Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZuxGs4BQzd2hVLJ0s_ma2-4c7wk.roa
File: ZuxGs4BQzd2hVLJ0s_ma2-4c7wk.roa (raw, json)
Hash identifier: 3kK8XPHG7OS2byvHHeZK9g82UumOLPiB4ZBo60qsdPY=
Subject key identifier: 66:EC:46:B3:80:50:CD:DD:A1:54:B2:74:B3:F9:9A:DB:EE:1C:EF:09
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01856D81FA5269B4C02394694AF38F612D65
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZuxGs4BQzd2hVLJ0s_ma2-4c7wk.roa
Signing time: Sun 01 Jan 2023 13:25:12 +0000
ROA not before: Sun 01 Jan 2023 13:25:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136923
IP address blocks: 194.180.37.0/24 maxlen: 24
193.42.35.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:fa:52:69:b4:c0:23:94:69:4a:f3:8f:61:2d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 13:25:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66ec46b38050cddda154b274b3f99adbee1cef09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3a:e3:32:08:48:64:22:58:93:e7:0e:f9:a4:
3b:81:18:7a:60:72:66:31:02:3b:07:27:f8:d1:e9:
b7:1b:c0:0e:5d:02:6a:48:e1:47:3a:1a:ca:7a:99:
4a:4f:03:df:18:71:85:d0:06:59:69:df:3f:28:56:
d3:dc:73:13:95:9f:28:e7:8b:2a:52:f0:ef:b7:50:
11:ae:02:51:d7:ce:5e:4c:b5:94:4d:8c:a2:8b:10:
d7:a5:fd:3d:d3:61:21:73:ee:75:e7:fe:86:c8:93:
e7:47:f8:ce:4c:a3:ed:d8:4e:be:e2:84:ac:d6:99:
16:d9:f6:f0:54:b1:26:df:0d:9d:5f:9b:d9:7a:09:
c6:aa:a8:16:6c:5b:cb:c4:a3:41:0c:e8:ae:f0:d3:
f8:51:2d:47:5f:2c:e2:08:fd:fa:7e:9d:9f:82:2c:
57:7a:cc:83:8d:0a:62:68:e2:1e:8e:2c:aa:69:6c:
3c:da:aa:ca:94:8a:cc:e5:a6:ef:41:ee:17:d2:67:
f9:2f:6f:8b:14:f0:ee:0d:33:a1:6f:20:a5:d4:25:
8a:7b:a5:68:1d:05:1a:fc:eb:22:f4:5e:db:88:e7:
82:b1:a4:51:0f:d5:0c:aa:8c:e8:b8:9f:4d:82:f0:
9a:9b:7d:9c:48:46:b6:e0:ac:a8:51:03:69:52:09:
9f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:EC:46:B3:80:50:CD:DD:A1:54:B2:74:B3:F9:9A:DB:EE:1C:EF:09
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZuxGs4BQzd2hVLJ0s_ma2-4c7wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.35.0/24
194.180.37.0/24
Signature Algorithm: sha256WithRSAEncryption
af:cc:32:ed:6f:f6:d6:80:f2:0c:d5:46:d9:cd:8c:55:c1:4e:
c2:85:e4:e6:4c:85:55:cb:e3:15:68:d8:56:0f:a0:76:e3:65:
67:45:29:24:55:a6:21:22:6b:a8:ba:dc:3d:21:54:0b:2d:81:
05:c6:fd:15:df:07:03:ab:22:7b:bf:f4:b8:d4:28:16:3c:96:
3d:fe:a8:30:f6:50:2b:95:03:48:cd:bb:c5:35:18:d0:a6:bb:
ab:18:58:0e:da:2e:48:87:f9:77:04:47:6e:a1:3b:c3:aa:66:
8e:bf:45:9e:a5:fb:86:1c:6b:2d:a7:bb:4b:f3:e0:77:1a:31:
37:56:4d:58:d5:24:ee:4c:24:f4:53:b8:10:22:c2:8b:d5:e0:
b8:27:75:4f:b0:7e:8e:d1:80:0f:6a:4a:94:e8:71:2f:1d:40:
3c:fa:ed:60:ad:4b:4c:ec:01:ff:e7:33:00:f2:30:2c:76:61:
99:73:15:2b:9c:8e:2e:c1:91:0a:fa:bc:37:f3:dd:61:f6:5f:
62:cd:27:74:cb:5e:6f:16:08:35:8a:42:9c:aa:22:72:38:ab:
8a:5f:30:b4:44:70:4a:fc:29:2c:9c:9d:73:d9:e6:f7:c8:b4:
a9:57:0d:b7:42:f8:dd:7d:55:c8:88:1d:41:86:4e:65:cc:85:
27:89:f2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:38 2023 by rpki-client on console-ams.rpki-client.org