Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/ZcZeH8gFlrpg0jceYtZEqJY5JXo.roa
File: ZcZeH8gFlrpg0jceYtZEqJY5JXo.roa (raw, json)
Hash identifier: bHBTghjARju3aX/K5530h7WSETaGEGefhmQUpuqDpCo=
Subject key identifier: 65:C6:5E:1F:C8:05:96:BA:60:D2:37:1E:62:D6:44:A8:96:39:25:7A
Certificate issuer: /CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Certificate serial: 0189D56C9C90816BAC988093C1DAC26C0938
Authority key identifier: 62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/ZcZeH8gFlrpg0jceYtZEqJY5JXo.roa
Signing time: Tue 08 Aug 2023 13:53:32 +0000
ROA not before: Tue 08 Aug 2023 13:53:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43519
IP address blocks: 213.248.254.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d5:6c:9c:90:81:6b:ac:98:80:93:c1:da:c2:6c:09:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Validity
Not Before: Aug 8 13:53:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65c65e1fc80596ba60d2371e62d644a89639257a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7a:13:d6:5f:14:04:ff:58:1a:d4:09:94:09:
5e:30:4f:88:9f:51:38:db:28:1d:ae:99:0c:b1:fa:
16:23:ad:75:75:c7:0a:be:df:bf:97:ca:61:4d:2e:
74:2b:71:81:5a:e2:10:f1:9d:19:5e:73:82:f4:ec:
66:b6:3a:39:9d:51:bf:db:5a:b4:cf:bc:74:2b:16:
51:ca:de:e0:d0:36:a5:ef:66:a2:a4:2e:30:0f:7c:
73:19:e8:3d:af:fd:ba:c9:f4:31:52:af:89:3f:e0:
9e:1f:0b:6e:90:f3:26:d6:80:7e:b2:b9:7d:bd:fd:
60:f9:27:05:13:f9:3e:b0:e0:f1:82:33:b8:c9:e1:
54:03:2f:8e:c2:43:cb:da:d4:85:94:8d:8d:28:29:
1c:8a:9a:51:04:c9:8e:43:f8:11:26:37:04:b0:8e:
03:e7:f0:b3:ae:9e:da:e4:1e:b7:96:5b:87:4f:15:
9f:b1:ef:df:e3:96:db:23:a4:c2:05:4b:21:9f:2c:
f0:7c:7a:19:76:bd:73:82:5c:4d:7a:6d:f7:2b:76:
eb:d8:df:e0:a5:8e:e2:90:7a:0e:6b:45:9e:5f:b4:
83:50:c4:45:36:09:f2:7c:d1:3d:f6:85:92:47:41:
f0:e9:21:57:47:5e:8d:9b:c9:b8:ad:59:0f:f7:ed:
45:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C6:5E:1F:C8:05:96:BA:60:D2:37:1E:62:D6:44:A8:96:39:25:7A
X509v3 Authority Key Identifier:
keyid:62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/ZcZeH8gFlrpg0jceYtZEqJY5JXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.248.254.0/24
Signature Algorithm: sha256WithRSAEncryption
34:42:fc:af:8f:ae:b1:90:80:1d:d9:63:6b:87:29:b8:c5:ec:
91:df:6c:c5:92:32:0d:f8:63:cb:35:c8:73:1a:ee:48:22:e4:
9e:c2:a0:58:b3:b9:bf:f8:7d:b1:79:f4:41:4b:09:32:32:79:
5f:34:d2:b5:10:26:c7:81:d5:78:68:03:d8:f6:9b:e4:53:40:
4f:bd:1b:82:a2:ee:9a:16:b6:90:c2:3f:aa:44:a6:12:b8:3e:
38:88:26:50:32:a7:be:53:e6:de:c3:54:bd:cd:1d:ab:a8:08:
39:2b:d1:13:07:4d:d2:ee:0d:c3:79:aa:3b:88:3c:9f:e1:e9:
65:67:d1:a4:09:58:2f:38:8c:0d:2d:81:82:43:4a:2c:29:c0:
38:59:ac:c6:e1:65:fc:7e:3a:21:db:80:7e:41:c2:26:56:c8:
8e:a8:9d:cd:61:2e:26:bb:e9:e1:13:84:e1:11:b0:ca:a0:04:
2b:6e:9b:16:61:77:53:9d:0b:c3:01:3a:42:19:80:53:2f:51:
6c:23:68:9c:7f:e5:f2:a4:fc:70:a6:4f:73:ca:09:b2:9c:4d:
b3:24:ca:4f:24:45:84:b0:6e:96:12:24:7c:3e:76:31:5a:29:
c2:91:76:ae:86:f2:5b:6c:84:12:81:c9:f6:e3:82:b2:75:78:
8e:9c:a0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 19 12:40:47 2023 by rpki-client on console-ams.rpki-client.org