Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZdqBx8UYcGNeRQX5uWojaqMlXOo.roa
File: ZdqBx8UYcGNeRQX5uWojaqMlXOo.roa (raw, json)
Hash identifier: yyfTIBsXH53Shakia7qr718xdYYCpBZWRiG4CewfrBI=
Subject key identifier: 65:DA:81:C7:C5:18:70:63:5E:45:05:F9:B9:6A:23:6A:A3:25:5C:EA
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018967630F3845A9C5635071F78108374860
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZdqBx8UYcGNeRQX5uWojaqMlXOo.roa
Signing time: Tue 18 Jul 2023 05:04:52 +0000
ROA not before: Tue 18 Jul 2023 05:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202685
IP address blocks: 84.54.51.0/24 maxlen: 24
94.103.124.0/24 maxlen: 24
31.13.211.0/24 maxlen: 24
45.128.232.0/24 maxlen: 24
193.35.18.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:67:63:0f:38:45:a9:c5:63:50:71:f7:81:08:37:48:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 18 05:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65da81c7c51870635e4505f9b96a236aa3255cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6c:eb:9f:8b:6f:38:11:93:1b:e7:36:88:73:
86:80:85:a3:6b:78:18:dc:9f:6b:fe:0c:46:79:26:
bb:f0:39:de:34:f0:c4:ee:2b:56:be:fb:b1:39:dd:
b3:e0:68:a2:90:93:89:c1:66:08:9a:ce:b5:24:8b:
05:b6:8c:50:43:41:b4:57:39:2a:1f:ec:01:5e:fe:
68:da:1e:43:29:7b:73:9d:f3:c5:ee:4c:f7:d8:23:
c8:58:00:c4:9d:e0:51:5e:c8:cd:07:02:ad:cb:3e:
18:87:a2:f0:de:7f:88:d3:4f:bf:96:c3:26:69:18:
db:f5:7c:99:e5:97:11:78:28:c7:c7:a0:86:19:dc:
a6:27:3e:bf:25:0e:3a:63:03:97:cd:3e:b4:93:13:
c6:34:e5:de:f5:59:c8:ce:c9:ea:a4:0c:bd:bb:73:
55:ef:c0:31:60:47:60:e8:c3:1f:87:4e:82:56:07:
c3:d6:34:8e:99:83:f7:ce:3e:5c:df:6f:41:c6:dc:
78:24:13:23:52:3e:91:5a:8c:ff:28:50:75:02:57:
70:95:67:50:56:b6:43:a1:e3:8e:a0:f6:da:2b:ac:
60:1e:44:a9:a6:47:fe:e7:1f:72:9b:cb:84:a6:1b:
68:1b:4d:09:d8:b2:7c:11:03:da:61:8d:5c:01:d9:
4b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:DA:81:C7:C5:18:70:63:5E:45:05:F9:B9:6A:23:6A:A3:25:5C:EA
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZdqBx8UYcGNeRQX5uWojaqMlXOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.211.0/24
45.128.232.0/24
84.54.51.0/24
94.103.124.0/24
193.35.18.0/24
Signature Algorithm: sha256WithRSAEncryption
14:8b:7d:9f:40:c3:28:87:13:4c:34:42:26:b1:93:08:5b:49:
df:5f:01:b6:81:ac:04:4d:50:d1:7a:c1:e9:f7:22:d5:5d:57:
70:cf:5f:a0:c9:8e:8f:40:50:d9:62:a0:94:7c:d4:80:4a:73:
e6:54:4c:87:77:98:32:66:25:5b:d1:f0:e7:85:fc:c3:91:30:
bc:73:82:80:f0:1c:55:c3:cf:4a:da:2f:a7:85:37:01:45:0f:
57:1a:b7:6b:cb:52:dd:c6:07:4e:0e:b7:17:ec:da:de:3d:ba:
5d:e1:88:d6:d6:15:d4:49:e4:8c:ac:4c:1b:0f:39:78:b0:39:
8b:76:3a:e9:bc:ee:dc:39:d7:68:8f:08:d6:d9:5b:30:5c:fb:
33:f9:0d:15:d7:31:63:7c:fd:fd:db:74:a8:62:4e:08:9c:24:
50:f7:d9:d8:a1:7e:4a:a3:c1:d7:c8:2c:ac:9f:89:87:29:94:
36:f8:2a:c8:09:a5:66:d3:c1:2e:3e:da:11:a3:b1:92:6a:84:
e7:a2:6b:5c:93:e6:55:03:53:4b:ab:aa:44:de:74:65:4f:83:
22:0b:c3:72:0a:8b:f9:0c:f2:ef:f5:b7:95:52:91:43:6a:e6:
3c:d6:de:eb:09:74:5e:05:c1:62:7d:46:55:ea:61:23:66:94:
8a:6d:1c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 9 12:23:07 2023 by rpki-client on console-ams.rpki-client.org