Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/zc0_7bRe7bZ71qrIhplS7jghzOg.roa
File: zc0_7bRe7bZ71qrIhplS7jghzOg.roa (raw, json)
Hash identifier: R3tLuOQsbG0afCS7VnUIWuWn1IFxBEJPzvk6CPqEqww=
Subject key identifier: CD:CD:3F:ED:B4:5E:ED:B6:7B:D6:AA:C8:86:99:52:EE:38:21:CC:E8
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0185738FDE8185C64E60E3536D8762E24AAB
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/zc0_7bRe7bZ71qrIhplS7jghzOg.roa
Signing time: Mon 02 Jan 2023 17:38:06 +0000
ROA not before: Mon 02 Jan 2023 17:38:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 23959
IP address blocks: 194.50.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:8f:de:81:85:c6:4e:60:e3:53:6d:87:62:e2:4a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 17:38:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cdcd3fedb45eedb67bd6aac8869952ee3821cce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2c:b7:76:42:99:c0:f0:75:69:56:b6:e4:3c:
84:f8:70:28:b5:6e:ef:52:0f:29:62:49:52:54:54:
76:28:14:0c:32:f0:fe:c1:6f:ad:29:64:98:f0:3f:
39:08:07:a5:85:f2:1c:86:5a:fd:8d:d8:30:72:ba:
11:c4:72:32:8c:0a:6a:b6:70:0e:1b:b6:4f:61:09:
39:8d:08:08:ca:9b:21:26:8b:15:6c:fd:4e:b3:15:
a4:a5:4e:41:f2:27:d2:e3:e2:a7:5a:26:ff:6f:e0:
30:81:44:03:8d:b1:98:24:c2:9e:e6:54:e4:ca:97:
e5:e0:81:6f:b1:a2:7a:1c:cc:fb:37:3c:a8:bf:35:
e5:fa:a7:1b:68:14:1b:26:6b:10:a7:91:4a:37:3c:
35:d6:48:dc:c3:eb:9b:ef:3d:ba:d9:f8:4f:1a:08:
c7:e1:38:94:35:6f:6c:b0:33:9d:d9:cb:12:3c:17:
d1:fe:89:cc:4d:19:ad:fe:42:e9:1f:80:8a:5a:ee:
cf:e5:55:0a:dd:39:66:fb:b6:12:e6:2d:69:5b:67:
50:34:4f:7a:f3:b7:0d:d8:79:a4:6c:64:41:10:b5:
e3:ca:f0:0b:f7:9d:68:6c:a3:08:2a:92:bf:78:9f:
c6:42:b0:bc:1e:a4:18:78:c3:b8:d7:b0:1e:47:7d:
d2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:CD:3F:ED:B4:5E:ED:B6:7B:D6:AA:C8:86:99:52:EE:38:21:CC:E8
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/zc0_7bRe7bZ71qrIhplS7jghzOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.18.0/24
Signature Algorithm: sha256WithRSAEncryption
83:cc:87:37:78:26:2e:f7:17:3a:8d:c1:a5:33:12:7a:e6:97:
c1:b4:07:5d:70:b3:21:22:20:3d:e3:e7:3f:5d:a4:0c:1b:a5:
da:89:03:e7:21:81:19:6c:fd:64:13:60:d9:90:c0:85:df:87:
7d:7c:6c:b0:2c:27:ab:4b:cc:bb:2b:c3:53:2d:18:88:be:bc:
57:7a:52:c1:09:14:64:dd:24:2f:9a:fc:3e:b4:41:5b:23:96:
e5:3a:c6:20:22:14:98:07:fc:41:71:dc:99:23:e9:51:42:c4:
b7:c2:0b:38:e3:54:4d:7b:ae:97:3d:df:34:9d:b9:21:c1:db:
8b:63:52:96:00:2d:75:bb:00:8a:94:f0:ed:f7:9f:da:13:6e:
0f:9f:cc:bd:67:87:65:6b:f8:d3:b5:66:d1:96:c5:ac:c3:f2:
fd:d9:c0:d6:1c:8d:98:d2:85:f1:0d:72:54:b6:71:de:ab:6d:
ab:6b:3c:5b:7d:9d:f9:a0:4d:0a:2e:6f:66:7f:6a:f9:84:7b:
c2:9d:17:8d:08:a6:9c:0f:1f:c1:1b:63:d8:51:2f:2a:ac:6c:
24:f2:d8:f9:3e:99:ab:ef:15:9b:bc:5e:8c:2f:a0:3c:ca:30:
c9:7a:a2:fb:f6:78:c5:c7:2c:3d:7c:88:84:bc:d0:ca:29:39:
57:dd:b6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:40 2024 by rpki-client on console-ams.rpki-client.org