Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Z_zSi14LOxKx0AApokntCIzL4ZY.roa
File: Z_zSi14LOxKx0AApokntCIzL4ZY.roa (raw, json)
Hash identifier: jzxPsGCUBA7CNXd+E2fz/DVdv6Aca0ukYj2huAO8nCk=
Subject key identifier: 67:FC:D2:8B:5E:0B:3B:12:B1:D0:00:29:A2:49:ED:08:8C:CB:E1:96
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0188B4EC9025AFE0581503B9B259D2982FAE
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Z_zSi14LOxKx0AApokntCIzL4ZY.roa
Signing time: Tue 13 Jun 2023 13:23:02 +0000
ROA not before: Tue 13 Jun 2023 13:23:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211256
IP address blocks: 2.59.254.0/24 maxlen: 24
87.120.84.0/24 maxlen: 24
93.123.118.0/24 maxlen: 24
147.78.103.0/24 maxlen: 24
94.156.102.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b4:ec:90:25:af:e0:58:15:03:b9:b2:59:d2:98:2f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 13 13:23:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=67fcd28b5e0b3b12b1d00029a249ed088ccbe196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d4:b8:4f:62:ff:d9:a2:96:a5:ef:2a:e6:1d:
cc:80:04:9f:ca:3f:b1:48:0d:59:5b:b7:47:54:67:
60:d8:7a:cd:ab:7f:47:7e:48:a6:77:2a:f2:b6:9f:
92:31:06:4d:3e:b1:d2:e4:66:db:a0:a2:23:6f:93:
c6:43:82:a8:a1:88:41:47:cb:a9:f9:d9:6d:e3:6c:
37:7b:63:ea:7b:8a:75:73:33:29:76:5c:ee:8e:78:
8a:25:ab:8d:a0:0a:78:d7:2c:a2:4a:62:47:8e:5e:
0b:49:c2:1d:47:ae:53:1f:53:c8:00:a8:12:46:eb:
25:05:06:1b:03:b1:a9:03:ed:6b:6d:80:5e:35:bb:
25:c5:ac:93:9e:d9:27:e3:ba:7a:ed:da:ca:67:17:
77:8b:cd:fd:1e:b9:19:03:4a:09:7f:82:87:92:f0:
69:80:9d:d0:55:88:5c:84:78:12:72:de:05:5c:5c:
3b:30:1d:82:ba:49:ce:2a:a2:40:f3:6f:fb:63:31:
29:1a:07:9a:d6:a7:50:72:64:2b:93:86:cf:11:2e:
b8:f6:8a:c7:c4:32:70:ac:51:10:ba:b7:12:6c:36:
22:05:47:05:c3:e1:74:11:4a:94:27:de:0c:65:1f:
3f:5c:3e:9b:50:31:9f:e8:f0:eb:91:92:ff:18:6c:
aa:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:FC:D2:8B:5E:0B:3B:12:B1:D0:00:29:A2:49:ED:08:8C:CB:E1:96
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Z_zSi14LOxKx0AApokntCIzL4ZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.254.0/24
87.120.84.0/24
93.123.118.0/24
94.156.102.0/24
147.78.103.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:7c:28:82:e6:26:fc:36:96:8b:6c:18:0f:c6:4a:a8:51:7e:
4c:5e:d5:e2:81:e1:e6:85:01:fd:0c:8d:fe:fd:59:d7:18:cc:
90:e6:86:7b:75:a0:5c:73:31:29:18:32:01:79:95:b2:fd:87:
5a:2c:5b:a0:95:54:04:42:68:30:2d:80:99:aa:fb:7a:7d:fd:
48:0c:48:92:e8:50:31:61:b5:3f:1b:6b:66:58:09:0c:be:da:
ac:8b:f5:76:a8:8d:01:19:71:21:e5:71:1d:aa:48:33:39:aa:
d2:bb:07:01:76:c4:1a:14:64:63:c4:37:16:5c:5b:aa:5b:af:
d8:5c:71:23:d5:db:53:f2:7c:6f:35:42:68:07:87:65:eb:65:
8f:23:a2:c9:fd:91:91:b1:d4:f6:5e:38:18:47:07:f5:cf:72:
14:f5:85:58:fb:20:6e:14:1a:3d:10:eb:05:9d:f1:51:49:51:
36:0e:35:94:88:50:28:67:5e:8c:78:e1:06:1b:af:b5:11:44:
0b:1d:12:16:37:7b:13:2a:9f:dc:3a:de:57:9e:6c:ec:05:81:
ad:a2:88:d8:8f:42:1c:88:69:dc:bf:be:21:6a:5a:7e:bb:1c:
69:b3:af:2e:7d:bb:a6:e6:89:b8:85:d5:dc:93:c9:18:50:1f:
b9:5e:eb:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 28 13:10:21 2023 by rpki-client on console-ams.rpki-client.org