Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/ZsarPjZe17Z5LsjslaM9EO06s8Y.roa
File: ZsarPjZe17Z5LsjslaM9EO06s8Y.roa (raw, json)
Hash identifier: /KpRtdyiV60w9GolJNm4xdljQx7kFIufVUGwtytHwL8=
Subject key identifier: 66:C6:AB:3E:36:5E:D7:B6:79:2E:C8:EC:95:A3:3D:10:ED:3A:B3:C6
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 018573038CEF0E56D8CBED055A43F548A692
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/ZsarPjZe17Z5LsjslaM9EO06s8Y.roa
Signing time: Mon 02 Jan 2023 15:04:49 +0000
ROA not before: Mon 02 Jan 2023 15:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 77.74.230.0/24 maxlen: 24
109.105.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:03:8c:ef:0e:56:d8:cb:ed:05:5a:43:f5:48:a6:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Jan 2 15:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66c6ab3e365ed7b6792ec8ec95a33d10ed3ab3c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:9f:33:a9:50:e9:e9:dd:c6:8c:bb:49:64:14:
7c:ed:a2:f5:24:77:8b:b0:3b:44:32:eb:46:f9:26:
31:8b:a6:f3:5f:f0:1f:ef:35:38:7f:d1:ce:90:4b:
25:88:c7:34:43:1e:9f:ab:d0:3b:af:69:75:06:e7:
64:07:05:f6:ab:83:0e:84:72:a9:6f:13:58:27:67:
aa:b3:c3:46:51:0c:fc:0b:20:6b:67:cd:31:a0:f6:
a5:56:11:b5:da:57:90:ca:26:e7:53:31:3e:fb:1a:
31:92:f7:0d:82:88:49:34:23:19:76:42:ad:6b:b2:
d7:5b:ae:e0:ce:50:a4:93:64:ab:e0:b6:46:23:fe:
a1:15:c3:bf:2e:ae:63:09:f4:81:e0:9a:6b:93:71:
fc:f6:30:cb:17:78:54:f1:f4:36:73:10:8c:b3:43:
26:cd:cb:90:be:f3:58:03:43:c3:d4:e5:d8:61:43:
b3:38:4b:26:97:03:70:2c:db:c2:bf:a9:12:94:b5:
94:8d:b0:09:54:37:31:f0:e8:7b:81:8e:1d:18:04:
de:6c:54:91:17:46:33:8d:4d:cf:60:08:c5:82:18:
58:a8:90:74:cf:c4:5e:e7:01:c8:59:f5:0c:c1:29:
9b:eb:ea:7f:b0:f4:bc:ec:b4:95:7c:7b:fc:93:19:
75:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C6:AB:3E:36:5E:D7:B6:79:2E:C8:EC:95:A3:3D:10:ED:3A:B3:C6
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/ZsarPjZe17Z5LsjslaM9EO06s8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.230.0/24
109.105.195.0/24
Signature Algorithm: sha256WithRSAEncryption
16:08:d4:39:90:b5:43:76:9c:91:76:45:37:e4:71:82:96:23:
6e:b4:c4:0c:86:1c:7d:67:17:27:ed:6b:c4:8b:e5:fc:db:bf:
9f:eb:85:64:4e:b4:94:32:8c:4d:79:76:ad:93:81:15:49:6c:
ab:b7:d0:eb:6e:bc:de:a4:4e:cd:bf:e7:b6:97:29:63:ae:59:
ad:bd:70:65:10:d4:99:6e:ba:74:d2:5e:cc:e0:44:a8:ad:24:
b1:91:ff:d4:1f:34:96:f0:73:90:79:5d:34:b7:56:3f:70:2d:
ac:4b:9a:d3:95:9b:bd:22:d6:d0:d6:fb:46:c8:b2:56:45:8c:
93:6f:86:e8:9b:b1:04:94:6c:9b:ca:c1:be:9f:3f:68:0e:3e:
d4:60:02:a6:1c:2d:58:c3:45:6c:91:6e:e2:79:c0:f9:00:46:
b6:ec:c6:27:11:06:dd:cf:93:15:67:85:b0:74:1a:e9:97:bf:
99:2b:96:15:50:31:27:99:cd:9d:55:03:32:5c:41:d3:31:1b:
28:e8:03:0a:af:a7:2d:28:71:c7:70:de:f9:97:29:ed:43:a8:
87:52:4f:20:5a:7a:ba:e8:96:03:1e:23:9f:58:cc:f8:71:3c:
1e:fe:71:6d:98:80:f3:30:a3:60:da:bb:4d:96:04:0d:47:2e:
ca:10:9c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:36 2024 by rpki-client on console-fra.rpki-client.org