Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Z4TBRzv6ec69j92GFsn7h0v7UNI.roa
File: Z4TBRzv6ec69j92GFsn7h0v7UNI.roa (raw, json)
Hash identifier: eSyrsO7igViqaw+fZ3Y1ipy205kLJMAHxUbPmS2MXgE=
Subject key identifier: 67:84:C1:47:3B:FA:79:CE:BD:8F:DD:86:16:C9:FB:87:4B:FB:50:D2
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018AA84860AF4608854FA58805131AC360C2
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Z4TBRzv6ec69j92GFsn7h0v7UNI.roa
Signing time: Mon 18 Sep 2023 12:33:50 +0000
ROA not before: Mon 18 Sep 2023 12:33:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58212
IP address blocks: 193.124.47.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a8:48:60:af:46:08:85:4f:a5:88:05:13:1a:c3:60:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 18 12:33:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6784c1473bfa79cebd8fdd8616c9fb874bfb50d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:77:c5:3f:f4:5d:49:8c:9b:eb:f4:0a:09:da:
93:19:ff:18:ca:b8:4f:7b:ad:97:e8:75:b3:eb:2a:
7a:07:dc:e0:4c:18:2e:f6:b3:c6:df:c2:45:db:a2:
c2:a7:52:33:32:87:b5:25:87:c0:df:4e:74:53:a6:
2e:31:d6:8a:cf:e1:61:93:70:39:e0:6d:17:4e:80:
1e:55:bd:75:7f:2b:89:56:eb:bd:bc:96:51:20:20:
7a:9c:65:ea:22:36:32:e4:ea:f4:ab:72:62:aa:e1:
67:7b:2b:d1:91:60:8a:5a:da:92:3b:7d:83:0d:60:
c2:8e:44:6a:8e:3b:03:10:ad:7c:c9:67:7a:c1:a8:
50:72:51:67:5f:7a:7c:22:9e:2a:ca:a2:e9:99:52:
10:3f:78:3b:3a:f1:f9:02:e9:13:d8:fb:d5:4c:c1:
fa:c6:87:3b:45:6f:ee:a0:72:9c:a1:0a:9b:5e:f2:
41:18:33:72:fd:d6:5c:30:6f:7b:88:5d:a0:59:70:
2e:50:7d:f4:8b:7c:25:39:8c:74:02:a8:0b:42:7d:
09:fd:5c:bf:26:fb:2b:77:fa:13:59:f8:e3:c4:86:
3b:42:ef:10:52:26:4f:e3:85:08:39:06:d7:d9:b1:
c5:f7:32:a6:98:08:30:66:21:9f:5c:e8:47:f8:a6:
07:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:84:C1:47:3B:FA:79:CE:BD:8F:DD:86:16:C9:FB:87:4B:FB:50:D2
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Z4TBRzv6ec69j92GFsn7h0v7UNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.47.0/24
Signature Algorithm: sha256WithRSAEncryption
90:25:2d:5e:19:ef:77:e2:eb:af:e2:09:59:5a:a5:4d:8a:82:
0d:f3:7e:c3:4b:dc:11:d8:fa:d3:88:44:a3:28:3e:8f:19:f7:
b9:96:f7:45:20:a9:1e:4b:f0:55:bf:c1:77:ef:f1:ac:76:30:
88:65:0f:a9:99:69:96:20:34:bd:9b:c1:03:10:39:c1:55:32:
83:fc:d2:89:5a:99:8d:fa:26:d5:02:ca:69:a8:28:8b:2e:e4:
84:78:be:a5:c1:33:fa:8f:25:fb:bb:b6:c3:33:9b:bb:9a:6b:
f0:c5:ae:52:93:e3:47:82:e9:35:15:eb:25:06:d0:10:80:bf:
60:5a:7a:15:77:db:6f:94:60:2f:ac:e6:e6:46:8b:62:32:b7:
7d:66:04:36:7a:f8:c1:7d:4e:3e:43:a0:30:7b:09:f3:9c:89:
ef:b9:41:97:15:79:58:1c:d2:0c:f5:09:80:8a:e1:a4:1e:76:
a0:f1:ef:05:f9:12:c4:0f:2c:b8:aa:6d:0f:97:20:16:5e:67:
b9:76:7f:1a:9b:80:7e:63:bd:31:ec:7f:0c:94:e4:fe:ae:d6:
25:14:c8:8e:68:72:57:b9:11:de:c4:5c:d0:d7:93:ec:d8:89:
82:8e:5f:3b:e0:e4:30:ff:70:a6:46:6e:9d:b6:69:d2:24:5e:
93:f9:ee:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 19 08:34:05 2023 by rpki-client on console-ams.rpki-client.org