Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/zsjg7fKV2fobj6ma3VUpa2Gfotg.roa
File: zsjg7fKV2fobj6ma3VUpa2Gfotg.roa (raw, json)
Hash identifier: EcM+047C823aBBN34BcCk0ymx/EFb5WTO04TQ9uGDAM=
Subject key identifier: CE:C8:E0:ED:F2:95:D9:FA:1B:8F:A9:9A:DD:55:29:6B:61:9F:A2:D8
Certificate issuer: /CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52
Certificate serial: 01887E42E097C5E012C85DA435F61CECE9F4
Authority key identifier: DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/zsjg7fKV2fobj6ma3VUpa2Gfotg.roa
Signing time: Fri 02 Jun 2023 22:38:12 +0000
ROA not before: Fri 02 Jun 2023 22:38:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9121
IP address blocks: 194.15.103.0/24 maxlen: 24
194.15.100.0/24 maxlen: 24
194.15.101.0/24 maxlen: 24
194.15.102.0/24 maxlen: 24
92.243.85.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7e:42:e0:97:c5:e0:12:c8:5d:a4:35:f6:1c:ec:e9:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52
Validity
Not Before: Jun 2 22:38:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cec8e0edf295d9fa1b8fa99add55296b619fa2d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:88:d5:1b:8e:0d:08:38:e5:65:20:16:59:98:
a9:13:06:2c:ba:7e:64:8d:30:13:be:b4:89:89:85:
1e:bd:bd:6a:14:df:19:a6:2a:e4:39:65:34:43:ea:
3b:6f:f0:fd:f6:50:81:68:92:c3:b9:64:22:e4:57:
9a:49:51:cd:95:48:47:84:58:7c:6f:35:31:9d:b1:
d4:16:99:d5:26:58:13:1a:55:73:74:87:ae:d9:36:
c1:85:1c:ab:07:bd:14:ce:9d:72:bd:b6:ee:82:ba:
7b:b9:24:56:fc:f9:67:fa:13:cc:04:e7:de:2f:df:
8a:bb:5b:b1:46:ae:77:87:63:eb:dd:cd:0e:d9:e8:
f6:84:3f:b3:e3:f5:67:55:d3:47:f9:12:38:a7:d1:
f0:27:fb:35:35:b2:67:f0:05:70:31:6a:ae:30:92:
a0:bd:49:18:33:bf:b6:5f:a6:83:47:d7:b2:ca:47:
df:01:90:73:f2:be:12:af:04:c8:66:b5:c0:ab:2c:
a2:59:c8:47:cb:0b:dd:07:fb:5b:12:f5:2f:e1:a0:
68:5c:de:39:9e:62:e5:a5:7e:a5:57:c4:78:1d:8a:
2f:1d:6f:ab:83:c9:f3:7c:78:02:bc:cc:8f:25:ac:
15:b0:da:d2:1b:60:f5:5d:27:62:da:75:31:98:58:
b9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C8:E0:ED:F2:95:D9:FA:1B:8F:A9:9A:DD:55:29:6B:61:9F:A2:D8
X509v3 Authority Key Identifier:
keyid:DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/zsjg7fKV2fobj6ma3VUpa2Gfotg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.243.85.0/24
194.15.100.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:8e:68:43:16:d8:88:f0:92:ec:ef:22:5e:4c:00:95:b0:85:
7d:c6:82:89:16:25:42:2d:d8:57:c0:91:88:a5:89:98:98:4a:
65:f8:cd:39:59:d3:12:4a:a6:1b:3e:2c:c0:cc:10:44:2b:ff:
d4:d4:77:e1:ed:23:9c:71:2b:db:c6:c0:e3:83:43:cf:f5:d9:
7c:79:18:da:31:18:66:e6:31:de:1d:c9:f5:46:82:a1:68:76:
4d:f4:ff:a2:a6:6f:9b:66:89:4e:2d:43:d1:2a:e4:cc:db:9d:
a7:59:88:96:93:7e:7e:e1:4e:1a:be:04:3b:74:65:96:76:ba:
34:34:d5:e5:66:0d:19:e9:f5:a1:4b:2b:52:dd:98:b3:a7:63:
dd:03:e3:96:f4:ea:b6:fd:03:cb:82:b6:89:fa:0c:8e:21:70:
48:14:0b:bc:5f:53:54:ab:15:73:55:58:08:85:84:6f:51:42:
fd:e2:79:c3:1d:57:13:8b:46:6d:e6:57:a2:33:aa:3d:40:a4:
3b:4f:68:ee:a7:5b:82:05:11:9a:f7:13:b5:28:ef:72:05:26:
22:40:0d:ee:e7:a2:a4:3f:b4:8b:64:8d:a3:ca:9f:ce:c4:c9:
d9:af:c6:de:98:30:79:be:6a:38:80:ff:43:d2:17:6c:f8:6a:
b1:a4:a1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:10 2024 by rpki-client on console-fra.rpki-client.org