Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/ZXx-AfIbQgHeseMsqQuk6Hv9NZ0.roa
File: ZXx-AfIbQgHeseMsqQuk6Hv9NZ0.roa (raw, json)
Hash identifier: 8kVWlySMlLqJXp92twPK3cB1Z+vNM2ubNVUnYlvlHsg=
Subject key identifier: 65:7C:7E:01:F2:1B:42:01:DE:B1:E3:2C:A9:0B:A4:E8:7B:FD:35:9D
Certificate issuer: /CN=ace3634464861bd4bf8c5bc7e3c9bfd3d246a4dd
Certificate serial: 01856F023C500E6AC9888D8D43F1F0A9BADA
Authority key identifier: AC:E3:63:44:64:86:1B:D4:BF:8C:5B:C7:E3:C9:BF:D3:D2:46:A4:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/ZXx-AfIbQgHeseMsqQuk6Hv9NZ0.roa
Signing time: Sun 01 Jan 2023 20:24:55 +0000
ROA not before: Sun 01 Jan 2023 20:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8455
IP address blocks: 195.248.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:3c:50:0e:6a:c9:88:8d:8d:43:f1:f0:a9:ba:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ace3634464861bd4bf8c5bc7e3c9bfd3d246a4dd
Validity
Not Before: Jan 1 20:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=657c7e01f21b4201deb1e32ca90ba4e87bfd359d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:05:93:5d:b3:18:9d:77:5d:ed:d1:bd:9a:d0:
9c:b5:ed:d4:4b:83:ce:2b:ff:5c:58:24:c1:96:c1:
b8:fe:dd:a5:9d:da:99:5b:98:e6:39:5c:14:cd:7e:
19:c6:fc:42:f2:d3:1a:21:2d:b2:ce:30:fa:fe:e0:
92:ce:74:82:1b:89:ea:5b:d6:32:a0:36:16:8e:87:
0b:6d:59:5f:75:c7:5e:f2:d5:9e:56:14:a8:eb:7d:
a6:74:c1:9d:a7:c7:da:8c:40:23:38:f1:55:07:d9:
f2:50:2a:84:13:f2:a4:c5:21:1f:2a:b6:f3:32:da:
21:b3:12:0d:b0:9b:1a:21:ff:f5:86:ec:97:8e:15:
cc:e1:0e:17:60:a4:5f:27:4b:d2:c5:30:c2:c4:52:
cf:63:98:c4:1e:0f:e5:4c:ae:a8:54:01:ab:08:74:
56:f7:86:82:8e:85:af:f2:a8:86:26:b0:e0:4b:1d:
aa:91:b8:03:9d:2c:a8:a4:7e:6d:ce:6b:34:9a:9f:
19:9f:e9:2c:8b:18:56:18:ea:c5:89:99:c4:70:8d:
e9:8d:34:20:be:36:2c:dc:9f:14:be:14:8d:36:b7:
1d:8a:cf:34:66:54:a0:fb:58:49:47:47:0b:c5:f1:
9d:d9:0d:40:cf:8d:9e:7a:aa:5a:4f:f2:9c:f9:68:
81:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:7C:7E:01:F2:1B:42:01:DE:B1:E3:2C:A9:0B:A4:E8:7B:FD:35:9D
X509v3 Authority Key Identifier:
keyid:AC:E3:63:44:64:86:1B:D4:BF:8C:5B:C7:E3:C9:BF:D3:D2:46:A4:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/ZXx-AfIbQgHeseMsqQuk6Hv9NZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.248.87.0/24
Signature Algorithm: sha256WithRSAEncryption
41:df:c2:27:4f:99:3b:24:c2:29:90:87:05:98:c9:93:a2:0d:
00:2d:2c:f9:9d:57:1c:ef:15:4b:79:b1:2e:df:e3:8b:b6:98:
96:16:b1:b3:44:15:d4:35:29:93:ea:67:7d:34:1e:dc:e2:f0:
0c:b6:dc:d6:3a:e2:d2:22:b7:46:18:86:92:ab:ec:0e:e3:0e:
5d:b2:89:1c:52:d1:75:a0:0a:c3:75:dd:1c:cd:22:34:fd:ed:
3a:71:38:82:5c:25:a7:43:88:43:dd:ec:c5:df:de:9a:15:c9:
e0:3c:09:82:56:7d:fd:48:01:e8:bb:f4:46:16:6b:c2:71:85:
6c:ed:78:2f:8a:59:7c:11:d2:35:4b:3f:bf:55:22:ff:ab:c8:
fc:91:31:c1:22:7c:b6:da:33:c8:ca:b8:9a:af:00:fe:f8:19:
1c:00:a0:8f:d8:06:59:68:a1:bc:93:c3:e3:f4:fd:ca:bc:de:
ff:24:34:86:ba:28:46:7d:4a:1c:45:da:79:69:8a:e4:59:44:
8a:69:98:21:1e:bc:03:29:b7:64:94:ca:d0:d9:fc:72:53:04:
65:60:14:7c:21:f3:70:27:63:68:5a:a1:54:a4:58:99:8e:b4:
93:c0:9a:52:4b:be:a7:40:81:f9:4f:53:9e:aa:f8:c2:e7:30:
7f:01:e3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:04 2024 by rpki-client on console-ams.rpki-client.org