Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/z1tv1Hhu-xwuVCDj2Zsf__MSrZw.roa
File: z1tv1Hhu-xwuVCDj2Zsf__MSrZw.roa (raw, json)
Hash identifier: uN42QyYnBSiGHljlG3lC/r0Uldy0tU7P3KZ5tFofeMw=
Subject key identifier: CF:5B:6F:D4:78:6E:FB:1C:2E:54:20:E3:D9:9B:1F:FF:F3:12:AD:9C
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018B3CCE7A7F44EC830DF8452ED55BAE9B60
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/z1tv1Hhu-xwuVCDj2Zsf__MSrZw.roa
Signing time: Tue 17 Oct 2023 08:44:06 +0000
ROA not before: Tue 17 Oct 2023 08:44:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 36113
IP address blocks: 194.58.41.0/24 maxlen: 24
212.192.244.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3c:ce:7a:7f:44:ec:83:0d:f8:45:2e:d5:5b:ae:9b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 17 08:44:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf5b6fd4786efb1c2e5420e3d99b1ffff312ad9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:95:00:41:bd:eb:36:6d:25:fb:96:eb:09:3f:
a9:ff:2a:37:10:ac:9c:e3:54:08:91:bd:4c:81:40:
c7:9b:15:34:ce:5b:8d:ff:26:85:b4:38:49:33:d4:
ac:b9:e9:39:f2:0e:68:e2:34:1c:31:03:a8:52:8d:
82:27:26:38:29:4f:79:07:ed:18:da:fc:f4:94:17:
a0:b0:9b:82:75:31:60:36:b9:80:61:96:0c:81:9b:
a7:73:99:07:f5:90:3b:ce:4e:9e:1e:e9:cf:33:0c:
97:72:20:07:2b:06:62:26:b4:53:39:c8:b7:53:61:
eb:90:5f:31:3a:7f:56:7d:5e:6b:75:04:35:93:ba:
ba:f6:52:2b:31:33:bb:05:22:37:00:50:5e:0e:9a:
b4:ca:67:6f:2c:d5:51:32:03:59:59:43:34:28:62:
1d:87:00:de:da:18:47:fa:1b:a2:9f:7a:78:21:8a:
89:cb:ac:3f:01:40:84:9c:9b:9f:c7:f9:3a:70:41:
6c:b4:31:48:0f:12:ea:06:96:6d:f8:eb:6b:6c:af:
2a:f9:d7:98:64:6a:06:19:13:a2:21:bf:97:84:5e:
63:2e:04:7a:1a:d8:7d:ee:f2:33:ad:d7:e1:5a:1a:
6f:01:45:74:61:d1:9d:3c:05:cd:36:32:8b:48:62:
f6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:5B:6F:D4:78:6E:FB:1C:2E:54:20:E3:D9:9B:1F:FF:F3:12:AD:9C
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/z1tv1Hhu-xwuVCDj2Zsf__MSrZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.58.41.0/24
212.192.244.0/24
Signature Algorithm: sha256WithRSAEncryption
27:73:99:4d:e2:f1:4d:6a:4c:c0:7c:8c:1e:ea:74:88:a6:8e:
f5:d5:01:3c:df:28:35:14:61:c9:7d:38:05:09:d8:14:f1:f4:
99:6f:42:69:04:71:c0:30:32:92:40:c6:82:27:7d:21:5f:7f:
b6:8d:d9:89:3e:2a:1f:74:fb:34:cc:9c:4f:25:51:d5:87:5e:
5d:af:3a:d6:d0:b4:80:a3:ea:fc:33:84:5e:4a:29:1f:cb:e4:
cd:ed:0d:ec:02:16:f4:5f:6b:91:ff:0e:0b:7b:e1:98:2c:e2:
9b:85:79:84:83:0b:20:df:f1:c2:50:1a:65:5d:a2:c1:8b:83:
57:c3:ef:9a:c4:fd:33:51:d8:f4:04:8a:63:e9:92:c6:25:22:
85:af:67:35:b1:9e:11:39:fd:d4:be:82:73:89:58:d4:7b:1f:
2e:67:b2:ef:4c:8d:5a:2d:1d:f0:15:5e:d6:e7:7e:85:fc:a0:
af:06:63:f9:8c:dc:f7:2e:30:11:00:1c:d2:66:a1:d5:1f:2d:
a3:3c:05:9a:10:74:7a:5b:a1:37:c2:7a:8c:e2:8e:6a:fb:b8:
12:93:63:61:ac:50:7c:04:e6:0a:03:13:1f:29:4d:b1:80:4e:
b4:24:fa:27:c3:1c:6f:90:9f:d5:07:7e:19:b1:e1:38:fb:fe:
53:2e:27:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 19 10:55:27 2023 by rpki-client on console-ams.rpki-client.org