Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Z1pNrhSYyhuou9SsWPgxlTsj6Bw.roa
File: Z1pNrhSYyhuou9SsWPgxlTsj6Bw.roa (raw, json)
Hash identifier: j9iyrnL8cy6fgSLyme5vxsLvfm7QQUN8Q5Xmf+29p+U=
Subject key identifier: 67:5A:4D:AE:14:98:CA:1B:A8:BB:D4:AC:58:F8:31:95:3B:23:E8:1C
Certificate issuer: /CN=51aedc576bdf5600bfe4c4790385facedc46f034
Certificate serial: 01856B49FCE6826A9742F5036DC3F8B072A6
Authority key identifier: 51:AE:DC:57:6B:DF:56:00:BF:E4:C4:79:03:85:FA:CE:DC:46:F0:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Z1pNrhSYyhuou9SsWPgxlTsj6Bw.roa
Signing time: Sun 01 Jan 2023 03:04:49 +0000
ROA not before: Sun 01 Jan 2023 03:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29353
IP address blocks: 194.13.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:49:fc:e6:82:6a:97:42:f5:03:6d:c3:f8:b0:72:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51aedc576bdf5600bfe4c4790385facedc46f034
Validity
Not Before: Jan 1 03:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=675a4dae1498ca1ba8bbd4ac58f831953b23e81c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:28:cd:88:49:d6:c3:f6:36:cb:c4:6d:e0:3e:
0f:23:a1:a5:80:28:31:b2:5a:f9:50:78:a5:ca:ae:
05:a3:28:46:e1:39:e0:82:4c:6b:8f:04:7d:e5:04:
70:80:a5:de:34:16:90:b9:c7:08:2e:d4:7a:8b:c2:
67:b9:c1:a3:0d:96:1d:2f:9a:c2:d3:0a:81:bb:6c:
ef:45:5a:89:81:d8:b7:ca:94:b0:4c:f7:b6:18:86:
90:8d:39:18:0f:58:fc:d2:ff:13:1e:98:3e:c5:fa:
4c:f2:3f:48:56:9c:f8:c0:75:03:94:5f:c9:9c:95:
55:92:d8:de:17:c3:c4:b9:7e:17:8a:cc:fb:b2:ee:
95:98:d5:48:3f:1a:29:f7:98:b7:05:39:74:ba:de:
b3:69:7b:ab:1d:e3:15:b3:4d:da:27:32:8f:61:c4:
22:05:69:a7:c0:f3:f5:fc:c6:e3:f4:03:3c:68:af:
e5:35:44:64:6f:f0:d7:f6:d3:63:9d:f0:63:9c:0f:
0b:95:d9:3a:69:12:d8:8d:11:13:bc:92:e0:0f:c2:
14:2e:04:b0:ab:ff:06:9b:d6:44:52:5d:66:f3:a6:
76:6e:45:e7:2b:97:ce:88:57:2b:02:23:6e:32:f5:
98:2f:3e:7b:2d:f2:0f:20:33:cb:52:57:3a:d4:1b:
2d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:5A:4D:AE:14:98:CA:1B:A8:BB:D4:AC:58:F8:31:95:3B:23:E8:1C
X509v3 Authority Key Identifier:
keyid:51:AE:DC:57:6B:DF:56:00:BF:E4:C4:79:03:85:FA:CE:DC:46:F0:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Z1pNrhSYyhuou9SsWPgxlTsj6Bw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.13.111.0/24
Signature Algorithm: sha256WithRSAEncryption
23:ce:7e:ee:d9:22:4d:47:42:dc:ab:98:ad:8c:7a:0c:14:41:
90:12:8d:1c:6b:98:cc:fc:a4:f5:16:b2:c6:fa:04:b9:a2:f9:
50:b6:1c:88:07:0e:9e:24:5a:2f:b7:76:30:21:01:05:1b:79:
6d:c6:e4:3a:6e:19:da:ea:74:b2:36:ec:b4:3b:0e:20:ef:0f:
3e:a8:41:3c:bb:ab:be:ac:23:6c:21:eb:1f:02:b1:09:25:06:
69:e7:a6:0c:30:42:73:61:68:3f:72:74:ed:6a:8c:b0:12:35:
d0:e1:19:f4:69:90:bb:fd:45:06:b2:22:e8:1f:20:86:d3:14:
40:85:54:c5:b3:02:b6:cf:1d:a9:58:47:a6:d0:7e:83:6c:12:
45:89:6e:3e:9a:3f:9b:4b:23:95:20:3e:62:76:27:e1:2e:6b:
dc:18:49:5f:24:44:af:4a:b3:4d:6c:0a:e2:24:11:eb:44:66:
d4:8b:e8:6d:47:e4:45:7a:eb:ca:71:63:6d:f2:6d:78:82:2c:
56:b1:70:10:af:59:9e:95:2a:01:4d:56:7a:7f:af:81:20:a1:
9f:d2:72:8e:3d:9f:99:19:1e:63:90:02:ad:32:ac:8d:09:8b:
ed:27:eb:ed:47:6a:cb:0a:54:ae:05:b8:c1:22:96:ac:89:4d:
ef:74:ff:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:03 2024 by rpki-client on console-fra.rpki-client.org