Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ZcXXQ545oL9ZRRs_UK9J98WMhLs.roa
File: ZcXXQ545oL9ZRRs_UK9J98WMhLs.roa (raw, json)
Hash identifier: 6ceE7feviNaCIUqix7TaNkAZ+e2Vq3BKns+KSlKMR4Y=
Subject key identifier: 65:C5:D7:43:9E:39:A0:BF:59:45:1B:3F:50:AF:49:F7:C5:8C:84:BB
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01899810BCA9C05EC386A69146580F432C81
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ZcXXQ545oL9ZRRs_UK9J98WMhLs.roa
Signing time: Thu 27 Jul 2023 15:56:20 +0000
ROA not before: Thu 27 Jul 2023 15:56:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207084
IP address blocks: 195.133.80.0/24 maxlen: 24
194.87.25.0/24 maxlen: 24
194.87.33.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:98:10:bc:a9:c0:5e:c3:86:a6:91:46:58:0f:43:2c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 27 15:56:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65c5d7439e39a0bf59451b3f50af49f7c58c84bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c8:8a:d6:5a:c2:36:b1:1d:51:b4:4c:06:d7:
d2:3b:aa:9b:65:0e:5d:fd:da:9e:f8:48:4a:27:4f:
ae:71:c7:e3:96:55:29:36:a6:c7:36:5c:27:80:22:
15:1f:77:67:d3:fe:51:e6:11:53:26:7d:78:27:b6:
34:d0:d5:52:d9:12:00:9a:c4:51:6a:78:b3:61:78:
85:07:08:19:16:29:d2:32:83:a0:9b:25:86:f6:b5:
46:32:de:06:8e:b9:df:13:37:df:e2:85:fa:5b:cb:
b6:67:98:43:07:cf:cd:e8:94:2f:81:0e:b8:59:07:
93:67:35:7c:c0:70:e6:d6:ce:d5:ae:00:54:82:2e:
3f:8b:c1:50:02:e4:ab:87:73:63:4b:4c:aa:ae:c6:
2a:ed:64:f1:3d:e9:50:88:9b:28:36:06:bd:e8:77:
13:2d:81:ca:95:27:d8:ac:13:cb:dd:2b:d9:2a:c8:
71:23:d0:53:9d:12:bb:d5:32:f8:66:57:7c:45:5d:
c8:64:b3:ea:9d:f7:fb:ce:b8:45:58:d1:d8:e0:8b:
a7:b2:c4:c8:5c:2b:08:e4:e6:e0:a9:b0:75:a2:2a:
61:42:d8:c4:ef:26:88:5c:e7:2f:22:6d:68:54:15:
99:cd:23:e2:e7:ed:d1:5e:57:70:bf:b1:0a:b3:78:
72:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C5:D7:43:9E:39:A0:BF:59:45:1B:3F:50:AF:49:F7:C5:8C:84:BB
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ZcXXQ545oL9ZRRs_UK9J98WMhLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.25.0/24
194.87.33.0/24
194.87.182.0/24
195.133.80.0/24
Signature Algorithm: sha256WithRSAEncryption
92:57:f5:65:85:3c:27:8e:6b:d3:54:11:2b:ac:99:ff:07:d7:
cd:5a:35:43:f9:d9:69:d5:d3:76:61:f3:a4:21:40:8b:fc:4f:
25:16:c6:70:dd:3e:44:c6:a3:ce:eb:7d:3f:5b:c8:52:b8:05:
a5:28:7c:4a:0c:a2:4f:bd:2d:80:7c:be:1c:b5:0e:4f:af:41:
9b:88:22:ba:45:5d:7c:2a:80:32:75:09:29:e3:d5:8f:c6:c3:
a1:33:df:ab:3a:4c:52:83:2a:d0:1d:f0:c5:91:e7:ad:e0:57:
be:8b:05:4f:f0:34:94:9d:e9:fe:f1:17:c7:d3:f6:ff:ec:4f:
ab:31:70:b3:98:7d:4a:9e:12:59:c3:8b:52:30:4a:0d:36:e0:
f1:eb:69:88:54:1d:5b:7a:21:b1:46:32:54:f2:b7:1f:42:c1:
29:81:44:af:32:ae:13:87:2d:8f:ab:33:46:3a:73:0b:71:95:
26:cf:30:90:9f:36:f1:e1:b3:b9:dc:a6:9b:aa:25:60:2e:da:
94:2f:a4:0c:43:14:25:7d:a2:40:8a:05:02:2d:01:ac:50:5d:
cf:a7:55:1a:c2:d0:fa:24:eb:9e:6d:dc:bd:18:c4:30:95:fc:
9e:ef:bd:72:a5:bb:1d:b4:34:03:7c:88:03:de:ea:b1:2e:56:
d4:ce:ef:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 31 12:05:40 2023 by rpki-client on console-fra.rpki-client.org