Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZwwTcltOBIoPRN94aRZv3S05N2I.roa
File: ZwwTcltOBIoPRN94aRZv3S05N2I.roa (raw, json)
Hash identifier: AoPxSHOX3TqtHBn0N88OnygGRP4Ue+EvxLD2iqIComk=
Subject key identifier: 67:0C:13:72:5B:4E:04:8A:0F:44:DF:78:69:16:6F:DD:2D:39:37:62
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018C48334A57F9FC91569A61EEA2A596766A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZwwTcltOBIoPRN94aRZv3S05N2I.roa
Signing time: Fri 08 Dec 2023 06:52:50 +0000
ROA not before: Fri 08 Dec 2023 06:52:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29802
IP address blocks: 93.123.74.0/24 maxlen: 24
93.123.75.0/24 maxlen: 24
193.58.122.0/24 maxlen: 24
93.123.101.0/24 maxlen: 24
93.123.100.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:48:33:4a:57:f9:fc:91:56:9a:61:ee:a2:a5:96:76:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 8 06:52:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=670c13725b4e048a0f44df7869166fdd2d393762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7e:45:58:e8:a2:0a:21:fc:74:57:51:ca:33:
b5:a6:ca:66:55:7c:60:30:8f:22:ff:41:20:31:b1:
a3:b7:f3:88:cf:07:e5:a8:82:11:2f:95:df:ae:b2:
db:c4:b5:d1:e0:e1:70:f4:93:e6:39:07:0b:ab:a4:
2e:1e:f3:bd:9d:59:e4:f6:44:88:f7:f3:ed:e2:3f:
0b:82:e3:c7:d7:82:32:05:2f:b0:ba:2b:be:da:0d:
4a:03:f1:61:0e:63:60:e4:21:b9:a5:a4:e6:55:a7:
db:b9:16:5d:85:96:44:51:bd:64:59:c8:65:36:8e:
78:e3:23:b5:66:d8:96:7c:9a:24:24:7f:18:34:d3:
1d:af:6a:e5:8e:9d:32:3f:0a:b8:52:8a:ac:f1:3c:
e2:22:21:d6:d1:6a:71:ad:0b:bb:58:fe:48:c3:19:
41:a9:f8:a2:e9:d9:61:9b:25:a8:ca:ae:1c:b7:a4:
e4:e3:79:7e:10:7c:24:11:7c:78:3a:8b:50:44:4b:
53:8e:8f:89:1e:7b:00:c4:5b:8d:f9:43:4d:82:e8:
49:b8:32:40:56:92:a4:2e:70:62:ac:2f:e1:10:5e:
14:a4:a1:f5:a2:24:1d:b5:55:3c:17:2e:a2:a1:b1:
fe:08:98:34:6d:1a:df:f1:97:54:6f:fb:53:e2:83:
31:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:0C:13:72:5B:4E:04:8A:0F:44:DF:78:69:16:6F:DD:2D:39:37:62
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZwwTcltOBIoPRN94aRZv3S05N2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.74.0/23
93.123.100.0/23
193.58.122.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:09:7e:02:b2:1f:4a:be:e8:86:4e:6d:71:40:ca:eb:40:2d:
a4:8f:99:80:1a:7f:db:c8:20:60:73:a9:f4:f7:d2:c6:0a:15:
98:12:7a:1a:cc:b1:53:a5:04:9f:cc:7d:0d:f5:fc:50:88:ae:
90:86:f2:c2:60:60:e8:c4:4f:08:0b:82:c4:a3:a8:59:fe:e2:
2f:40:72:98:dc:36:7e:d0:5e:a9:f3:e5:5c:8a:73:24:41:c1:
b6:4f:dc:8e:48:88:2b:e4:be:a9:57:c3:57:3b:3a:eb:6a:2e:
97:a2:af:0c:c5:35:69:68:d4:53:53:b2:d7:63:67:29:79:d6:
2b:c6:7d:98:00:d6:95:33:2a:73:11:0c:c9:73:6c:93:73:bf:
b7:1b:5a:74:2a:f0:5d:24:24:16:af:a8:91:7e:cd:db:80:34:
8b:85:1d:ef:1a:fd:ba:fc:a2:37:8c:97:52:8d:97:76:46:4a:
fb:e2:e1:fc:b2:58:24:ad:89:90:a3:ba:fc:80:70:2d:89:9b:
65:c2:c4:32:10:c6:05:f8:5a:63:54:09:be:f1:2c:59:10:94:
2e:36:44:1c:17:08:48:4e:9f:93:9d:ee:8f:76:71:ad:04:2f:
27:8a:cf:16:2a:f5:f2:88:5c:ad:cd:3e:0d:ef:e7:b0:2c:01:
56:8d:e5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:12 2024 by rpki-client on console-ams.rpki-client.org