Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ZBDlY_89_tm1RjmnBfWPPQIGrYM.roa
File: ZBDlY_89_tm1RjmnBfWPPQIGrYM.roa (raw, json)
Hash identifier: e+5v6JagRGkcReIpk/Ti4YpWxk8ipfOnsHY134PTUXY=
Subject key identifier: 64:10:E5:63:FF:3D:FE:D9:B5:46:39:A7:05:F5:8F:3D:02:06:AD:83
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CCA2A84967154B6E586DF6C462D76FEBF
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ZBDlY_89_tm1RjmnBfWPPQIGrYM.roa
Signing time: Tue 02 Jan 2024 12:33:53 +0000
ROA not before: Tue 02 Jan 2024 12:33:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203394
IP address blocks: 195.133.74.0/24 maxlen: 24
212.193.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Jan 2024 19:37:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:84:96:71:54:b6:e5:86:df:6c:46:2d:76:fe:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 12:33:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6410e563ff3dfed9b54639a705f58f3d0206ad83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:63:ad:01:b1:87:a1:0c:73:ec:32:b1:7a:8a:
29:c4:65:e5:61:be:7f:cd:e7:10:a1:ad:4c:31:79:
08:75:ee:0c:63:dc:0f:95:70:bd:72:b0:6c:8f:ac:
8d:d7:80:62:a2:0a:9f:ea:6e:d1:c2:d0:84:10:64:
f4:08:b4:92:1b:89:25:59:fd:28:9d:42:81:ff:61:
b8:14:20:a7:e9:5f:1d:74:c8:9f:fb:3d:82:8c:f1:
de:8c:ee:85:bb:35:cd:fc:45:e7:07:0a:63:a7:92:
d7:5a:8a:a3:09:43:d6:a0:49:6c:92:a9:32:6f:06:
13:27:9e:3c:f9:ac:78:2d:bd:4a:20:a5:9d:d5:65:
4d:8c:6f:30:25:71:0d:9a:b0:3a:64:ef:62:0f:10:
00:8c:12:2b:5b:9e:3a:83:1c:95:e4:d1:0c:8d:71:
cd:50:b8:41:4e:59:b6:d5:7b:3a:e2:8e:ec:8a:02:
88:e0:a2:66:9c:77:17:d3:db:c3:7a:4a:db:de:ee:
e9:01:12:d7:6a:2c:25:88:40:80:9e:f6:ba:1e:b7:
84:00:f2:92:ee:1c:99:04:28:81:a7:95:3b:d2:ac:
8d:9a:c4:e9:fe:4b:e5:a7:bd:4b:43:35:6e:d1:a3:
56:c4:47:a5:9a:2f:84:0e:9c:9b:0b:e0:a1:a8:df:
43:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:10:E5:63:FF:3D:FE:D9:B5:46:39:A7:05:F5:8F:3D:02:06:AD:83
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ZBDlY_89_tm1RjmnBfWPPQIGrYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.74.0/24
212.193.11.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:7f:d2:02:cd:da:cc:52:8b:29:fb:d3:4a:99:98:1f:8e:ed:
4e:29:76:3a:1a:fd:e2:42:8c:36:a0:46:bd:a9:33:a3:53:92:
53:39:b7:05:da:f1:4c:56:f2:f5:41:6a:ed:aa:2a:41:3e:4c:
1b:21:0f:33:7c:c9:ff:b0:18:c9:e0:8a:ef:60:8f:24:83:83:
85:81:27:9b:c0:6e:47:76:ef:85:96:4d:bb:2f:60:0c:77:fa:
a1:2b:37:a2:92:1d:82:fe:ff:42:02:41:33:7d:c6:2b:1d:e2:
a1:78:03:37:46:48:29:b0:7c:47:3d:05:9b:9e:7b:f8:bb:8a:
f2:18:26:6e:49:7d:14:8c:a6:26:1f:dd:83:86:24:b1:cf:e1:
0d:57:4d:6f:01:f9:4a:82:71:22:fc:76:1d:eb:24:95:98:e2:
62:65:59:88:70:70:8a:a6:56:a7:05:04:38:af:ef:35:fa:72:
09:6d:52:39:c3:38:e8:15:1b:cc:55:e4:59:29:43:b6:fd:e7:
11:47:13:e7:af:32:9c:53:51:a5:db:68:f3:75:b4:78:04:a7:
78:88:f3:6e:9f:57:85:69:81:1a:28:e6:e0:79:8b:fc:db:90:
2b:5e:d7:bc:c2:05:19:a0:de:fa:34:02:1d:62:32:30:36:64:
ff:fd:3c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 6 23:04:32 2024 by rpki-client on console-ams.rpki-client.org