxlen: 24
5.56.33.0/24 maxlen: 24
5.56.38.0/24 maxlen: 24
2a01:47c0::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:dd:69:64:99:b7:b2:35:62:a6:67:44:66:18:ec:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71cc0d58b16adbbf7fa5c2fdbc3659f9c73c7ba
Validity
Not Before: Jan 1 15:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce76ebff7b4b41515996c3727eb62eaec499711e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:87:0e:59:33:b1:91:ea:5f:96:8c:92:e6:02:
81:a1:6d:d1:99:0f:3c:2e:56:17:a9:7d:5d:1b:3c:
b8:c7:d0:69:96:b0:7c:cd:6d:98:9a:34:56:f5:c6:
21:ab:3a:52:eb:12:fb:7e:ef:cd:97:85:24:21:e8:
8e:88:13:24:1f:cd:2a:5c:7b:92:33:80:06:a5:83:
f8:d4:0b:ff:e7:1c:ec:c8:11:ce:10:97:db:09:93:
5a:19:b2:a8:ee:e4:e5:9d:84:1d:61:38:f1:8c:f3:
14:18:03:52:bb:d0:47:fe:b6:6a:f9:40:75:0a:43:
1f:dc:95:dd:85:0d:c7:69:0f:f2:c4:50:ed:3d:45:
91:f8:0d:ae:57:2e:24:ab:7b:b7:8e:1b:3d:84:3e:
71:31:5a:30:3c:47:e7:b1:d0:08:2d:95:64:15:46:
b0:26:a0:53:c7:ee:a9:9f:6b:9d:dd:ba:f3:06:78:
00:ca:30:5b:63:43:7b:5f:6e:70:a3:5e:7c:4e:11:
f0:63:84:ad:9d:b1:41:34:fd:03:10:6d:c4:a0:87:
79:a8:1f:ef:a9:1d:03:b9:2f:f5:a3:e3:a6:cb:90:
58:38:e8:12:5c:26:86:5b:8b:c3:4f:a7:57:a0:24:
d4:4a:9a:36:45:d4:f7:d5:cc:16:98:02:09:77:e1:
b2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:76:EB:FF:7B:4B:41:51:59:96:C3:72:7E:B6:2E:AE:C4:99:71:1E
X509v3 Authority Key Identifier:
keyid:A7:1C:C0:D5:8B:16:AD:BB:F7:FA:5C:2F:DB:C3:65:9F:9C:73:C7:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxzA1YsWrbv3-lwv28Nln5xzx7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/znbr_3tLQVFZlsNyfrYursSZcR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.33.0/24
5.56.37.0-5.56.38.255
IPv6:
2a01:47c0::/32
Signature Algorithm: sha256WithRSAEncryption
16:c4:63:a1:e5:51:72:37:21:c6:5b:39:84:23:40:15:44:bf:
e6:09:86:12:5d:f1:f4:c4:28:87:f8:26:e9:ce:d6:c8:d4:69:
81:8b:8c:75:cb:c1:ff:2f:76:ac:16:26:07:13:2e:4f:00:b1:
5a:d9:c1:17:63:ef:b1:ed:81:f5:7f:a0:b1:e2:e4:ee:bd:9d:
60:ee:ea:1c:31:26:37:45:00:3c:81:70:58:96:c6:38:51:60:
6b:3d:f1:b1:51:bd:d9:b9:c8:52:5d:b7:2f:be:1a:a3:e7:7a:
08:5a:0f:e9:78:34:77:d4:1a:06:42:fe:e2:4a:ac:e8:9d:8a:
9d:50:12:ab:73:f6:78:b3:e1:82:52:56:f6:77:3c:86:75:93:
0b:2b:35:b3:d6:4b:56:40:32:7b:5b:6e:f6:63:7e:66:99:1f:
04:44:39:6f:47:37:df:13:53:ab:42:74:81:43:24:25:6f:bc:
c2:5f:bd:4a:50:64:90:ed:d4:c9:3f:d1:da:8c:32:af:04:bf:
dc:fa:f5:05:6c:70:0b:dd:8f:83:5c:6b:54:66:68:6f:dc:f3:
cf:61:b9:0b:c5:70:4e:bc:d1:0d:3f:03:1b:4c:17:62:df:46:
56:93:d8:8e:e8:ca:d3:75:44:79:83:ba:09:97:b7:87:d7:35:
25:6c:60:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:03 2024 by rpki-client on console-ams.rpki-client.org