Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ZUSlMsMGU2772ixaURztYJLdSlM.roa
File: ZUSlMsMGU2772ixaURztYJLdSlM.roa (raw, json)
Hash identifier: mHCDPdoN14VwLxqO6fNYjRK85ADlxAFOg/7NrEnbjv8=
Subject key identifier: 65:44:A5:32:C3:06:53:6E:FB:DA:2C:5A:51:1C:ED:60:92:DD:4A:53
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CB3B0815129D48D3A9FAD73ACEB30B711
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ZUSlMsMGU2772ixaURztYJLdSlM.roa
Signing time: Fri 29 Dec 2023 03:48:58 +0000
ROA not before: Fri 29 Dec 2023 03:48:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 212.193.12.0/24 maxlen: 24
212.192.222.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b3:b0:81:51:29:d4:8d:3a:9f:ad:73:ac:eb:30:b7:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 29 03:48:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6544a532c306536efbda2c5a511ced6092dd4a53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e9:ee:6d:92:1c:c3:1f:d4:ad:51:f7:5f:79:
b4:f7:59:0d:18:dd:f2:cb:42:0d:eb:8d:39:af:e5:
f8:c0:aa:1b:f1:b1:67:3b:c4:24:5a:38:74:b5:ae:
62:d6:a8:ae:6d:a7:fe:c4:2d:4c:c3:ce:84:7d:7f:
ec:88:2e:44:46:c7:87:e7:4f:26:0c:cd:c9:37:58:
f3:8e:a9:f3:53:1c:17:c2:d9:08:6a:06:ba:61:10:
7f:22:e1:70:29:16:d0:62:bc:eb:19:91:1b:34:23:
13:7a:a5:37:05:17:8a:27:e3:eb:66:cd:3f:ad:51:
3f:f7:2b:9a:cb:ba:ea:45:90:8a:59:8b:b3:44:2c:
2b:88:3b:25:e2:c9:c3:3a:14:3e:1a:8c:96:21:be:
7f:8d:26:df:b7:68:55:17:b7:29:3b:78:84:da:89:
51:b7:0b:24:69:f5:86:5c:e3:f5:9a:1b:eb:ed:65:
fd:8e:db:fc:7d:7b:13:72:2b:bc:8d:00:88:08:94:
88:6a:f6:49:2d:99:a2:29:c0:3a:79:b7:c3:63:92:
6d:f4:2f:56:f5:e9:02:46:c9:68:13:f8:ae:f6:ed:
1a:a2:9d:ed:93:05:37:95:30:8c:43:84:fc:52:07:
d6:a2:58:b2:5a:83:41:f0:00:d5:ae:4d:dc:f1:26:
e2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:44:A5:32:C3:06:53:6E:FB:DA:2C:5A:51:1C:ED:60:92:DD:4A:53
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ZUSlMsMGU2772ixaURztYJLdSlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.222.0/24
212.193.12.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:1e:82:5c:02:a0:e0:a1:4e:84:64:35:4e:97:c1:b3:97:e4:
98:ae:1e:34:c9:7e:ef:d2:a5:56:e0:fd:4d:47:c0:2f:78:b2:
11:ec:b3:f5:58:aa:8f:b3:b8:84:b8:00:56:b1:66:b5:74:d0:
a1:99:df:a1:39:3e:5b:17:92:c9:0e:20:e5:49:23:c3:60:7a:
ba:54:42:77:67:48:8d:8e:5c:ac:20:29:3b:40:8c:c7:3b:47:
74:40:55:1b:77:7a:09:86:4e:4c:64:5c:55:a9:49:a7:45:ba:
e3:5d:13:6d:75:ef:35:f5:12:9d:a0:20:b6:93:d6:ed:4c:0e:
d1:70:cd:68:1d:05:f8:84:30:a6:71:11:13:8b:99:93:80:4f:
a2:b8:39:17:4a:4d:d7:2b:23:3d:d2:6f:93:9d:04:be:8e:c7:
f5:16:f8:1c:b8:ef:0e:58:31:bd:40:95:6f:3e:ea:9f:50:af:
6e:03:20:09:bd:db:36:85:8d:aa:22:f7:99:a1:cf:0b:7b:f6:
8b:4e:1d:22:84:39:ba:64:51:a2:cf:70:0e:a2:19:41:61:c4:
91:f0:b1:28:c8:f8:18:36:84:ef:39:6a:39:89:7a:b8:21:98:
2f:8b:5f:8a:7c:f5:b7:ec:96:a1:35:9f:ac:9f:69:f0:dc:08:
45:c8:8b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 29 13:23:04 2023 by rpki-client on console-ams.rpki-client.org