Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zyg8ADe90aL0D8TJasEnxt6-v3U.roa
File: zyg8ADe90aL0D8TJasEnxt6-v3U.roa (raw, json)
Hash identifier: Dnf/ByyTw+r0yWWmZN7/Q18KkxC5qZ9tuRsJZXXgxhU=
Subject key identifier: CF:28:3C:00:37:BD:D1:A2:F4:0F:C4:C9:6A:C1:27:C6:DE:BE:BF:75
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0185C592F1888E9F7790E588DB949F5DD557
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zyg8ADe90aL0D8TJasEnxt6-v3U.roa
Signing time: Wed 18 Jan 2023 15:50:19 +0000
ROA not before: Wed 18 Jan 2023 15:50:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60781
IP address blocks: 194.180.36.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c5:92:f1:88:8e:9f:77:90:e5:88:db:94:9f:5d:d5:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 18 15:50:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf283c0037bdd1a2f40fc4c96ac127c6debebf75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:43:37:53:77:44:48:f6:75:87:4c:85:72:c5:
41:62:49:e1:6b:6d:b2:80:c3:83:12:bb:b5:97:67:
11:8e:e7:e0:c5:89:3b:3a:f6:0c:e0:15:2e:ae:fb:
92:84:18:dd:bd:42:b5:ce:b7:b3:4f:54:2d:3b:ff:
45:7f:0f:d0:63:ce:98:9a:57:1a:eb:78:28:df:9a:
88:e5:ed:a6:4b:02:25:38:f5:9c:8f:53:10:b8:b5:
04:1c:ee:15:87:62:5d:14:03:fe:d6:65:b4:cf:8e:
36:c8:73:5e:4e:cf:f9:4e:63:be:c6:75:5c:eb:b4:
65:3e:4b:1c:a3:34:a3:64:58:a0:9c:23:77:2d:f8:
d4:1c:0c:65:b1:1d:8a:ed:96:0c:0f:66:02:10:55:
ed:e5:93:2c:22:c9:e3:45:59:0f:31:b6:a9:a3:2c:
2f:5e:e4:9b:84:a8:ab:22:3a:ef:d9:3c:72:c6:54:
f7:a9:cc:4f:b2:bd:ba:ca:4e:b9:1d:ea:49:07:89:
ba:75:bc:12:b3:16:bd:e5:28:ca:0c:94:9c:a0:87:
f3:2e:9f:80:ec:f4:97:a7:e8:54:38:6f:58:78:70:
ce:bc:2c:b8:ba:32:9e:ec:b8:2a:9a:ef:ba:96:62:
7c:2d:e3:95:a9:b1:cd:50:77:51:e5:e8:d6:21:23:
47:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:28:3C:00:37:BD:D1:A2:F4:0F:C4:C9:6A:C1:27:C6:DE:BE:BF:75
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zyg8ADe90aL0D8TJasEnxt6-v3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.36.0/24
Signature Algorithm: sha256WithRSAEncryption
87:aa:c0:41:57:82:34:0c:5f:27:bc:c5:a5:3b:df:6c:09:87:
2d:8a:0b:40:c1:be:c6:58:37:a6:50:1e:ae:72:93:67:48:cc:
5c:18:d0:84:1c:95:ae:03:ce:04:1d:53:34:21:79:48:0b:83:
07:47:89:3e:23:43:40:7d:4f:cf:16:18:da:5f:c0:71:2e:77:
3f:18:19:b5:bc:76:4b:33:72:d0:75:47:af:ad:c2:62:9b:ab:
91:d0:09:7f:82:18:3f:1e:01:09:e1:ae:91:3d:25:08:72:05:
04:45:33:fc:27:16:a2:77:1e:77:82:79:23:fd:7b:7d:7e:60:
6b:53:4b:d7:aa:47:0f:dc:a2:6c:72:96:0e:c5:e1:cf:64:e4:
d2:93:d2:3e:a5:dd:4c:7c:3d:3c:c2:aa:73:52:d6:fc:2e:77:
d2:fd:5b:f0:f3:24:83:82:52:3a:45:12:71:16:e7:22:ac:8a:
96:dc:04:66:60:e8:ca:f6:26:76:0b:43:c6:48:fe:14:ec:19:
29:28:89:07:47:a3:5a:8f:92:8a:cb:86:72:c3:2c:38:dc:d9:
fe:54:e1:0a:64:56:14:92:0c:e7:96:7e:f7:68:57:ce:ec:c7:
58:fa:d2:0b:5f:8a:49:ae:ab:54:05:37:9c:a3:59:78:ad:78:
54:3d:fa:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 19 11:56:18 2023 by rpki-client on console-ams.rpki-client.org