Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/zcgmplOEGs3ax_DLlXIacVCVR04.roa
File: zcgmplOEGs3ax_DLlXIacVCVR04.roa (raw, json)
Hash identifier: xEHlypsVdh0SCoj3W6mEPHEjDNFJgTMM/mmHkj4uULM=
Subject key identifier: CD:C8:26:A6:53:84:1A:CD:DA:C7:F0:CB:95:72:1A:71:50:95:47:4E
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0185738FD53725C95B826CAEA3E30E901FAF
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/zcgmplOEGs3ax_DLlXIacVCVR04.roa
Signing time: Mon 02 Jan 2023 17:38:04 +0000
ROA not before: Mon 02 Jan 2023 17:38:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5638
IP address blocks: 194.50.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:8f:d5:37:25:c9:5b:82:6c:ae:a3:e3:0e:90:1f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 17:38:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cdc826a653841acddac7f0cb95721a715095474e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:15:e7:87:03:34:0c:c1:06:d3:e3:30:a6:a8:
ee:02:c0:91:9e:3b:74:2f:ee:b1:4e:44:d1:d5:e8:
16:2d:a8:d5:15:0a:95:b2:dd:ef:7f:31:74:67:eb:
aa:46:a0:4f:89:a0:84:c3:2b:25:db:78:e3:6b:aa:
9e:f6:5b:d7:5b:63:1c:35:49:fe:37:20:8a:1d:02:
58:c5:ce:96:4f:bb:5d:39:02:80:2b:be:61:2a:12:
e0:af:af:22:f3:6f:fa:32:51:5b:a8:04:d1:13:48:
f1:db:18:4c:92:31:90:b1:52:9e:7e:bd:c4:cf:65:
98:88:ba:77:34:03:11:16:b1:16:33:e6:2f:27:c9:
f0:4b:de:9a:da:0e:77:73:f4:93:cd:27:9b:34:15:
56:5e:30:bf:e2:6c:06:e7:4b:5a:31:53:a9:7c:54:
8c:2a:19:05:8b:6c:d9:0e:43:92:e9:f9:83:30:cc:
a1:fe:22:e9:72:2b:d2:68:de:0d:4d:cb:b9:e5:2e:
36:23:11:77:78:9a:a9:dc:dd:31:87:d4:f2:16:2d:
ea:f1:8e:81:50:b0:41:f7:79:1b:18:3c:35:8a:7b:
8d:71:31:99:cd:b6:c7:d9:fe:82:77:b6:b7:de:70:
5e:2e:79:1d:e4:02:64:74:bb:04:5e:3a:76:b4:a2:
41:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C8:26:A6:53:84:1A:CD:DA:C7:F0:CB:95:72:1A:71:50:95:47:4E
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/zcgmplOEGs3ax_DLlXIacVCVR04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.19.0/24
Signature Algorithm: sha256WithRSAEncryption
81:5e:ef:0a:7a:e1:45:b2:dd:d5:75:be:2a:83:36:52:75:1f:
f3:c6:39:05:78:6b:92:a4:36:19:c8:d3:5c:a1:f8:1f:1a:6c:
73:b1:96:5a:c0:87:bc:c6:85:25:10:68:83:db:4b:9e:16:cc:
ad:6e:7c:db:56:6e:2f:cd:d3:a8:33:05:c5:ae:4b:ce:05:3c:
6c:09:34:5d:48:a3:a9:bc:ad:26:29:1f:73:d8:6d:a3:59:05:
6e:2c:f9:64:b0:e7:1f:c7:32:f6:86:02:f1:65:dc:f5:26:a7:
32:cf:78:e2:37:74:7a:e8:cb:89:ba:16:d1:90:1e:55:0a:96:
20:de:ae:7e:dd:6f:34:31:17:01:8c:9f:bc:44:72:fa:8c:2d:
4d:6b:c6:ff:b9:90:c8:0d:60:f0:df:da:84:14:9d:52:ca:8b:
bb:fa:fb:64:33:56:f6:48:91:76:b1:12:65:54:95:64:09:83:
b4:db:5d:1d:53:d7:0e:51:3d:0a:84:70:c6:e0:83:02:2e:80:
39:15:b9:c5:9e:e6:4d:62:4b:c8:bc:75:1d:3f:89:f1:16:58:
47:5a:85:92:ce:af:83:10:b8:f0:25:80:62:d5:c6:88:78:c1:
55:98:5a:0d:b7:50:cc:73:9d:2d:62:9e:a5:88:fa:16:88:9b:
62:c2:36:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:40 2024 by rpki-client on console-ams.rpki-client.org