Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZKXo2bKKS8PLLs_-4Uq_dDhTWWk.roa
File: ZKXo2bKKS8PLLs_-4Uq_dDhTWWk.roa (raw, json)
Hash identifier: FkOAATtbD/NEXh0K+yMLJ56JlteOcye9mUxaZ8HvFoU=
Subject key identifier: 64:A5:E8:D9:B2:8A:4B:C3:CB:2E:CF:FE:E1:4A:BF:74:38:53:59:69
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018C27517FD5D74692EBD0F7C47E1D679F72
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZKXo2bKKS8PLLs_-4Uq_dDhTWWk.roa
Signing time: Fri 01 Dec 2023 21:38:21 +0000
ROA not before: Fri 01 Dec 2023 21:38:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29802
IP address blocks: 93.123.74.0/24 maxlen: 24
193.58.122.0/24 maxlen: 24
93.123.101.0/24 maxlen: 24
93.123.100.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:27:51:7f:d5:d7:46:92:eb:d0:f7:c4:7e:1d:67:9f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 1 21:38:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64a5e8d9b28a4bc3cb2ecffee14abf7438535969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:85:5b:32:48:7d:6f:cf:90:79:0a:55:58:32:
fb:52:29:7b:9f:35:15:8e:fc:90:c1:33:00:4f:7d:
ab:0c:64:51:cc:16:81:da:71:86:b0:d1:6c:f7:67:
b4:0f:d4:03:8b:84:a2:09:81:b3:8c:eb:af:83:94:
67:c7:80:a6:f5:e0:59:e0:b6:ec:6f:6e:2e:4d:9c:
f1:3f:89:00:9c:29:29:e4:42:ae:de:13:ed:c2:b5:
61:a0:00:ce:21:d5:37:6a:0b:41:36:5c:24:71:7b:
70:b6:b5:92:da:c6:71:3d:5c:44:21:36:84:2d:48:
35:6b:c9:26:fe:56:d3:d5:83:58:a2:15:38:8e:62:
a5:b5:af:45:e2:26:fa:c0:aa:11:5b:0e:d9:32:e2:
cf:4a:aa:0d:97:41:dc:7a:73:4f:4a:20:8e:f7:05:
c6:fc:14:a1:3b:22:f7:52:ce:88:7e:f3:7e:7b:a4:
ab:57:02:a8:2c:c2:c7:37:4d:3a:80:6c:a1:38:5e:
ab:69:9e:62:73:25:cb:b7:73:e0:79:d8:d2:95:01:
47:fb:bf:5c:da:7e:e5:41:87:b2:c7:7f:a8:33:8d:
8f:d0:d8:38:b8:24:d6:56:c5:57:61:be:a1:0e:ea:
cd:4c:56:4f:4f:5e:54:da:52:27:63:28:95:63:af:
ee:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A5:E8:D9:B2:8A:4B:C3:CB:2E:CF:FE:E1:4A:BF:74:38:53:59:69
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZKXo2bKKS8PLLs_-4Uq_dDhTWWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.74.0/24
93.123.100.0/23
193.58.122.0/24
Signature Algorithm: sha256WithRSAEncryption
37:85:65:41:85:83:ba:b8:58:96:29:ef:2d:e3:f6:cb:55:de:
80:99:67:5c:43:82:e2:22:8d:c8:26:26:ec:9b:86:f2:bf:a8:
ac:55:d3:5d:87:9c:75:99:36:16:1e:cf:f0:36:c2:a4:f6:66:
5f:6a:8b:5e:d5:31:b0:fe:cd:5c:9d:85:5d:9c:af:61:f5:77:
9c:47:69:34:69:4d:1d:53:d9:98:71:02:3d:c0:dc:07:e6:db:
3c:83:c5:47:70:43:23:ff:c3:26:6f:31:c6:1a:40:e1:fd:60:
66:59:58:63:02:ec:e8:d9:b9:1d:76:7a:6a:7f:54:22:f9:c3:
38:ad:8e:cd:c2:c4:99:ee:81:68:b4:b8:5d:f4:27:ff:e6:a3:
fd:29:91:d9:5e:e7:94:a7:45:51:b9:24:6f:95:6d:db:c7:78:
09:90:0f:ff:70:e4:42:b4:94:50:8a:61:4d:42:0e:85:8c:79:
4e:71:de:6b:e2:93:17:07:2f:14:fb:81:24:91:a1:7b:07:27:
be:e7:80:d8:0e:de:a3:aa:aa:04:fa:bc:f9:5b:67:af:13:40:
31:fa:cc:a3:1c:89:30:79:56:3c:e8:9e:9e:fd:3b:32:72:60:
d5:a6:d0:2c:57:a8:a1:c2:91:4d:96:bc:25:da:5b:ee:22:a2:
be:bf:5a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 8 07:44:02 2023 by rpki-client on console-ams.rpki-client.org