Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/zowSc8XWsIs_249BkfumTp9bFZM.roa
File: zowSc8XWsIs_249BkfumTp9bFZM.roa (raw, json)
Hash identifier: Qilgk7HiHdeAWl/wyZ6+7IBoe9grEiwYUPKKUWHdAMc=
Subject key identifier: CE:8C:12:73:C5:D6:B0:8B:3F:DB:8F:41:91:FB:A6:4E:9F:5B:15:93
Certificate issuer: /CN=aa31ee512c1a562ab9e9410a831f72fd4318892e
Certificate serial: 01877F2E6B7B4356F37D795F32A136FFFD8B
Authority key identifier: AA:31:EE:51:2C:1A:56:2A:B9:E9:41:0A:83:1F:72:FD:43:18:89:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjHuUSwaViq56UEKgx9y_UMYiS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/zowSc8XWsIs_249BkfumTp9bFZM.roa
Signing time: Fri 14 Apr 2023 09:52:41 +0000
ROA not before: Fri 14 Apr 2023 09:52:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35677
IP address blocks: 185.92.76.0/22 maxlen: 22
2a03:8ae0::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7f:2e:6b:7b:43:56:f3:7d:79:5f:32:a1:36:ff:fd:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa31ee512c1a562ab9e9410a831f72fd4318892e
Validity
Not Before: Apr 14 09:52:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce8c1273c5d6b08b3fdb8f4191fba64e9f5b1593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cb:a4:59:29:2d:fc:77:fd:00:e9:64:16:49:
f0:72:86:30:0f:65:e9:97:cb:e6:03:24:a5:84:03:
07:8d:56:da:ff:f2:86:e1:87:44:38:38:f3:f2:98:
e8:f4:b2:b9:e2:79:eb:63:4d:be:48:5b:49:16:57:
cc:c4:67:6e:e3:30:bf:cc:28:5b:b9:a0:bd:0b:9b:
3d:cd:6e:ec:ef:a2:67:7e:80:bf:b3:87:43:ff:c4:
e5:90:06:d4:0e:c8:30:fb:59:f3:7f:7a:11:91:6d:
cc:2e:b3:54:4f:d6:cf:65:94:d5:fe:f0:70:3c:3f:
5c:f6:6c:72:dc:12:ee:b7:79:c7:bc:23:16:66:2c:
d5:79:9e:17:35:02:79:57:d7:98:aa:51:76:88:8e:
2b:bb:5e:f0:14:cf:84:a4:e8:86:5f:91:bb:be:fe:
69:93:d6:52:7a:b1:ed:fd:59:59:d9:ff:1f:d2:83:
7d:92:f5:73:b7:b4:b9:e8:7e:81:c5:8f:e1:8e:bf:
cf:30:56:d6:ed:e1:6c:97:63:01:4f:65:0d:28:a4:
61:df:e9:6e:fd:21:ee:9b:49:3e:a1:09:90:e6:dc:
c1:b4:bc:59:64:37:da:d3:92:d6:9a:f5:ee:c7:e2:
14:bc:bf:5c:f4:93:b7:16:9d:52:a7:11:8f:bd:39:
f5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8C:12:73:C5:D6:B0:8B:3F:DB:8F:41:91:FB:A6:4E:9F:5B:15:93
X509v3 Authority Key Identifier:
keyid:AA:31:EE:51:2C:1A:56:2A:B9:E9:41:0A:83:1F:72:FD:43:18:89:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjHuUSwaViq56UEKgx9y_UMYiS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/zowSc8XWsIs_249BkfumTp9bFZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.76.0/22
IPv6:
2a03:8ae0::/32
Signature Algorithm: sha256WithRSAEncryption
15:98:60:a7:d8:72:a9:81:01:75:68:04:3d:0b:dc:82:fd:42:
fc:37:68:06:ff:e0:70:76:dc:4f:46:01:1e:56:0f:64:de:36:
e9:12:ec:1c:c9:6e:49:5d:df:b1:f2:c3:1c:76:9d:ec:28:35:
71:0c:18:a8:34:4c:4a:08:75:f1:b9:93:62:7b:ca:92:dd:5e:
74:1b:94:64:8d:f5:c2:95:7e:d1:4e:06:05:80:c0:87:2a:89:
7b:70:4c:85:4e:39:b4:1e:69:98:72:e1:a9:94:7b:a9:93:7e:
9a:fe:22:4b:6c:5c:e7:b4:f9:b5:bb:ed:fa:c3:48:e1:32:e2:
39:e0:d8:af:13:53:cf:79:77:6b:03:50:73:ca:56:fb:c6:97:
61:ac:db:08:aa:93:04:4f:d5:c4:73:b6:b0:76:dc:27:5a:6c:
74:6a:79:91:5e:72:c0:53:8f:15:4c:b1:e7:4a:2c:05:c2:2d:
2a:3b:63:5c:31:ed:9b:ba:e4:0f:fa:c3:76:95:7f:b2:c8:d3:
99:ca:92:10:ab:d2:42:dc:90:15:23:01:da:de:13:26:3b:fd:
0d:13:b9:69:90:56:b6:3b:af:54:05:9b:58:c8:a0:b4:8f:00:
de:f4:1e:9d:ff:9e:9b:d8:ab:65:e8:00:d7:09:7c:10:af:d6:
37:af:05:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:00 2024 by rpki-client on console-ams.rpki-client.org