Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ZCDn4nl74Fqrmro7YTR98zvqpMU.roa
File: ZCDn4nl74Fqrmro7YTR98zvqpMU.roa (raw, json)
Hash identifier: pBA6iOWd4U3SRh6ItY58PJbiz+pxxh108/QB9QAhpxE=
Subject key identifier: 64:20:E7:E2:79:7B:E0:5A:AB:9A:BA:3B:61:34:7D:F3:3B:EA:A4:C5
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018A92D8B499E3E570DD9D4E98B86E2C6956
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ZCDn4nl74Fqrmro7YTR98zvqpMU.roa
Signing time: Thu 14 Sep 2023 08:39:50 +0000
ROA not before: Thu 14 Sep 2023 08:39:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50225
IP address blocks: 91.223.110.0/24 maxlen: 24
2.56.108.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Oct 2023 16:24:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:92:d8:b4:99:e3:e5:70:dd:9d:4e:98:b8:6e:2c:69:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Sep 14 08:39:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6420e7e2797be05aab9aba3b61347df33beaa4c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:27:51:7d:f3:71:75:70:42:4d:17:f3:0e:db:
d3:49:98:44:40:b6:95:e9:b0:b6:51:eb:ab:1a:e1:
f2:55:6e:85:fe:ae:0b:53:ac:13:8d:14:52:a3:85:
59:f6:42:97:c2:a1:b5:c5:8b:eb:a1:88:ed:7d:4f:
a4:c7:d4:59:02:37:20:c1:f3:a2:6d:d8:be:f2:dc:
f9:93:65:dd:9b:9a:a8:1a:a4:ca:07:2f:79:0b:8d:
37:79:8b:d8:e0:9c:19:3e:30:c8:7c:7c:c5:01:47:
c7:9e:c3:7f:bf:6b:6f:dc:23:26:b8:56:26:b4:f9:
84:a1:f0:34:2c:df:d2:c7:ff:d0:b2:c4:2d:be:0c:
6b:78:8a:68:2f:ad:bb:6e:b6:da:12:7d:7f:7f:00:
e2:2c:75:8b:59:c2:f1:cd:dd:7a:e1:09:7b:55:ab:
37:b3:35:df:42:4c:12:d4:d9:d7:81:52:b0:d5:36:
5c:80:03:03:c4:6f:e4:ac:f2:ed:53:d8:be:eb:e9:
d5:31:ea:5d:2b:6d:21:85:5f:07:d4:7e:00:75:24:
51:2d:e8:12:51:91:4f:cc:7f:45:77:b3:00:e0:18:
10:0b:52:72:55:dc:7b:5d:ea:ac:5b:8b:5f:1b:1c:
1b:f7:e2:15:7f:e8:55:fd:bf:04:90:a7:b7:92:a7:
de:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:20:E7:E2:79:7B:E0:5A:AB:9A:BA:3B:61:34:7D:F3:3B:EA:A4:C5
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ZCDn4nl74Fqrmro7YTR98zvqpMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.108.0/24
91.223.110.0/24
Signature Algorithm: sha256WithRSAEncryption
af:31:54:84:62:b0:e5:08:a1:45:39:9f:eb:aa:14:aa:ca:8c:
db:41:d9:ce:b9:78:93:ad:da:e0:11:20:d2:1a:29:0e:61:63:
86:bd:2f:54:5b:f2:cc:3e:7e:65:64:88:94:50:19:69:2a:93:
47:bf:f2:48:0f:6b:e4:8a:ae:14:25:83:d8:39:bb:9e:20:3a:
6d:58:86:f0:a0:a7:cb:f2:f0:27:55:3e:d9:41:99:51:7d:45:
3d:97:33:92:21:fd:d7:0b:cf:0c:eb:31:87:15:a0:88:5b:1e:
3b:1a:c6:8a:39:bd:9e:85:c6:72:8f:47:c7:2e:d3:f1:6b:d8:
2c:20:0c:61:70:79:aa:cd:5a:c6:5d:d6:bd:38:e7:80:97:67:
0a:84:be:12:17:bb:17:17:7f:d3:ad:86:41:16:a7:0b:40:8a:
c1:1b:b9:af:60:79:ba:41:7b:be:c4:ea:3a:4f:78:b5:ab:44:
9a:bb:f6:d0:56:b7:18:3e:1a:39:e5:c6:9f:0a:6f:d2:a0:9f:
34:c9:8a:c0:6d:f1:b6:9e:49:a7:41:9c:d5:aa:45:06:0e:11:
aa:2a:5f:06:c8:a0:da:d2:f6:fa:27:37:c5:ba:ae:db:af:d5:
da:b2:a9:fd:1d:bc:32:0c:c2:90:17:dd:b2:96:e8:1f:3c:6b:
1b:82:81:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:31 2024 by rpki-client on console-fra.rpki-client.org