Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/6160c9-d2e5-439c-a25a-5d8700f65a38/1/zrj0v56SBBzLsJvpfFzJnoQmdX0.roa
File: zrj0v56SBBzLsJvpfFzJnoQmdX0.roa (raw, json)
Hash identifier: g6tuXfNjELLx7C60qIqLEV+c85hBapDrc0cNtJNwDSc=
Subject key identifier: CE:B8:F4:BF:9E:92:04:1C:CB:B0:9B:E9:7C:5C:C9:9E:84:26:75:7D
Certificate issuer: /CN=0fea8ae19061acc5489ac2719082acea5a2fc5d3
Certificate serial: 01884DE3A56B1E8CBB61BBC5C7CA4C1F5E9D
Authority key identifier: 0F:EA:8A:E1:90:61:AC:C5:48:9A:C2:71:90:82:AC:EA:5A:2F:C5:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-qK4ZBhrMVImsJxkIKs6lovxdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/6160c9-d2e5-439c-a25a-5d8700f65a38/1/zrj0v56SBBzLsJvpfFzJnoQmdX0.roa
Signing time: Wed 24 May 2023 13:12:24 +0000
ROA not before: Wed 24 May 2023 13:12:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62005
IP address blocks: 91.236.230.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4d:e3:a5:6b:1e:8c:bb:61:bb:c5:c7:ca:4c:1f:5e:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fea8ae19061acc5489ac2719082acea5a2fc5d3
Validity
Not Before: May 24 13:12:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ceb8f4bf9e92041ccbb09be97c5cc99e8426757d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f1:7e:d8:5c:ae:9b:b0:bc:38:0c:16:8f:ff:
80:ab:3a:a7:b2:3d:9a:3d:4a:b1:63:89:eb:46:ea:
a8:b3:24:0e:82:c2:be:1e:45:d6:03:36:ac:ad:49:
5c:9c:18:65:c1:cc:c1:85:c7:03:20:90:fc:d6:f5:
6d:fa:bc:39:d8:68:d9:a1:dd:ac:50:4c:8a:53:e5:
58:d4:0c:4e:3b:98:88:f9:d6:1f:34:a2:44:ad:ac:
ad:0b:87:ae:fe:ce:0d:f1:e1:9d:b1:b9:a1:3a:87:
71:de:bf:9f:ed:87:cb:f6:cd:dd:b3:2d:ef:fb:84:
bf:c5:77:3c:46:98:0f:3c:a0:38:97:aa:41:21:8d:
25:5b:ba:f0:c2:e9:a5:6a:7b:59:c1:16:62:15:14:
61:75:3e:29:db:58:a2:cb:a4:e3:76:dd:d9:df:56:
31:f0:49:3b:f4:1c:bd:a5:81:7f:ed:c7:38:10:c7:
5e:99:6a:ba:5a:a2:fc:ff:a4:ac:6a:7d:58:39:58:
8a:3d:4b:7a:48:b4:f6:fe:36:6b:8e:96:39:ed:53:
04:0c:01:ec:a1:a9:0c:50:79:a1:e8:2a:de:a7:6c:
25:0c:70:a6:da:ae:82:0a:4d:19:8f:b3:a8:f8:0f:
0a:05:b6:39:f5:0a:af:38:69:a9:32:03:c8:c7:b6:
70:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B8:F4:BF:9E:92:04:1C:CB:B0:9B:E9:7C:5C:C9:9E:84:26:75:7D
X509v3 Authority Key Identifier:
keyid:0F:EA:8A:E1:90:61:AC:C5:48:9A:C2:71:90:82:AC:EA:5A:2F:C5:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-qK4ZBhrMVImsJxkIKs6lovxdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6160c9-d2e5-439c-a25a-5d8700f65a38/1/zrj0v56SBBzLsJvpfFzJnoQmdX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6160c9-d2e5-439c-a25a-5d8700f65a38/1/D-qK4ZBhrMVImsJxkIKs6lovxdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.230.0/24
Signature Algorithm: sha256WithRSAEncryption
22:dc:76:16:94:e0:ea:8d:f4:86:2d:6f:71:89:5d:3c:e5:3c:
e0:46:95:77:e6:e4:3f:6b:e7:33:1f:8f:40:53:e8:03:49:a1:
c6:89:89:95:ee:fc:80:8b:1b:36:b6:2f:e4:fb:79:57:33:f1:
6f:fc:3c:1c:ac:97:9b:11:69:98:67:74:b2:5a:05:eb:c0:8b:
4b:a0:8a:20:ce:be:da:a1:d4:8a:13:38:34:09:7f:c7:c7:01:
51:92:ed:55:7a:6f:2d:f4:89:97:14:d5:ae:40:97:d3:65:9d:
24:bc:bf:53:d4:24:f6:f0:ef:0a:4c:d9:45:e7:52:1a:28:f9:
9a:1c:b2:73:2c:78:c9:e6:a3:31:a7:ee:59:5a:99:55:cc:72:
60:c6:90:5b:69:a4:30:63:4e:7c:2d:11:b4:bc:7a:e5:1c:e3:
eb:22:44:29:b5:dc:3d:84:09:bc:21:04:a4:95:fb:4d:b9:af:
83:64:7a:7b:e2:08:33:c7:5f:da:d2:7b:29:7f:42:45:d4:0b:
41:bb:20:3c:e2:04:65:72:00:3c:1b:b8:58:cf:ae:b1:77:38:
4f:35:cc:9a:74:a5:3e:93:9f:88:c4:71:e7:20:f1:2f:2f:df:
8a:61:09:10:8c:ee:f4:a9:47:b4:0e:1a:9a:54:e7:35:70:38:
84:e1:72:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:24 2024 by rpki-client on console-ams.rpki-client.org