Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/ZstKTfGfU-KT3DBH-fdfvc8e7TY.roa
File: ZstKTfGfU-KT3DBH-fdfvc8e7TY.roa (raw, json)
Hash identifier: Sw4tyfVCPQhNqYfwb+YcWEwIE/7+dpbQjdah7igP+tM=
Subject key identifier: 66:CB:4A:4D:F1:9F:53:E2:93:DC:30:47:F9:F7:5F:BD:CF:1E:ED:36
Certificate issuer: /CN=1ea0a9eb47d824b51f154442481a257168394551
Certificate serial: 0188C08CF6E171AEEF9A72B8B747E341C5A6
Authority key identifier: 1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/ZstKTfGfU-KT3DBH-fdfvc8e7TY.roa
Signing time: Thu 15 Jun 2023 19:34:03 +0000
ROA not before: Thu 15 Jun 2023 19:34:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205563
IP address blocks: 217.113.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:35:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c0:8c:f6:e1:71:ae:ef:9a:72:b8:b7:47:e3:41:c5:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea0a9eb47d824b51f154442481a257168394551
Validity
Not Before: Jun 15 19:34:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66cb4a4df19f53e293dc3047f9f75fbdcf1eed36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ff:71:3e:f0:3d:16:37:5c:7f:ea:77:85:b2:
5e:ff:18:8a:a9:55:33:cb:ba:43:d6:25:08:16:2b:
7b:64:8f:ae:c4:f1:2f:25:34:92:3c:1e:fe:0c:f9:
6b:3a:96:60:ef:93:8e:06:b9:1a:c9:74:8a:d1:36:
e9:97:b4:40:a4:a2:ca:7e:a3:b7:c8:be:c6:fa:8b:
d5:49:a9:8b:a0:60:43:f7:64:8d:d8:dd:39:ae:96:
8f:31:1d:8c:9b:de:eb:09:6c:d2:0c:58:96:f6:e3:
64:83:81:88:a5:6e:08:6d:fe:c2:f3:2e:84:83:fd:
bf:2a:48:c6:d8:f0:33:5c:f4:11:13:bc:01:18:7e:
8f:91:77:09:99:e4:61:ed:28:41:00:fc:44:7b:b3:
01:25:f0:ff:08:7a:85:82:eb:89:5d:bd:8d:67:8d:
9f:a1:09:e7:11:c5:25:f6:ca:fd:09:33:1b:a3:ad:
5b:b7:3e:0a:85:c6:ce:06:8c:4e:07:eb:70:0c:67:
c0:5c:42:15:fe:4a:da:16:2d:18:a6:86:f2:32:86:
33:77:84:65:63:93:aa:34:ca:b2:19:15:dc:93:e7:
ae:8a:1a:5d:6a:47:07:3b:67:c3:69:97:9c:98:10:
80:9e:88:bb:08:37:ea:f7:50:0c:b9:a3:b2:c4:4a:
f3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CB:4A:4D:F1:9F:53:E2:93:DC:30:47:F9:F7:5F:BD:CF:1E:ED:36
X509v3 Authority Key Identifier:
keyid:1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/ZstKTfGfU-KT3DBH-fdfvc8e7TY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.113.196.0/24
Signature Algorithm: sha256WithRSAEncryption
79:e7:cc:ab:39:2e:48:b9:72:fd:9b:10:c8:d7:8d:73:b9:b1:
3b:ac:56:19:c8:62:f9:9d:ac:5f:55:36:3b:bb:e3:67:56:a0:
20:7d:fb:21:2e:0b:97:d9:4e:95:87:4d:03:87:2c:7c:a5:ce:
a3:0e:b8:3f:d1:7e:cb:81:fd:e2:85:93:4e:f6:05:c8:ed:18:
5d:86:19:e3:1f:b0:28:e3:b3:48:e8:f8:90:49:20:41:93:5a:
08:87:f1:98:2f:2e:71:77:0d:0c:4d:0d:ce:c6:e3:bb:ea:4a:
0d:f9:95:27:77:10:1d:65:ae:f8:ba:1e:7a:d2:00:a6:5c:c6:
99:3d:76:33:ba:0d:52:16:30:ba:0e:82:83:b0:54:10:00:7c:
7f:4c:77:ed:7b:03:9d:1c:12:51:9a:3d:87:7b:77:eb:76:20:
31:b4:98:9d:6e:87:af:3f:e3:10:0d:55:6c:62:24:a5:4c:52:
af:17:b7:91:8f:d0:7d:51:d9:2b:5d:18:ba:67:0d:07:25:dd:
dc:07:28:c6:95:92:4f:7f:77:be:82:5a:22:d0:ed:3e:6c:b4:
4e:bc:d6:d6:9b:3f:b1:46:10:14:84:21:38:71:2f:7f:87:04:
30:41:8e:eb:b4:e6:2d:31:70:df:fc:48:fc:ad:b0:8c:7d:1e:
22:8a:33:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:08 2024 by rpki-client on console-fra.rpki-client.org