Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/ZXEYTE7HuzO_4sP8wtBIQHONXpk.roa
File: ZXEYTE7HuzO_4sP8wtBIQHONXpk.roa (raw, json)
Hash identifier: kT6AMFIFz6fipJzAv4xM3lGBHy8Wdrz5phBSIYZESE0=
Subject key identifier: 65:71:18:4C:4E:C7:BB:33:BF:E2:C3:FC:C2:D0:48:40:73:8D:5E:99
Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Certificate serial: 0186CBC50F5374BE139FBC94809F56662DD5
Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/ZXEYTE7HuzO_4sP8wtBIQHONXpk.roa
Signing time: Fri 10 Mar 2023 13:45:34 +0000
ROA not before: Fri 10 Mar 2023 13:45:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 213.253.215.0/24 maxlen: 24
195.184.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 09 Jul 2023 16:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cb:c5:0f:53:74:be:13:9f:bc:94:80:9f:56:66:2d:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Validity
Not Before: Mar 10 13:45:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6571184c4ec7bb33bfe2c3fcc2d04840738d5e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8a:29:62:4b:93:13:2c:6d:79:91:af:98:a7:
d2:c7:1d:2c:16:85:59:31:e0:12:04:1c:e3:30:68:
69:49:85:df:c6:bd:e6:a2:bb:5b:0c:8f:80:be:fc:
ed:99:69:30:28:53:45:ce:d4:f9:09:74:5f:3a:80:
3b:60:d1:da:5d:72:06:d6:5a:68:22:5f:bd:0d:b0:
c2:10:f6:46:85:dc:c9:18:9a:48:ba:c5:35:5f:fb:
39:b2:8e:a7:3a:43:39:34:fa:42:5b:79:7d:a8:a9:
f2:18:a5:5a:29:76:9a:6a:81:1d:60:1a:0b:a0:6f:
fb:2b:fa:77:dd:31:03:e9:70:dc:4d:13:85:39:1e:
33:13:2e:7a:d5:09:81:57:3f:6e:ae:76:52:b6:f7:
1d:35:ac:8c:6d:e0:29:1a:3f:c9:4d:81:f1:50:b5:
e3:73:5d:c7:e1:57:79:5a:6b:29:07:ca:6e:64:90:
89:4a:41:2c:28:86:35:10:56:e5:fa:95:b1:3e:be:
45:b4:3e:66:f1:a7:a1:0c:44:3e:b3:9c:3b:b7:75:
90:aa:e2:43:ef:41:9d:7d:ba:50:87:c9:f4:dd:d3:
35:63:87:ac:dc:ac:fb:7c:9d:69:35:70:3f:a8:bc:
89:90:03:c1:41:e7:20:96:5c:55:bd:2c:d2:c4:40:
a5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:71:18:4C:4E:C7:BB:33:BF:E2:C3:FC:C2:D0:48:40:73:8D:5E:99
X509v3 Authority Key Identifier:
keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/ZXEYTE7HuzO_4sP8wtBIQHONXpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.184.27.0/24
213.253.215.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:ad:d2:bd:f1:95:e7:2c:14:5e:38:60:6d:f6:cf:0a:32:21:
51:a5:ea:24:0e:52:33:74:14:7e:f4:74:8c:14:d2:f3:1c:cf:
90:1e:76:1c:5f:22:4a:90:78:0e:88:dd:88:bc:f0:4d:8e:36:
99:4b:c3:34:1b:22:40:c9:19:c6:ac:77:fe:57:8f:41:3c:09:
5e:56:2a:a4:25:d4:b7:82:11:b2:be:c9:e0:a8:f6:1e:9b:01:
71:57:2f:bc:aa:a0:89:e7:1e:f7:b8:a5:36:2a:39:0d:57:0b:
11:b4:f7:63:16:43:bf:b7:46:fe:66:a2:bf:05:0e:ea:76:ad:
8b:f0:af:a0:ac:91:71:90:bb:62:2a:b9:5a:8d:56:ae:fe:80:
7d:c4:10:7f:75:b8:94:f3:9a:ca:3d:56:aa:af:3c:33:2d:c6:
2f:61:52:96:bb:99:9b:af:71:da:aa:01:64:55:94:46:ea:49:
23:46:f7:db:c5:28:2f:77:74:80:d9:3e:1f:1b:96:6e:f2:98:
ce:68:f0:66:f0:9f:b2:2a:2c:d8:d5:41:88:02:47:52:6b:17:
f0:56:53:84:b8:2c:d5:18:46:72:9e:3d:48:50:9e:55:80:11:
5e:8a:ad:f3:7f:fe:ef:d5:25:f6:e5:43:40:e0:1f:65:ff:92:
ae:17:a4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:16 2024 by rpki-client on console-ams.rpki-client.org