Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZMWz3twKsOMZoMp3D8IolaqYPGA.roa
File: ZMWz3twKsOMZoMp3D8IolaqYPGA.roa (raw, json)
Hash identifier: rlBS9rH3L0fiNzCy+P6XqfaJNmGBx49Yysc/YezqmeI=
Subject key identifier: 64:C5:B3:DE:DC:0A:B0:E3:19:A0:CA:77:0F:C2:28:95:AA:98:3C:60
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01889F209442687F4BB17BC71B037F7329DE
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZMWz3twKsOMZoMp3D8IolaqYPGA.roa
Signing time: Fri 09 Jun 2023 07:48:12 +0000
ROA not before: Fri 09 Jun 2023 07:48:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5022
IP address blocks: 194.48.251.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9f:20:94:42:68:7f:4b:b1:7b:c7:1b:03:7f:73:29:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 9 07:48:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64c5b3dedc0ab0e319a0ca770fc22895aa983c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:de:3f:dd:73:b1:3a:1b:de:07:c5:ce:32:3a:
3b:c7:ab:8a:a9:4d:60:ce:52:b3:5e:9a:a1:4c:14:
52:50:63:87:38:1a:6d:de:b7:70:a5:75:05:2b:b0:
e0:ff:f7:27:2e:54:29:28:48:69:b7:3f:24:d9:37:
74:d1:b0:8b:18:5c:77:a5:25:8b:19:95:fe:b9:c6:
dc:dd:df:17:a0:a1:71:90:bc:4a:6c:3d:f9:4a:25:
84:28:00:bf:5a:05:8e:4e:39:95:41:6f:07:f2:62:
e2:8d:56:11:25:47:c7:34:04:d4:9d:43:52:cd:fd:
d5:7c:b0:df:f7:07:38:34:78:d1:f7:25:36:c4:3d:
fe:ae:88:fe:fb:81:ac:78:84:f5:72:c7:5b:09:53:
1d:f6:5b:a0:42:ff:79:e2:b6:39:25:90:85:49:65:
8d:dd:af:59:9d:e2:49:46:fa:6c:b2:2b:fe:85:39:
3a:80:76:f9:7a:67:6b:be:6b:e0:8f:fd:a8:8c:0b:
ae:40:95:33:c5:45:20:c7:a8:4a:9f:8a:ea:84:4f:
e5:e2:48:09:60:e4:21:61:b4:8c:d0:f8:89:05:1d:
d1:7e:12:85:c6:85:91:bc:1a:07:64:f8:5e:d6:ff:
8a:ab:df:f0:dc:25:ca:a4:a4:be:db:cd:9a:fe:a7:
3d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C5:B3:DE:DC:0A:B0:E3:19:A0:CA:77:0F:C2:28:95:AA:98:3C:60
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZMWz3twKsOMZoMp3D8IolaqYPGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.251.0/24
Signature Algorithm: sha256WithRSAEncryption
86:35:95:7d:9a:f0:7f:ab:f9:70:62:57:e7:b7:63:1a:23:68:
09:84:7f:cc:64:a9:bd:2a:ca:96:5f:7f:54:c7:78:f4:7a:90:
e4:13:ce:70:dc:62:d2:f3:08:42:c9:da:e6:94:9f:d0:fc:3a:
7b:ec:21:f4:45:b0:4b:fa:e7:2e:87:32:b8:ee:f5:3f:2a:40:
f9:cf:20:3d:96:ca:9a:e5:80:be:e7:2b:55:8e:2b:12:63:41:
08:53:89:2b:d1:58:39:94:85:5b:89:c5:38:83:43:7c:37:c6:
12:c9:31:1a:5e:5c:82:80:ff:44:bb:8c:d7:66:15:18:19:18:
41:f2:cc:d1:84:b1:c7:64:ab:dd:24:90:29:83:83:b5:78:45:
58:a5:a4:c7:d9:84:1d:d0:16:0d:ab:93:07:80:79:fc:83:60:
fb:7e:01:bf:84:6c:f8:5c:f6:58:e7:54:7f:57:81:c5:bd:6b:
d1:8b:0b:3d:a2:6c:3b:c9:2e:f3:2c:68:1c:0a:08:b9:4b:74:
d3:e4:99:6a:15:29:44:b3:ad:d7:2f:59:55:93:5f:05:df:af:
26:93:05:e8:b2:3b:56:2f:1e:5e:16:e4:67:48:dd:28:b8:0f:
6c:fc:5c:ea:54:34:2b:98:6b:01:42:f4:7b:da:7f:49:32:c2:
23:30:43:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:38 2023 by rpki-client on console-ams.rpki-client.org