Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/7306a8-7e49-4c95-acc5-5735e045d4c1/1/zVqVCtw61bDwZ45ETUFGpdjSFeU.roa
File: zVqVCtw61bDwZ45ETUFGpdjSFeU.roa (raw, json)
Hash identifier: 6eI7KEyzsmn3GKkrs0iUUQeWHCUFs+UgMJVUfhpCtQI=
Subject key identifier: CD:5A:95:0A:DC:3A:D5:B0:F0:67:8E:44:4D:41:46:A5:D8:D2:15:E5
Certificate issuer: /CN=a739db60f9fc71b1a444a9453c865b4642263a72
Certificate serial: 01856DB88B2EECE1898C5E4DABD3B3F75109
Authority key identifier: A7:39:DB:60:F9:FC:71:B1:A4:44:A9:45:3C:86:5B:46:42:26:3A:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pznbYPn8cbGkRKlFPIZbRkImOnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/7306a8-7e49-4c95-acc5-5735e045d4c1/1/zVqVCtw61bDwZ45ETUFGpdjSFeU.roa
Signing time: Sun 01 Jan 2023 14:24:48 +0000
ROA not before: Sun 01 Jan 2023 14:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 212.18.97.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:b8:8b:2e:ec:e1:89:8c:5e:4d:ab:d3:b3:f7:51:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a739db60f9fc71b1a444a9453c865b4642263a72
Validity
Not Before: Jan 1 14:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd5a950adc3ad5b0f0678e444d4146a5d8d215e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:23:fe:08:89:da:56:c9:b9:3c:2c:39:75:55:
b6:0a:0a:39:e0:90:55:df:69:a2:e3:c4:d3:21:7e:
63:3f:bd:44:8e:f3:fd:ac:f8:9a:d0:04:3f:59:c8:
18:07:7d:9c:e8:34:81:dd:92:0a:e9:23:75:66:27:
f0:ab:5f:84:28:fe:46:a8:d3:d0:fd:d8:eb:5e:43:
69:ac:37:c7:9b:b3:1b:1f:8c:26:c3:6b:9c:d7:1a:
08:7c:5e:97:e6:eb:77:18:c0:b4:d3:94:27:89:27:
9f:e6:a2:ef:fe:20:84:8d:12:fa:40:e7:8a:95:8e:
c4:c4:4f:b5:87:6f:cd:7d:6f:a0:67:e4:f9:2b:fe:
b0:b4:71:92:2c:45:39:7c:82:c8:88:06:2b:f8:1d:
d6:ee:4d:e8:e8:d4:4a:7e:5b:ba:0d:56:bf:24:0e:
00:e6:03:01:bc:5b:26:b0:a2:20:ff:ba:bf:99:76:
46:c6:04:8d:b6:f1:12:6b:33:a2:10:5f:50:23:77:
7d:f4:57:62:59:a3:ec:16:77:4b:ed:86:50:89:5f:
07:f7:d0:e1:2f:e3:2f:a3:42:c4:21:dd:a9:0b:f9:
2e:9f:a3:4a:a4:b8:6c:6e:03:bc:bb:ed:cc:21:22:
6a:60:24:74:44:d9:01:a3:f9:3e:68:32:11:ef:5b:
34:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:5A:95:0A:DC:3A:D5:B0:F0:67:8E:44:4D:41:46:A5:D8:D2:15:E5
X509v3 Authority Key Identifier:
keyid:A7:39:DB:60:F9:FC:71:B1:A4:44:A9:45:3C:86:5B:46:42:26:3A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pznbYPn8cbGkRKlFPIZbRkImOnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/7306a8-7e49-4c95-acc5-5735e045d4c1/1/zVqVCtw61bDwZ45ETUFGpdjSFeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/7306a8-7e49-4c95-acc5-5735e045d4c1/1/pznbYPn8cbGkRKlFPIZbRkImOnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.97.0/24
Signature Algorithm: sha256WithRSAEncryption
48:b1:20:d5:3a:80:b1:35:d8:92:7e:b2:36:5a:e3:75:dc:f8:
73:b0:9c:90:de:62:52:aa:10:99:9e:dc:d3:bf:1d:1e:b2:88:
d1:4e:4d:7a:02:e7:f1:70:39:b4:7a:4c:af:50:5d:01:c4:a0:
19:e6:63:49:ca:6b:5a:f7:34:08:b5:a8:88:61:0f:65:0a:7d:
1e:4f:58:a2:af:49:f9:90:4c:b2:1d:f0:8c:ee:ff:a2:c2:34:
d6:5b:ac:3f:1e:59:83:99:77:ad:80:6e:d2:60:16:a2:a6:2b:
ff:36:a9:e4:4e:ac:de:48:47:7b:3f:f4:13:4d:16:66:10:ba:
83:d5:24:6a:19:c8:2f:ae:6f:e3:4a:5b:8c:fa:7c:63:85:0b:
4a:bc:a4:ce:a7:ca:e7:24:92:e4:8a:d0:4d:f0:36:6f:b7:bf:
a5:d1:13:22:8e:79:cc:f5:61:e2:ea:b9:ee:4f:a4:0b:7d:83:
bc:1f:c3:c5:12:16:04:fb:5d:f5:43:8d:b2:b8:92:dc:d4:9b:
2d:f7:c9:4f:c5:90:76:9f:dc:c4:25:da:94:13:31:62:53:b0:
59:b4:3b:53:50:9b:fe:2c:02:c6:07:10:80:f4:e2:ae:7a:ec:
2e:ee:25:5f:b4:53:e2:48:a3:69:93:08:5c:cd:1e:7c:47:44:
08:c8:9a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:03 2023 by rpki-client on console-fra.rpki-client.org