Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/zFQ_T5ZULdYNHwly6n9qdPhasho.roa
File: zFQ_T5ZULdYNHwly6n9qdPhasho.roa (raw, json)
Hash identifier: lDHUKoTImjbm1b56Jdpk5yp/r4dqwX/vaBF+QG9Vmxc=
Subject key identifier: CC:54:3F:4F:96:54:2D:D6:0D:1F:09:72:EA:7F:6A:74:F8:5A:B2:1A
Certificate issuer: /CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910
Certificate serial: 01856D663060CD1227DDA256F6ED597E111F
Authority key identifier: 55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/zFQ_T5ZULdYNHwly6n9qdPhasho.roa
Signing time: Sun 01 Jan 2023 12:54:51 +0000
ROA not before: Sun 01 Jan 2023 12:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 194.110.130.0/24 maxlen: 24
194.110.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:66:30:60:cd:12:27:dd:a2:56:f6:ed:59:7e:11:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910
Validity
Not Before: Jan 1 12:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc543f4f96542dd60d1f0972ea7f6a74f85ab21a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b7:75:94:bd:79:52:e4:0d:cd:33:ce:bc:50:
1b:88:55:f3:cb:89:bd:fa:44:0e:ab:4f:81:7b:91:
38:78:6a:1c:57:c0:84:99:83:21:66:f8:d5:f8:52:
08:65:70:cd:ef:da:d9:69:32:18:db:21:f0:06:67:
c2:1d:2a:52:57:1e:44:dc:48:64:79:d5:40:1e:e3:
9f:de:0c:f0:4b:38:ad:3a:02:bd:2c:dd:a8:d3:40:
52:0b:bf:f3:57:3a:d3:f0:c8:7e:68:6c:cf:f6:8d:
7a:61:83:24:ea:52:fe:f3:1d:cf:69:46:1a:4f:fc:
1d:15:a9:22:1d:14:db:ea:82:d8:e2:b2:d2:53:91:
b3:b3:84:9c:00:89:06:61:d2:6f:93:75:7e:c3:5c:
09:8f:2f:f1:90:57:1d:07:94:0e:ae:da:09:49:22:
49:3f:a5:4a:3c:c2:a7:8b:32:4c:dd:df:75:77:96:
17:96:38:ff:2f:2c:4e:f2:34:d0:4d:51:fc:b8:01:
26:99:e2:33:30:e7:ef:b2:8b:1f:68:d9:80:a4:f8:
72:cf:86:46:1f:7e:6e:6b:51:8a:44:f6:ba:6d:b7:
4b:92:04:84:52:48:0c:a0:cc:f1:21:0b:f2:22:19:
14:fb:1c:3e:01:31:06:7c:64:20:be:83:80:2c:e3:
25:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:54:3F:4F:96:54:2D:D6:0D:1F:09:72:EA:7F:6A:74:F8:5A:B2:1A
X509v3 Authority Key Identifier:
keyid:55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/zFQ_T5ZULdYNHwly6n9qdPhasho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.130.0/23
Signature Algorithm: sha256WithRSAEncryption
94:eb:e7:ed:f6:4a:41:46:2e:8e:60:4d:03:25:32:17:4d:10:
97:1a:2e:7a:bb:8a:9a:4f:bb:8e:c8:ce:1d:cf:95:f6:1b:d3:
08:11:60:06:58:c0:7a:71:29:e9:41:8b:11:69:0e:13:be:8b:
11:96:e9:7a:7a:37:54:67:e1:a7:6b:43:36:39:5d:7d:4a:bb:
b5:73:92:7d:a9:3a:42:93:a8:3c:b6:4e:8e:76:66:79:46:50:
be:2d:21:1e:1a:27:40:2e:22:9a:c3:dc:2e:d3:d5:30:f7:2e:
2d:96:88:3c:f5:71:93:9c:b6:4c:50:a4:da:33:ff:17:61:48:
a6:8e:e7:03:63:42:52:35:9a:26:07:d7:d9:6c:32:2a:ab:07:
24:bf:2b:15:91:1f:61:e7:ee:67:b3:94:2a:ba:a6:9c:aa:15:
66:81:b9:ac:9f:1c:48:37:72:60:80:2f:86:1e:02:cb:fc:4a:
1b:13:5b:f2:b9:b8:a7:84:bb:86:c8:ed:90:c4:39:84:34:7e:
05:2a:22:f3:89:7d:b9:48:d8:1f:70:58:2b:64:7d:3b:34:df:
d4:c3:75:cc:92:23:fc:b2:17:35:d1:1c:19:7f:ce:47:1a:9b:
81:80:e3:cf:55:c1:1f:dc:f7:c7:52:90:38:d0:a8:8b:0e:76:
bd:6d:56:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:02 2024 by rpki-client on console-fra.rpki-client.org