Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/ZWxmiEzfJgYn409egw8hM-DsDcQ.roa
File: ZWxmiEzfJgYn409egw8hM-DsDcQ.roa (raw, json)
Hash identifier: /XdrT4k8Ly9G83Kr8Bd6WP3A+lFX+t8AJ4SxXmogizk=
Subject key identifier: 65:6C:66:88:4C:DF:26:06:27:E3:4F:5E:83:0F:21:33:E0:EC:0D:C4
Certificate issuer: /CN=5b8a16522ec34b1c5bc4708206cc1963a15bbdb1
Certificate serial: 01856ECB9BC728EEBA76113D59D91CDE403F
Authority key identifier: 5B:8A:16:52:2E:C3:4B:1C:5B:C4:70:82:06:CC:19:63:A1:5B:BD:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W4oWUi7DSxxbxHCCBswZY6FbvbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/ZWxmiEzfJgYn409egw8hM-DsDcQ.roa
Signing time: Sun 01 Jan 2023 19:25:15 +0000
ROA not before: Sun 01 Jan 2023 19:25:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212905
IP address blocks: 178.159.35.0/24 maxlen: 24
2a0c:d200::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 12 Jun 2023 14:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:9b:c7:28:ee:ba:76:11:3d:59:d9:1c:de:40:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8a16522ec34b1c5bc4708206cc1963a15bbdb1
Validity
Not Before: Jan 1 19:25:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=656c66884cdf260627e34f5e830f2133e0ec0dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3e:47:25:af:0b:a7:22:7f:ed:cd:82:0c:8a:
5f:88:f3:9d:9f:88:8f:74:df:e1:4d:3b:b1:36:28:
20:48:05:ed:40:aa:4f:78:fc:8a:68:a4:d7:58:5d:
f6:b6:15:fb:ff:60:12:80:b0:c3:b1:0d:4a:75:b2:
5e:eb:4e:af:aa:56:b0:48:27:f6:c9:54:e2:d8:96:
5a:96:e8:02:1e:f2:9b:11:89:2c:bc:6b:63:39:e6:
d2:43:ce:ca:9d:63:13:ca:b4:b8:41:9f:d8:43:91:
fa:15:39:66:0f:c5:8f:8e:38:0e:cd:2e:38:ff:aa:
13:63:12:9b:06:5c:cb:1e:79:96:3e:ea:93:64:9e:
96:a1:25:2a:03:f6:7e:b3:9e:7a:af:73:47:b9:dd:
b1:80:29:10:2c:2c:d4:f4:eb:00:a2:89:96:6d:4d:
0d:63:16:ad:39:46:43:71:99:2f:a3:a6:71:93:b1:
2b:7a:0b:43:32:06:0d:77:d2:c3:eb:db:ee:b8:43:
78:e9:34:d8:f5:fe:9c:75:30:cf:84:42:a8:df:09:
54:f9:89:4f:74:d5:df:a1:23:4c:41:4a:dc:81:51:
eb:54:7f:2e:ee:11:fb:d9:7e:16:30:fb:f2:71:2e:
14:95:29:da:ac:b2:8c:4b:1b:58:b2:25:67:17:1b:
87:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:6C:66:88:4C:DF:26:06:27:E3:4F:5E:83:0F:21:33:E0:EC:0D:C4
X509v3 Authority Key Identifier:
keyid:5B:8A:16:52:2E:C3:4B:1C:5B:C4:70:82:06:CC:19:63:A1:5B:BD:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4oWUi7DSxxbxHCCBswZY6FbvbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/ZWxmiEzfJgYn409egw8hM-DsDcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.159.35.0/24
IPv6:
2a0c:d200::/48
Signature Algorithm: sha256WithRSAEncryption
03:13:a2:dc:41:86:cd:52:cd:24:eb:2c:58:00:83:c2:42:34:
9d:33:14:78:7c:32:60:50:b6:4a:37:b2:8b:68:26:66:c6:59:
be:98:0d:e1:c2:d8:86:3f:a5:81:19:68:f0:87:fe:c6:a9:25:
48:7a:09:9e:9f:f0:c7:db:e3:e0:9b:c6:b6:1b:70:08:b3:a8:
51:99:0e:7a:df:79:74:0a:f3:e6:9f:68:d1:d6:23:bc:5e:fe:
b8:f2:73:6f:88:a8:d7:04:76:8d:82:00:af:06:18:dd:95:71:
e4:7a:8d:28:fa:60:e4:71:6b:a9:f8:b5:97:63:ac:17:59:a1:
6e:cf:ac:33:7b:de:8b:3e:ed:f4:16:af:fa:88:5e:0e:0d:eb:
b6:5b:ef:f5:a9:54:f5:eb:87:00:ae:49:05:84:10:79:b3:15:
f9:74:65:a3:17:e3:f8:08:32:65:c8:19:d4:a6:bf:ff:da:f3:
f8:38:0b:b9:3f:79:39:9f:7b:6d:ee:d7:08:62:9a:83:a7:64:
78:d8:7d:1d:60:46:e5:e6:24:08:fe:16:8f:f7:66:81:55:8c:
d7:3e:28:6c:8c:2d:d7:36:ac:81:e9:4f:b8:4f:1f:bc:ea:d3:
ec:38:43:b5:49:b2:42:22:ef:ff:22:8f:b3:f0:3b:50:6d:da:
b6:eb:e4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:20 2024 by rpki-client on console-fra.rpki-client.org