Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/znx7E1Ph8lAucGVHysL4wzdUszg.roa
File: znx7E1Ph8lAucGVHysL4wzdUszg.roa (raw, json)
Hash identifier: 1ziT4mM+ne2mjXzNQLvxGwg9c936bpWlS0IHY6onpBM=
Subject key identifier: CE:7C:7B:13:53:E1:F2:50:2E:70:65:47:CA:C2:F8:C3:37:54:B3:38
Certificate issuer: /CN=340bea3fcc3cbcedc82919cf57c74108baea369e
Certificate serial: 01888F74BACA591051F85C3BA93EC83B3D65
Authority key identifier: 34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/znx7E1Ph8lAucGVHysL4wzdUszg.roa
Signing time: Tue 06 Jun 2023 06:46:11 +0000
ROA not before: Tue 06 Jun 2023 06:46:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 133757
IP address blocks: 185.100.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8f:74:ba:ca:59:10:51:f8:5c:3b:a9:3e:c8:3b:3d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340bea3fcc3cbcedc82919cf57c74108baea369e
Validity
Not Before: Jun 6 06:46:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce7c7b1353e1f2502e706547cac2f8c33754b338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d1:20:a0:92:42:a2:5b:1c:c2:49:21:3a:4c:
8f:32:ac:b9:18:41:32:7d:f5:4d:fe:7a:ac:e3:ba:
4d:c5:8c:18:bb:ce:5b:02:35:10:63:29:c3:80:ea:
c8:8c:43:af:90:d9:5b:b3:5f:7f:ab:7c:dc:4f:b3:
3a:8f:b3:63:9a:ab:2b:15:6f:87:90:95:76:e3:ff:
28:0d:59:bc:1a:00:b3:49:53:4e:99:a7:db:dd:82:
72:ba:c0:da:f0:bc:b2:72:1d:7d:7a:e3:9a:bf:3e:
59:16:a8:ac:f0:f6:bf:95:12:c4:16:0c:14:ee:75:
a9:61:1e:e1:e8:55:4d:7d:1e:3d:b4:9f:e5:f6:8a:
c8:ef:48:f7:08:25:b5:1d:19:e4:c5:19:35:43:08:
10:fc:d2:1f:a1:59:8e:cb:5b:6a:18:37:77:89:a9:
9a:cf:53:10:62:04:e7:b2:a9:b3:38:4c:f1:54:af:
3f:13:47:c5:c0:87:1f:40:b3:2a:76:d4:12:ff:66:
fa:0d:80:f8:fc:47:12:46:35:45:0c:c4:7b:0d:8b:
12:3a:f8:c8:ea:41:03:ca:19:68:c8:5b:3a:6b:2d:
39:66:d5:67:12:db:f4:a4:90:5d:73:06:4e:72:a6:
22:7a:30:85:54:aa:bb:f6:f5:18:b2:48:56:28:d3:
e9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:7C:7B:13:53:E1:F2:50:2E:70:65:47:CA:C2:F8:C3:37:54:B3:38
X509v3 Authority Key Identifier:
keyid:34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/znx7E1Ph8lAucGVHysL4wzdUszg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.115.0/24
Signature Algorithm: sha256WithRSAEncryption
03:61:73:a0:4c:a7:14:e4:19:6c:fa:d1:3a:86:7b:b0:43:fd:
ca:87:da:a7:c3:31:e4:5a:07:ee:37:56:d6:e0:91:17:a7:c7:
52:37:3d:b2:50:40:f0:1a:42:10:69:02:f9:a8:ea:74:43:f2:
4d:b9:bd:1a:77:33:37:b0:89:7e:a5:00:a9:ae:a7:c1:72:c7:
f6:0d:8c:09:91:2c:6a:35:f5:d5:75:b5:b0:b9:36:35:db:c8:
7e:4a:c1:a3:5e:0a:5c:a8:ba:02:3a:96:38:08:20:d2:6c:e3:
e8:11:51:8e:01:6c:42:3c:a2:e1:7e:b1:e0:48:33:bb:17:1c:
9a:57:23:2c:a7:19:63:f6:93:52:90:bf:eb:e0:eb:d6:0a:96:
71:2d:f8:7a:4a:11:46:7e:5b:29:ab:4c:02:98:ab:29:1d:73:
ec:70:02:77:7e:b4:3c:58:da:a0:a4:57:06:aa:f0:dd:47:5e:
e1:1d:73:d7:88:48:cb:8b:f8:23:30:35:32:c8:2b:02:3b:e6:
8d:c0:c0:a5:9b:a8:4d:ac:b1:c3:f9:c0:5c:14:1e:c1:9e:a8:
10:79:d2:b9:48:c1:d9:1e:f6:c2:15:d3:30:50:13:9d:27:8f:
22:74:fa:50:e0:a2:19:af:5c:56:1e:df:64:87:1d:dc:1a:5c:
3a:58:ca:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:12 2024 by rpki-client on console-ams.rpki-client.org