Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/Znpj7vSVZ1Tt_XUsE-zD4Ywh00g.roa
File: Znpj7vSVZ1Tt_XUsE-zD4Ywh00g.roa (raw, json)
Hash identifier: 72c+sECSIHmdCqCH9PiGWk2mgBKVEeZXcTUN0d2GRmI=
Subject key identifier: 66:7A:63:EE:F4:95:67:54:ED:FD:75:2C:13:EC:C3:E1:8C:21:D3:48
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 01856F42EEBDD411D7AB36F001A2984F72AA
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/Znpj7vSVZ1Tt_XUsE-zD4Ywh00g.roa
Signing time: Sun 01 Jan 2023 21:35:35 +0000
ROA not before: Sun 01 Jan 2023 21:35:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204834
IP address blocks: 92.242.201.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:ee:bd:d4:11:d7:ab:36:f0:01:a2:98:4f:72:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 21:35:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=667a63eef4956754edfd752c13ecc3e18c21d348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:58:dc:c3:fc:2a:f4:85:c9:3c:c3:c9:9e:63:
5d:53:13:93:94:ab:5b:24:eb:84:53:2e:db:2c:e1:
dd:06:02:c6:5e:d7:5f:a1:a8:84:ed:ee:9f:2c:45:
84:d5:5c:e1:b2:fc:ce:b2:11:bd:69:58:11:0a:2d:
3c:14:f6:9c:52:97:e0:69:73:17:53:17:09:61:b5:
bd:89:ba:be:d8:85:83:2b:c6:58:ca:f6:10:00:9d:
bb:82:1e:fe:58:8c:3a:3d:c3:c5:fd:e6:1a:31:6a:
14:5e:28:de:51:31:8b:50:a2:ef:79:bb:da:c6:7e:
02:bc:68:39:b0:23:53:f8:64:d6:86:4d:58:f3:be:
04:5a:67:9a:9d:d7:73:5b:0f:d7:6f:fb:11:8e:c4:
39:18:17:fa:84:ae:08:5b:ca:6f:24:3a:23:e3:1e:
46:1f:31:3d:93:2b:cd:23:f7:2a:1f:65:3f:39:d0:
17:63:23:9d:76:79:10:5e:48:1f:a5:1c:c3:b9:dd:
78:5d:3b:ca:00:06:ca:77:75:87:85:37:81:99:70:
d6:aa:a6:14:50:9a:e2:af:48:0b:eb:2b:31:72:08:
c8:16:29:15:45:19:4e:c8:71:15:ea:79:d4:9c:ae:
75:f9:c3:e3:f7:bc:1a:94:9d:7b:33:64:cc:67:16:
a9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:7A:63:EE:F4:95:67:54:ED:FD:75:2C:13:EC:C3:E1:8C:21:D3:48
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/Znpj7vSVZ1Tt_XUsE-zD4Ywh00g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.242.201.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:79:49:9c:a5:86:13:bd:2f:15:9e:8d:38:4d:96:ed:e1:b9:
f8:c0:a4:96:2c:99:07:74:e1:b3:a5:b6:ba:25:06:eb:86:02:
ad:a4:ae:c2:35:1e:07:58:6e:bc:98:e8:1f:69:b5:84:0b:a8:
1e:b3:c0:f1:36:fc:06:d8:07:31:7a:dc:d0:68:a3:f3:61:a5:
ca:b7:39:eb:45:b4:1a:17:7d:05:29:bc:3f:5f:d8:4d:56:14:
30:29:be:dc:35:ba:3f:0a:2d:38:38:49:6a:47:66:af:a6:bd:
df:94:d0:2b:85:a6:56:c4:c1:99:63:b7:fe:39:d7:7f:c7:b3:
00:0b:99:d1:24:84:9d:5c:2c:b3:5c:88:1e:3f:15:8c:e2:fa:
ac:24:c2:9b:5e:95:e8:2d:cb:30:4f:87:94:2c:5c:7b:37:bb:
56:83:73:e8:81:3c:7d:e8:a5:43:c5:ac:f7:8e:43:02:4f:56:
e7:fe:e3:08:ca:41:70:b3:c8:50:86:bb:cf:6e:a7:11:a9:87:
6a:f3:a7:ab:78:c2:62:9d:ab:b3:ed:e4:22:fe:1c:21:0b:cc:
84:7c:a7:e8:12:8f:ca:a0:93:78:00:ef:20:23:4c:6f:b1:98:
63:f4:45:af:d4:cd:af:cf:3c:be:1b:06:b6:e7:8c:3a:0c:92:
50:44:37:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:10:51 2024 by rpki-client on console-ams.rpki-client.org