Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/zXPIDHlvolxOajUQr509UqBwyMo.roa
File: zXPIDHlvolxOajUQr509UqBwyMo.roa (raw, json)
Hash identifier: kZGXNd8LLxcMkc8MnTG2i6cYzH231hcZ9ppcxRd/bSY=
Subject key identifier: CD:73:C8:0C:79:6F:A2:5C:4E:6A:35:10:AF:9D:3D:52:A0:70:C8:CA
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01856F66F212DB20776B0DF356D5545FB5E6
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/zXPIDHlvolxOajUQr509UqBwyMo.roa
Signing time: Sun 01 Jan 2023 22:14:55 +0000
ROA not before: Sun 01 Jan 2023 22:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40676
IP address blocks: 192.124.191.0/24 maxlen: 24
192.124.189.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Apr 2023 08:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:f2:12:db:20:77:6b:0d:f3:56:d5:54:5f:b5:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 1 22:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd73c80c796fa25c4e6a3510af9d3d52a070c8ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:12:0a:78:48:4c:f2:77:b0:84:5b:2e:dc:43:
60:48:02:f5:6a:f6:cb:21:c4:e0:30:d3:a4:9b:18:
6e:5d:58:5c:0d:45:50:c1:aa:9b:aa:c5:aa:92:66:
ac:e0:a5:14:ae:37:32:c7:de:c5:63:6c:d8:c6:9f:
56:0f:f7:5f:70:1e:ba:f6:5d:a9:5d:40:20:bd:8e:
8e:6e:35:00:69:df:12:8d:44:b4:e9:ba:86:9b:ea:
5b:a5:04:a0:9a:93:af:19:87:33:06:3c:c9:10:d6:
a6:00:f2:e5:b5:a6:c3:77:e7:95:dd:ce:f2:44:de:
f0:7d:14:7c:55:a8:f0:0b:21:ad:c4:25:99:bf:0c:
10:2e:72:45:f5:98:46:42:2b:4d:e6:8d:50:d4:84:
9f:8c:ea:fb:10:dc:5f:9c:0d:4a:28:24:c8:01:34:
82:90:79:8b:d8:4f:46:f0:ec:e6:c6:d3:66:b4:75:
06:a7:b3:9e:2b:13:a6:90:5f:1d:76:18:25:bd:9e:
6c:16:37:c1:b1:37:10:27:6a:8f:01:b9:2d:42:69:
e4:00:26:9c:87:c2:54:ed:d6:5b:9a:1d:88:78:d8:
f9:8f:f8:83:50:e3:52:ae:81:9d:db:4b:13:a5:03:
1c:6b:74:3d:c3:ad:43:ce:fe:1a:63:b5:53:74:65:
44:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:73:C8:0C:79:6F:A2:5C:4E:6A:35:10:AF:9D:3D:52:A0:70:C8:CA
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/zXPIDHlvolxOajUQr509UqBwyMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.189.0/24
192.124.191.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:53:d4:5f:81:c3:69:92:5e:26:c0:03:6d:6f:97:0e:82:b7:
67:9d:34:6b:af:50:0f:09:c4:e6:c7:43:22:0c:1a:98:59:44:
18:bf:ae:7a:a0:21:e8:85:db:9c:1f:1e:5c:8e:17:ac:2d:a6:
9c:8a:68:43:41:da:7d:60:89:11:09:f0:0c:71:fa:fc:19:0b:
22:9c:35:a1:43:0f:70:c7:47:9e:40:b8:8b:69:e2:a2:90:83:
5a:33:d4:a6:b2:09:ac:58:b5:ff:85:66:7b:9e:63:52:ce:c6:
78:3c:fb:b5:e5:56:61:53:d7:c7:d1:1b:9e:1c:c5:ff:d5:a4:
06:c1:ee:ae:6c:95:a7:5d:3c:07:14:24:60:a3:c4:0d:c0:78:
ef:1e:55:22:c4:1c:70:19:fd:77:23:b9:13:57:7d:24:f0:32:
e4:37:80:8b:57:3a:a7:a2:54:ad:7a:1d:3e:d2:45:56:cf:b4:
f4:20:06:a1:af:d9:5a:77:3a:4a:d6:4c:1f:db:e9:4d:19:3d:
fa:6e:02:1a:98:5e:96:eb:53:52:52:8c:e9:b8:68:91:63:39:
cc:dc:1c:e4:d0:89:e8:a3:c9:4f:0f:a6:96:15:a5:9a:48:c7:
73:5a:f0:dc:2e:bd:ec:25:4b:79:f3:71:cc:b9:8a:42:5f:ad:
7f:f9:75:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:31 2024 by rpki-client on console-fra.rpki-client.org