Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ZCe_CXLJMEw9d9lL0SFvhRjSlfg.roa
File: ZCe_CXLJMEw9d9lL0SFvhRjSlfg.roa (raw, json)
Hash identifier: a4JIAZcwYu2vvy0/gYfMFO5Xi5ki3CA/dB6q0KPg0qc=
Subject key identifier: 64:27:BF:09:72:C9:30:4C:3D:77:D9:4B:D1:21:6F:85:18:D2:95:F8
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018CB1FE8BEC99D785D9796B048CF98C8B1F
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ZCe_CXLJMEw9d9lL0SFvhRjSlfg.roa
Signing time: Thu 28 Dec 2023 19:54:58 +0000
ROA not before: Thu 28 Dec 2023 19:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205463
IP address blocks: 2.56.109.0/24 maxlen: 24
194.15.52.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b1:fe:8b:ec:99:d7:85:d9:79:6b:04:8c:f9:8c:8b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Dec 28 19:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6427bf0972c9304c3d77d94bd1216f8518d295f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:92:17:54:fb:2d:68:24:ec:81:cb:ab:5b:b9:
60:39:f6:6f:10:eb:70:17:7a:24:38:54:3e:61:4b:
13:1a:a6:46:ad:74:fa:06:53:43:68:a1:54:dd:0c:
91:f8:fc:8d:ea:e5:e5:a8:8d:a8:d6:eb:b3:b1:0c:
92:c7:13:bd:2b:c6:bc:6d:5c:a6:48:a8:12:ff:1f:
c1:ec:a2:9c:d6:d1:07:1e:f0:1e:32:b3:9f:b3:a4:
d2:95:06:14:81:0b:da:39:bb:8a:a7:31:2e:dd:13:
29:18:e1:f1:10:66:3a:05:af:b8:8a:dd:69:a8:a6:
0a:ab:ed:04:fb:99:38:f4:ae:0d:e0:34:51:71:db:
4a:07:86:c7:90:30:9e:5a:f0:e9:34:e3:0d:90:2e:
86:a0:c0:c8:b8:b0:df:19:a1:f9:7e:f0:bb:2a:b3:
65:03:5a:6f:ef:a8:55:f8:15:b6:c3:ea:f7:29:0b:
c4:17:3f:99:3d:2b:27:be:26:55:c2:81:7a:66:46:
cb:4a:ea:aa:02:29:ea:f9:a6:2b:22:b4:55:88:0e:
c9:24:81:a0:12:24:f8:18:c3:d6:42:76:c9:aa:4d:
de:7e:9f:aa:e0:59:3e:99:00:f8:48:e7:a7:aa:f5:
72:b3:1f:f6:68:82:e2:99:6c:7f:30:ff:4e:da:dc:
1f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:27:BF:09:72:C9:30:4C:3D:77:D9:4B:D1:21:6F:85:18:D2:95:F8
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ZCe_CXLJMEw9d9lL0SFvhRjSlfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.109.0/24
194.15.52.0/24
Signature Algorithm: sha256WithRSAEncryption
49:cb:15:e3:64:b1:a9:be:98:91:cf:41:3a:bf:bb:1a:8a:e9:
19:78:99:77:3d:ed:d1:38:94:6f:26:b6:e3:83:cb:b9:66:7d:
0e:cf:7f:56:e2:27:8e:66:01:ad:09:4d:ac:44:00:5d:08:f9:
0b:ab:20:e4:97:0a:53:f1:a2:6d:d5:e9:85:4e:ac:db:d2:ca:
da:c6:50:f5:ba:90:82:19:98:05:60:99:48:6d:90:d4:fe:89:
6c:7f:c3:9d:31:d9:4d:08:e9:85:81:e5:2e:2a:12:64:9a:75:
3e:44:16:54:a6:ce:ee:57:d2:1a:c8:d6:55:63:4d:30:58:b9:
01:0c:7d:b6:b4:52:33:c0:bc:72:aa:fc:04:e7:39:e0:dd:44:
9a:cc:9c:59:02:3b:18:cb:8c:b2:2a:cf:af:40:ca:88:03:2b:
41:83:29:46:3b:81:79:00:da:d1:dd:b8:20:c5:15:e2:80:58:
54:12:70:13:d7:58:6c:3a:23:63:45:44:25:8a:6a:66:92:7f:
81:af:c1:09:1d:0f:e6:38:9d:5b:2c:8a:73:d1:dc:69:3e:25:
7b:ee:8c:b5:e3:e1:f9:ac:15:76:a8:a0:87:9c:fc:87:b8:56:
b0:d3:66:47:02:fc:36:b6:94:91:82:e3:1c:0f:06:6f:7d:b3:
23:82:08:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:49:45 2024 by rpki-client on console-fra.rpki-client.org