Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/zh0g0F7n7QnMS3zkTIxRJ-gDmz4.roa
File: zh0g0F7n7QnMS3zkTIxRJ-gDmz4.roa (raw, json)
Hash identifier: R8lOs8lrqep4VdOY+b+bU0sEwMD3gWLQil2negxnQwk=
Subject key identifier: CE:1D:20:D0:5E:E7:ED:09:CC:4B:7C:E4:4C:8C:51:27:E8:03:9B:3E
Certificate issuer: /CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
Certificate serial: 0191DF94AE6CC0F259D902AD2114F9EEE5F3
Authority key identifier: BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/zh0g0F7n7QnMS3zkTIxRJ-gDmz4.roa
Signing time: Wed 11 Sep 2024 05:35:48 +0000
ROA not before: Wed 11 Sep 2024 05:35:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211521
IP address blocks: 96.9.145.0/24 maxlen: 24
2a0a:c743:1::/64 maxlen: 64
Validation: Failed, certificate revoked on Mon 16 Sep 2024 07:03:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:df:94:ae:6c:c0:f2:59:d9:02:ad:21:14:f9:ee:e5:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
Validity
Not Before: Sep 11 05:35:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce1d20d05ee7ed09cc4b7ce44c8c5127e8039b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:15:06:ed:53:0e:d4:2d:61:2f:9c:19:ef:09:
06:ab:1f:b6:67:ae:0c:2f:15:a3:ce:bb:cb:a8:ad:
38:a3:14:82:87:a3:0d:6a:2d:a1:8b:9b:62:52:cb:
b4:e5:10:8f:fb:3b:4b:12:10:57:55:0d:0b:63:3c:
43:23:a5:1c:98:7e:44:fb:de:62:19:3d:7b:8f:13:
68:35:cf:e2:43:43:58:82:65:45:0c:99:cb:ac:e5:
e3:30:3d:ad:4b:33:d1:ba:ae:35:12:01:cc:1b:5e:
07:04:63:d5:5d:ea:1d:81:02:93:e4:fd:a6:4e:0f:
96:0b:d5:a5:e1:9a:11:55:a2:75:90:22:ff:4c:5d:
43:d6:88:d7:ae:4b:20:31:9d:fb:58:7a:c6:1c:4d:
9c:7d:96:33:59:f5:cc:57:4e:d5:5d:0f:c1:7a:32:
59:5f:6c:5e:2d:53:37:34:dc:9b:2c:4f:d3:64:bf:
6e:ee:2d:09:f8:00:3c:35:38:6d:fd:a1:c5:41:9c:
a5:7c:93:54:05:67:82:c3:3b:31:84:32:fe:95:c9:
5b:d0:51:6a:dd:63:33:93:0c:45:68:e6:73:74:b0:
90:ab:78:01:60:3b:c0:08:f0:62:ad:c1:c7:5c:da:
13:8e:5a:ff:04:d4:20:19:fc:c2:b2:b1:ea:d4:34:
be:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:1D:20:D0:5E:E7:ED:09:CC:4B:7C:E4:4C:8C:51:27:E8:03:9B:3E
X509v3 Authority Key Identifier:
keyid:BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/zh0g0F7n7QnMS3zkTIxRJ-gDmz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.9.145.0/24
IPv6:
2a0a:c743:1::/64
Signature Algorithm: sha256WithRSAEncryption
0b:c8:33:b6:87:df:d2:39:fd:7b:35:ae:c7:c0:ee:7e:48:09:
1e:fa:c2:5e:ac:b1:f6:77:93:fa:40:08:e7:c0:c3:67:dd:72:
4b:5f:03:c3:b3:8d:4f:04:af:85:3f:5d:e2:01:c7:d7:5e:d2:
c6:49:9f:7b:0a:34:5a:e2:77:58:4d:d7:5a:58:45:33:74:94:
4a:a8:9c:e3:99:8c:1b:e4:68:52:7d:47:18:fb:c5:86:1f:8f:
bf:15:eb:0b:2d:b4:8a:a8:88:ce:99:f4:cb:c9:88:8d:23:d4:
9b:58:a9:78:cd:63:27:3d:ba:7a:4a:ba:5d:eb:ac:13:97:27:
85:bd:53:ff:e1:87:28:7e:4e:62:ad:c9:61:ef:e3:d4:44:fd:
20:c4:0e:ab:70:6d:43:70:6e:0a:43:45:f6:6e:5a:cf:8b:57:
05:66:f8:e9:bd:f1:72:52:bf:c6:ba:94:65:4e:9c:ae:05:66:
39:eb:4e:e1:72:1c:90:5f:43:10:55:d8:de:55:6a:19:ae:b1:
1f:7b:57:78:c1:83:3e:f4:91:57:12:4e:1c:d7:c5:85:52:cb:
f0:46:fe:b0:c7:2d:ba:49:42:4c:78:55:6b:a7:d1:79:d9:a3:
b9:47:f9:62:2b:54:cc:ff:6b:33:ae:93:24:e5:b2:cb:c3:70:
9f:07:15:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 09:12:51 2024 by rpki-client on console-fra.rpki-client.org