Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zZWtFnbRVMUnjHcTPCGiXzvUp3o.roa
File: zZWtFnbRVMUnjHcTPCGiXzvUp3o.roa (raw, json)
Hash identifier: i4PjIGZrJgRG0sUeTErGNCwHjOoaU3hIY/o1o9Gk2Rc=
Subject key identifier: CD:95:AD:16:76:D1:54:C5:27:8C:77:13:3C:21:A2:5F:3B:D4:A7:7A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01896E67D993D0AEEC065C7FEC1B2096BEF5
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zZWtFnbRVMUnjHcTPCGiXzvUp3o.roa
Signing time: Wed 19 Jul 2023 13:47:26 +0000
ROA not before: Wed 19 Jul 2023 13:47:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58212
IP address blocks: 141.98.7.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6e:67:d9:93:d0:ae:ec:06:5c:7f:ec:1b:20:96:be:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 19 13:47:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd95ad1676d154c5278c77133c21a25f3bd4a77a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:77:51:d3:7a:28:af:1b:07:ad:0b:5c:29:9d:
eb:c4:38:fb:6d:83:b9:bb:d2:d2:03:6f:3a:99:64:
59:cc:34:c4:6f:be:72:73:5d:6d:ac:59:5c:44:3c:
09:ed:84:92:a7:47:ec:3f:a0:e5:62:a8:f8:3f:5c:
03:70:a4:60:22:98:2b:3d:9d:72:d0:81:3a:5f:0b:
89:1f:0b:23:50:df:2f:ec:1d:40:77:33:de:66:d7:
9d:f7:1a:a3:bc:6f:38:4f:7f:61:8a:02:23:b2:35:
75:ef:55:65:03:30:de:83:c7:f0:6d:5a:b3:37:9e:
e1:ab:c5:99:26:81:e0:34:5a:f6:fe:41:71:a7:06:
65:af:86:0e:a8:a2:df:03:a2:4d:cd:56:26:a2:64:
9d:8a:1e:1c:68:08:0f:61:0e:68:3b:59:a3:7c:ab:
c2:55:93:18:df:49:7f:46:9a:55:5c:81:ce:95:76:
29:f7:a4:1d:ed:e0:38:f4:db:bf:09:62:4c:17:3e:
5e:43:9a:17:77:42:ec:99:36:a8:e8:16:2d:b6:85:
d6:f6:ea:18:6a:3a:0a:55:ad:4e:66:42:ad:69:7b:
b8:c4:c9:37:ce:31:51:b2:06:5f:5f:bf:94:52:fd:
e0:b5:b3:9f:35:73:11:f6:29:be:9b:01:e0:5a:35:
d1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:95:AD:16:76:D1:54:C5:27:8C:77:13:3C:21:A2:5F:3B:D4:A7:7A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zZWtFnbRVMUnjHcTPCGiXzvUp3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.7.0/24
Signature Algorithm: sha256WithRSAEncryption
05:a7:95:7c:ad:e7:7c:44:f3:c5:49:d6:27:e6:9c:dd:1f:53:
31:07:40:56:52:d0:3b:42:75:3f:df:56:aa:af:7d:10:6e:27:
53:33:df:e5:ab:71:76:b1:a2:4d:66:68:f0:3c:40:ce:b7:a6:
b6:7d:d9:fc:f5:7f:c9:f1:3f:1d:90:30:27:00:b7:b2:ce:a0:
51:5f:9a:94:ad:b3:f5:6c:fc:f6:d6:41:c3:04:c2:66:37:5e:
81:e5:9e:47:da:13:e0:58:87:e0:a6:4b:34:b7:22:6c:3d:5c:
11:e2:a3:2d:e7:38:5c:4e:6d:22:0b:ce:40:19:a1:83:0a:fd:
a3:8e:11:1f:20:2b:c1:b5:56:40:45:ee:f8:d7:97:43:58:f7:
7e:31:64:09:49:7b:20:6a:28:82:84:11:31:3c:e4:65:24:14:
49:f1:98:6a:da:75:fa:45:61:5d:1a:df:3e:a3:12:e1:7f:71:
43:53:fa:8d:bd:43:6a:25:9e:83:c1:de:f3:9b:3e:3e:99:e3:
d0:a2:1a:37:7f:3b:af:fe:38:91:96:7e:b0:38:59:2b:79:ba:
3e:2d:04:83:29:a4:33:e2:27:d5:d2:d2:2d:58:d2:78:41:2f:
c1:d3:af:60:eb:62:0b:72:86:2c:1f:74:9b:f5:f6:d6:5b:a1:
b3:e2:6d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 4 19:41:49 2023 by rpki-client on console-ams.rpki-client.org