Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/ZatEfHoifFYwdqLBN5QuR4ov2Dw.roa
File: ZatEfHoifFYwdqLBN5QuR4ov2Dw.roa (raw, json)
Hash identifier: 8PgxR6c4+t6W9EjtJnaQQgfYZ+7D6lyzIC/SRDXX1h0=
Subject key identifier: 65:AB:44:7C:7A:22:7C:56:30:76:A2:C1:37:94:2E:47:8A:2F:D8:3C
Certificate issuer: /CN=039831f7ba3de2fbef16d4649fd4860c15e9d6c3
Certificate serial: 018CC3B682DFDF5B1506D0CE45778660E04D
Authority key identifier: 03:98:31:F7:BA:3D:E2:FB:EF:16:D4:64:9F:D4:86:0C:15:E9:D6:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/ZatEfHoifFYwdqLBN5QuR4ov2Dw.roa
Signing time: Mon 01 Jan 2024 06:29:27 +0000
ROA not before: Mon 01 Jan 2024 06:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211403
IP address blocks: 213.110.230.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Mar 2024 06:38:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:82:df:df:5b:15:06:d0:ce:45:77:86:60:e0:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=039831f7ba3de2fbef16d4649fd4860c15e9d6c3
Validity
Not Before: Jan 1 06:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65ab447c7a227c563076a2c137942e478a2fd83c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:eb:76:a6:82:18:c3:a3:96:a6:99:97:91:18:
3c:ca:8b:4a:4b:41:e0:64:e3:85:af:1b:b5:d9:c0:
3f:1a:82:56:06:17:58:77:6f:1d:0b:89:97:92:5c:
5a:b0:65:d4:85:6a:af:3a:0f:f9:b8:09:04:a4:e3:
59:8b:42:4e:00:0f:2d:e9:03:82:e9:98:c3:3b:fd:
09:9a:69:b1:3e:f6:5b:7a:e1:77:86:73:a8:72:d2:
f3:f6:1b:f7:a7:81:49:1a:d1:af:6e:4e:60:46:43:
b5:03:ff:6f:40:18:1b:ff:d1:73:6c:1b:da:a5:20:
77:f4:1b:3e:69:ef:b0:48:c2:6f:95:39:25:32:0d:
a3:68:80:c8:ff:33:5c:b3:b2:c6:0c:a0:f6:5a:a1:
85:c9:a1:25:70:bd:69:d8:71:43:03:ef:b7:25:9e:
74:b8:0c:1e:f0:10:25:81:e7:ab:0c:46:c4:e2:59:
f8:60:70:bd:44:12:4d:11:90:33:c9:c9:50:74:f5:
c1:15:d9:3c:6e:33:40:78:d8:24:ce:9b:04:1d:2e:
5f:9d:f3:93:ed:3c:c4:93:66:fe:ab:8c:59:3b:cb:
6f:d3:e9:ef:49:cf:77:28:fa:99:ee:3b:7a:cb:d7:
dc:c5:31:2c:53:1f:e2:e6:5d:51:19:d4:ba:40:e2:
18:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:AB:44:7C:7A:22:7C:56:30:76:A2:C1:37:94:2E:47:8A:2F:D8:3C
X509v3 Authority Key Identifier:
keyid:03:98:31:F7:BA:3D:E2:FB:EF:16:D4:64:9F:D4:86:0C:15:E9:D6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/ZatEfHoifFYwdqLBN5QuR4ov2Dw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.110.230.0/23
Signature Algorithm: sha256WithRSAEncryption
25:68:cd:30:29:84:45:52:dc:52:50:f6:9c:95:48:df:dc:28:
31:2a:00:a7:fe:73:e3:d0:5b:ef:19:8a:b1:7b:cf:b3:19:51:
a2:df:43:bb:c0:28:83:04:b6:36:b2:be:61:48:2e:d1:e3:81:
e4:23:55:90:25:68:13:7a:a2:56:e1:22:22:a9:0e:a6:d4:10:
45:26:1f:a5:e0:c8:0b:ac:bc:91:0f:df:04:8a:15:2b:43:c4:
71:90:12:fe:53:a1:f0:31:7a:e9:a8:23:bd:fb:8d:29:6c:14:
f5:29:d1:4a:ae:3b:d1:e0:65:44:52:07:e8:e2:68:c9:6e:44:
28:48:e6:22:dc:ce:10:fc:57:3c:85:20:ee:cb:66:1f:d6:e9:
bc:69:27:0c:43:ca:5d:1e:e8:ce:17:99:53:1b:c2:9a:dc:94:
28:0c:12:eb:6f:ab:ce:1e:81:65:90:b2:2e:b5:bc:fa:42:a7:
3a:47:6f:c8:b3:72:82:ee:d9:97:93:0f:96:26:76:73:2d:ce:
b3:4c:51:10:1c:02:bc:8b:4d:c1:88:ad:c1:08:fa:db:e8:d7:
98:77:9f:18:39:41:23:b6:fc:a1:14:e8:fa:66:4e:e3:e5:41:
f5:fd:35:1f:a9:be:88:1d:4d:23:b3:af:f3:8f:d3:b1:3e:8b:
64:23:2b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:21 2024 by rpki-client on console-fra.rpki-client.org