Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/zdItxW5JMeSsbkVSEgZb4pDoaSs.roa
File: zdItxW5JMeSsbkVSEgZb4pDoaSs.roa (raw, json)
Hash identifier: 7J6j3zbdCjLADvujcznAH/Eak+t4xnuxbyjtO4po2uE=
Subject key identifier: CD:D2:2D:C5:6E:49:31:E4:AC:6E:45:52:12:06:5B:E2:90:E8:69:2B
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01886B52715B5BA01D25E0A3A9D5A0290FAC
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/zdItxW5JMeSsbkVSEgZb4pDoaSs.roa
Signing time: Tue 30 May 2023 06:22:25 +0000
ROA not before: Tue 30 May 2023 06:22:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25103
IP address blocks: 80.96.234.0/24 maxlen: 24
80.96.247.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6b:52:71:5b:5b:a0:1d:25:e0:a3:a9:d5:a0:29:0f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: May 30 06:22:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cdd22dc56e4931e4ac6e455212065be290e8692b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:01:74:48:f1:dc:88:9c:15:e9:03:74:ef:95:
37:69:27:cb:50:34:ae:c5:a3:d5:7a:d5:40:6d:8b:
25:de:6b:f2:0e:e8:f0:ae:9e:14:a1:04:be:32:a8:
ce:d9:73:d4:2c:25:b8:75:2f:a4:ca:ec:69:d5:43:
3c:ed:65:d9:d5:cc:72:5d:9d:0a:8e:c5:8e:22:f1:
5c:74:5a:1c:72:17:0b:02:5a:ca:6e:68:2e:72:d3:
b1:59:b7:fa:39:cc:b8:82:de:22:9f:d9:f0:9f:a1:
51:cc:fd:8c:4a:0e:58:72:e3:15:a6:c9:01:4e:1f:
53:ce:82:9b:67:e9:f4:95:6f:39:de:d3:51:33:14:
35:c5:db:00:6f:63:62:d1:16:a8:1b:39:b0:99:9f:
6b:4d:f5:98:68:c8:4e:38:af:c0:16:fb:1c:78:77:
f6:d6:29:9f:cd:91:73:a0:74:e3:09:a0:07:0d:0f:
47:a2:9a:af:dd:7b:3f:48:2c:eb:5c:6f:36:84:33:
79:4e:47:a4:66:97:65:84:e5:79:41:e6:e6:74:e0:
57:09:47:09:45:06:ff:f4:ae:c3:f8:4f:c7:ae:7b:
dc:7c:48:ab:64:12:4b:b1:0b:e8:db:66:c4:15:dc:
c6:bc:3c:cc:43:87:f9:94:c9:df:7d:1f:a5:8a:86:
b6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D2:2D:C5:6E:49:31:E4:AC:6E:45:52:12:06:5B:E2:90:E8:69:2B
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/zdItxW5JMeSsbkVSEgZb4pDoaSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.234.0/24
80.96.247.0/24
Signature Algorithm: sha256WithRSAEncryption
21:9a:11:54:e3:97:a0:47:fa:ff:5d:0c:00:00:8f:8a:07:3c:
34:88:58:0c:9e:32:56:2a:d9:72:80:10:93:9d:c5:f3:bb:b4:
e7:91:27:2e:5e:48:75:11:dd:64:00:13:ae:37:0b:94:ee:b4:
3b:88:74:a2:f2:fa:b4:b2:23:2a:61:60:62:f4:99:f1:4d:3f:
b8:d1:61:49:21:b0:9e:e3:e1:13:79:9f:d7:10:7f:8a:aa:f1:
3c:47:04:fa:a9:ad:bf:87:cb:68:a9:ed:7a:e7:1b:32:a1:17:
d8:57:51:ea:2b:08:43:3d:80:a6:b1:0c:90:55:d8:c7:55:c3:
fc:3c:c9:d4:4c:c8:0b:88:aa:84:6a:d6:5d:a5:9f:22:8a:12:
64:b9:2f:dc:3a:92:28:be:f3:fd:b8:e9:ba:71:e0:fc:dd:79:
92:a8:72:69:82:8d:98:24:bd:8d:85:6f:a4:cc:12:aa:61:72:
bc:fe:31:9c:cd:9a:9d:68:d1:56:a2:0d:25:fc:2f:23:01:80:
61:d6:f4:3a:8d:0a:1e:0d:ca:93:a7:90:70:37:00:ef:85:5c:
9d:c1:9f:85:ef:0b:ca:0f:0b:b3:cc:fc:97:c0:18:ca:2e:38:
2d:54:07:86:80:0b:90:94:fb:0e:44:0d:7d:7b:ef:3d:de:ee:
3d:8a:20:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:18:49 2024 by rpki-client on console-ams.rpki-client.org