Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/PZ0T-v1Oq4QkBf_2yclYM8Wp43A.roa
File: PZ0T-v1Oq4QkBf_2yclYM8Wp43A.roa (raw, json)
Hash identifier: oHfJIPcbaAbVBXUR7F9T5ptS2ozu9TouNFH/h+kpeNg=
Subject key identifier: 3D:9D:13:FA:FD:4E:AB:84:24:05:FF:F6:C9:C9:58:33:C5:A9:E3:70
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0187AE10FE8E719FF1139CED45279E1D0370
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/PZ0T-v1Oq4QkBf_2yclYM8Wp43A.roa
Signing time: Sun 23 Apr 2023 12:22:42 +0000
ROA not before: Sun 23 Apr 2023 12:22:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212219
IP address blocks: 194.58.67.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ae:10:fe:8e:71:9f:f1:13:9c:ed:45:27:9e:1d:03:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 23 12:22:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d9d13fafd4eab842405fff6c9c95833c5a9e370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:31:fd:b6:e2:f8:c2:1f:10:ba:8c:f4:e8:be:
6f:12:26:4e:d8:a0:5d:bf:27:1c:59:0d:79:5e:9a:
49:11:d5:22:1c:3b:3b:c2:d3:bd:2f:37:a7:e1:7e:
14:ca:7c:90:25:c7:50:11:5b:29:4a:e9:6b:3e:d1:
02:74:5c:62:b5:28:e9:0e:c5:47:de:a1:48:28:82:
40:97:d7:98:37:c7:63:64:47:9e:94:37:b7:3f:90:
3a:cc:cd:0e:8c:a2:d2:34:1d:ea:93:4e:b1:38:67:
0a:3d:08:4c:4d:db:d4:0c:35:b7:26:7b:27:74:b8:
4b:81:e2:b5:f0:f9:3a:4e:c0:6f:d6:f5:7f:39:01:
e5:22:df:b6:5f:5b:e0:b5:90:fa:c1:a3:8b:81:aa:
30:4d:bc:a1:d3:90:39:e4:38:7a:f0:3c:ec:19:b0:
9b:52:1f:97:90:6f:ef:2d:42:85:40:7a:51:e7:ad:
ed:f4:86:9e:49:53:8e:2d:28:9e:76:c9:bc:56:ea:
1e:72:83:72:b1:13:20:d1:67:22:5c:f4:c8:7b:dc:
ee:40:83:8f:2b:0d:04:35:5e:09:0e:c8:70:f5:8d:
8e:75:e2:95:ca:96:54:6a:80:41:9a:13:b5:ab:70:
d9:a6:7d:ce:c7:ce:21:6c:a7:ab:27:37:5a:ee:b5:
eb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:9D:13:FA:FD:4E:AB:84:24:05:FF:F6:C9:C9:58:33:C5:A9:E3:70
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/PZ0T-v1Oq4QkBf_2yclYM8Wp43A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.58.67.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:90:76:3e:27:6c:ae:9b:be:af:0d:3f:67:db:e7:cc:c6:33:
b2:81:8a:27:10:b8:dc:1a:f4:c9:5f:10:6e:4a:1d:35:9c:23:
5b:c6:5c:43:6a:78:d2:6d:5c:6a:29:24:7b:7e:4e:0d:9e:51:
fa:35:17:e9:06:34:25:bb:6c:69:db:60:04:ad:1d:33:85:0b:
01:41:08:f1:41:8a:10:a7:3f:56:fc:f1:b0:87:69:d1:a7:0f:
76:47:67:1d:c9:6d:e8:ba:f7:c4:a2:eb:59:52:ca:a8:5e:e5:
bd:4b:b2:78:29:7b:a2:0c:76:89:ec:e7:03:c9:1c:18:7f:7d:
0e:73:e9:4f:14:d1:8e:00:af:d1:b8:ce:dd:aa:9d:8c:b6:63:
b1:d3:cf:e3:49:a6:bd:09:6c:b7:f7:06:8b:6a:12:f3:d4:dc:
0c:5b:b5:ab:7b:6e:3c:25:aa:1a:aa:35:fe:25:c9:f9:85:7f:
ae:26:9a:58:e6:b4:52:ac:33:56:73:91:b6:cb:41:57:57:93:
20:b2:71:e2:ec:0e:47:f0:bf:33:22:8a:a5:ab:ea:f1:06:7b:
91:17:37:51:71:5a:e6:d3:d6:af:18:07:73:6f:0e:43:7c:ee:
89:49:28:84:89:00:d8:83:58:18:62:ba:0e:89:b7:43:ba:12:
d7:1c:ae:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:02 2023 by rpki-client on console-fra.rpki-client.org