Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/ZVbf8lvOgyZQDoco2-7b6pz1WMo.roa
File: ZVbf8lvOgyZQDoco2-7b6pz1WMo.roa (raw, json)
Hash identifier: SVuLlDf02wBfCHi3l4QT/CUktmi2Jypg52w1Yg/Dys4=
Subject key identifier: 65:56:DF:F2:5B:CE:83:26:50:0E:87:28:DB:EE:DB:EA:9C:F5:58:CA
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018CC794D443ECF2DA6F9E6229289275F446
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/ZVbf8lvOgyZQDoco2-7b6pz1WMo.roa
Signing time: Tue 02 Jan 2024 00:31:08 +0000
ROA not before: Tue 02 Jan 2024 00:31:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 91.226.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Mar 2024 09:06:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:d4:43:ec:f2:da:6f:9e:62:29:28:92:75:f4:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 2 00:31:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6556dff25bce8326500e8728dbeedbea9cf558ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8c:f7:43:f7:bd:0e:7b:62:9f:11:8a:92:aa:
3e:fb:b2:3e:80:7c:f8:ba:80:78:ae:f7:16:8c:cb:
c2:59:d7:a7:08:e0:6d:d1:ee:0e:f2:96:7d:41:9d:
d6:9b:60:9b:10:5a:f8:9f:b8:92:d2:4f:7f:28:d1:
e4:d1:62:bc:80:d9:e0:ab:9b:77:48:e4:08:b4:79:
d6:d0:44:eb:67:d0:b4:76:10:41:de:7f:1f:db:87:
1a:c9:42:63:4b:94:e4:44:56:d6:10:dd:9f:d3:1b:
b7:aa:e7:89:7e:ae:84:6a:81:8b:f6:10:fe:92:8e:
dc:03:4a:a9:87:24:1c:ab:16:3f:76:15:05:1f:81:
ed:87:78:4b:03:20:8e:83:2b:c2:54:ef:66:31:09:
af:f8:b3:c6:78:07:47:46:ec:58:07:ce:d0:23:b3:
77:13:65:3f:77:ab:0d:f5:87:cd:8b:cf:61:32:36:
8b:45:30:3c:6e:08:bd:6e:d1:32:58:97:eb:c5:bb:
9d:d2:2d:7f:78:80:6d:05:c4:75:32:74:7b:e6:62:
f8:6e:b1:fc:61:11:58:7e:b5:d6:2f:f8:97:63:6d:
11:a6:3f:37:83:b3:29:de:b6:69:96:2e:9d:c2:15:
6f:37:84:e3:56:54:9c:2a:c6:79:b6:3a:e9:e3:58:
83:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:56:DF:F2:5B:CE:83:26:50:0E:87:28:DB:EE:DB:EA:9C:F5:58:CA
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/ZVbf8lvOgyZQDoco2-7b6pz1WMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.56.0/24
Signature Algorithm: sha256WithRSAEncryption
51:9f:d8:02:ff:54:24:b2:5e:b6:bc:f4:a7:6f:b5:76:f3:95:
2d:82:c7:7d:5b:e9:bf:e7:58:61:2f:49:dd:25:f1:75:cd:b9:
66:a5:49:fd:16:fb:cb:22:4d:45:7a:ff:8f:b4:3b:af:83:be:
1c:60:7b:39:3e:85:c6:04:2c:cc:87:df:bd:91:fc:d3:b0:03:
61:77:85:7e:c1:55:dc:bd:ed:69:02:51:82:9b:a9:3a:b4:ee:
69:8e:e3:3c:b5:ea:d1:ff:66:ec:3a:1c:86:11:c9:73:e5:d5:
3a:ea:a8:f2:2d:6c:8e:33:cf:0f:05:f1:e6:e6:b9:b3:95:1f:
57:ae:db:84:60:3e:b7:bd:04:6a:92:57:b9:55:86:0b:3b:92:
08:32:6a:a1:1f:e9:07:36:3e:c2:c3:e6:c5:14:79:6a:3f:20:
1d:de:fd:f4:98:b2:43:84:c6:b4:b7:10:7f:14:a5:18:e9:b4:
f9:7d:ce:b2:76:91:9a:bc:6b:5d:a9:90:d7:ee:9a:8e:78:a9:
03:ea:da:66:70:97:ff:70:ea:35:b8:26:45:e7:30:37:bb:af:
81:bb:52:04:a5:f3:96:67:7e:7e:7b:00:a6:7f:f2:2a:b4:df:
b5:ac:1c:ca:33:91:98:e3:3a:67:5e:a5:0f:8d:f9:66:6a:9e:
1f:9b:12:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:36 2024 by rpki-client on console-fra.rpki-client.org