Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/ZEcMRk9gXWm25RJeOIjRMlbzcKY.roa
File: ZEcMRk9gXWm25RJeOIjRMlbzcKY.roa (raw, json)
Hash identifier: sEnk7jZv1o5UPt6Q1TqpYxt4pDT6ILpP1eQYZT/I3AI=
Subject key identifier: 64:47:0C:46:4F:60:5D:69:B6:E5:12:5E:38:88:D1:32:56:F3:70:A6
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 018B809871C1CC53452FF32AD2F9CB5B562F
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/ZEcMRk9gXWm25RJeOIjRMlbzcKY.roa
Signing time: Mon 30 Oct 2023 12:39:16 +0000
ROA not before: Mon 30 Oct 2023 12:39:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210512
IP address blocks: 193.3.177.0/24 maxlen: 24
45.130.68.0/22 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:80:98:71:c1:cc:53:45:2f:f3:2a:d2:f9:cb:5b:56:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Oct 30 12:39:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64470c464f605d69b6e5125e3888d13256f370a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e1:89:cc:71:d1:c8:ff:df:b9:3c:44:e2:53:
40:48:50:f5:09:71:f2:0c:5a:6b:92:6d:e0:0b:52:
5b:a0:7f:ed:b5:6d:ac:90:ce:89:ef:89:15:29:cd:
7e:9a:16:20:ad:e1:6b:55:e3:93:ff:38:59:d3:4f:
56:8d:48:e8:56:36:9d:6e:cd:22:29:af:a7:cc:33:
42:b4:cc:49:a1:ce:b2:e5:68:cc:97:03:61:7d:24:
02:3a:05:c0:e6:ab:80:66:ff:94:56:4e:bb:fe:ea:
4f:b1:b8:68:6e:49:63:4b:28:4a:60:52:5e:1a:61:
58:b8:62:92:22:12:d7:bd:8a:c9:f4:75:03:e9:97:
4d:f9:03:5d:d3:59:c1:29:aa:54:cf:08:0d:8d:7c:
8e:c5:3f:d1:08:28:a4:40:b8:0e:b8:df:66:c5:d1:
03:1f:a1:c3:e6:e5:4a:ae:2f:20:21:b1:bb:df:f4:
21:d5:0c:c4:b8:a6:91:96:61:f1:d6:44:68:56:8b:
cf:7c:21:e2:f2:61:3b:92:b4:8a:bc:d1:95:5f:46:
59:e4:a1:58:7c:ec:0e:42:54:74:47:94:fd:6c:8b:
1f:a5:83:62:53:ca:f2:e9:ac:3a:46:af:ee:a7:ff:
c8:12:b6:fa:e8:15:8f:d7:10:6d:ab:3c:18:8d:bc:
98:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:47:0C:46:4F:60:5D:69:B6:E5:12:5E:38:88:D1:32:56:F3:70:A6
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/ZEcMRk9gXWm25RJeOIjRMlbzcKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.68.0/22
193.3.177.0/24
Signature Algorithm: sha256WithRSAEncryption
78:7d:b4:b8:dd:f4:ed:0d:bb:fb:54:4e:63:f7:db:f9:78:40:
73:98:8e:06:7e:ad:f1:85:bb:a7:72:70:ae:f6:84:8b:8c:47:
29:7b:a4:29:a4:7c:01:db:a0:7d:d8:8a:9a:98:1f:3e:a5:46:
20:e7:44:ad:84:b7:a5:0f:1e:b3:3c:17:b1:b7:44:27:32:79:
88:31:b4:12:72:c8:61:26:0f:1d:e8:23:12:e7:7e:39:d0:1d:
69:10:23:65:f4:99:77:56:14:19:89:89:59:79:cf:49:c8:62:
5f:2f:ed:5d:dc:fa:6c:1b:54:88:de:1d:8b:f1:9c:1e:51:19:
f4:e5:02:b0:f2:47:3b:10:fe:8e:b5:75:ac:6d:36:e6:1a:00:
28:3f:b7:4d:86:5c:e7:e2:4b:73:ab:d9:1e:d6:12:ac:56:be:
d0:b7:76:77:cc:26:ee:25:f1:71:5e:81:10:24:e6:4c:54:79:
9d:33:dc:e6:56:e0:c5:45:12:4e:da:ec:b8:fa:e1:f4:2f:bc:
94:46:61:e5:d6:29:54:13:9f:f6:1d:50:24:84:be:3b:21:5e:
61:a9:99:6e:91:98:83:27:08:07:ca:c9:77:5e:e9:2d:c7:b9:
59:07:af:85:4e:2d:68:19:03:cd:1d:38:5c:37:80:91:58:9f:
f9:67:db:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 15 09:33:51 2023 by rpki-client on console-ams.rpki-client.org