Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/ZkdzxPclwdOzfq2EXia1oqkQR94.roa
File: ZkdzxPclwdOzfq2EXia1oqkQR94.roa (raw, json)
Hash identifier: x61UZBnqtVJo9IzqCsaO92tPxWzUFXptRfMxfVpOSfY=
Subject key identifier: 66:47:73:C4:F7:25:C1:D3:B3:7E:AD:84:5E:26:B5:A2:A9:10:47:DE
Certificate issuer: /CN=677d4ea2c016ce2797af7aeb737d132875669f12
Certificate serial: 0188A49ED21532A5D7E264AFF1AFB0A4BA4A
Authority key identifier: 67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/ZkdzxPclwdOzfq2EXia1oqkQR94.roa
Signing time: Sat 10 Jun 2023 09:24:11 +0000
ROA not before: Sat 10 Jun 2023 09:24:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59554
IP address blocks: 193.160.93.0/24 maxlen: 24
193.160.94.0/24 maxlen: 24
193.160.95.0/24 maxlen: 24
193.160.92.0/24 maxlen: 24
2a0d:ed40::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:30:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a4:9e:d2:15:32:a5:d7:e2:64:af:f1:af:b0:a4:ba:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=677d4ea2c016ce2797af7aeb737d132875669f12
Validity
Not Before: Jun 10 09:24:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=664773c4f725c1d3b37ead845e26b5a2a91047de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ce:7b:e0:d9:7b:6a:84:e0:5c:99:f5:17:ad:
d1:89:0f:b8:13:de:04:92:41:7e:0d:d6:60:66:4a:
2b:50:65:48:f6:4d:70:2b:27:1b:0f:1b:c7:99:60:
e1:35:55:35:a2:7b:87:68:0e:6b:39:f3:2a:e6:1f:
01:2f:8f:c4:f8:54:78:a1:f0:50:df:80:9e:88:29:
e9:e1:28:d8:59:1d:10:7d:66:32:0e:0b:c6:8f:e4:
60:ac:43:09:37:8d:56:d9:46:29:7c:f4:e7:c3:cb:
18:82:6d:aa:9a:c0:ad:da:7b:18:63:12:5a:ca:65:
9b:a0:6e:2f:6b:e0:19:82:2d:b7:1e:56:cb:d3:29:
42:d3:57:cb:13:18:5a:21:c3:33:87:df:34:89:ec:
66:08:f1:9b:bb:9e:0f:71:2c:18:9d:99:04:e2:11:
30:f5:fd:b6:c2:6b:ca:a9:99:ec:a1:8c:74:13:4e:
de:7f:d1:94:b4:22:f7:23:14:f7:bd:c7:a9:a1:3e:
dc:7f:c1:ee:6f:6c:b4:36:69:9f:cb:f3:70:df:cf:
f6:06:d9:e7:2f:ef:69:23:9c:35:7c:8b:e1:64:e4:
93:29:66:ee:97:89:9d:69:1a:2e:3b:57:4b:0c:97:
e4:ed:8b:0b:c0:26:a3:78:b2:fe:d4:f9:a8:5d:e3:
35:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:47:73:C4:F7:25:C1:D3:B3:7E:AD:84:5E:26:B5:A2:A9:10:47:DE
X509v3 Authority Key Identifier:
keyid:67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/ZkdzxPclwdOzfq2EXia1oqkQR94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.92.0/22
IPv6:
2a0d:ed40::/32
Signature Algorithm: sha256WithRSAEncryption
25:09:8b:9b:0b:4f:a3:ef:8f:00:85:5d:5a:8a:61:e4:cb:45:
9d:0c:d6:8a:89:e1:f2:c9:b5:67:1a:fe:17:24:d0:e8:13:e6:
52:98:c8:39:ab:a5:1a:70:56:99:2b:b9:4b:61:05:87:2a:cf:
60:66:6f:d4:56:68:67:98:44:0b:55:45:d4:a1:1b:06:de:e4:
93:7f:f6:13:65:88:48:61:85:db:c7:9c:3d:79:10:46:be:fa:
a7:76:87:4c:df:7e:97:2c:05:3c:b4:9f:9f:5e:5b:1a:93:e0:
f8:57:2e:11:c8:7b:a0:ff:9e:a0:4d:e8:eb:df:f4:54:2c:b0:
5d:bb:15:8e:d7:c1:27:d5:9e:99:f7:22:6a:8f:fc:4b:6a:0d:
57:09:88:12:69:ed:89:b5:6e:69:a4:9d:48:4a:95:54:20:03:
23:52:76:8d:92:51:09:39:6e:30:56:39:7f:fd:35:6b:ff:30:
d2:e4:ad:01:be:d1:32:f0:8b:53:3d:fa:ac:0e:92:c6:bc:02:
b7:d4:54:80:aa:3f:17:82:a0:e4:b3:3a:48:8b:17:f7:3e:88:
4e:b0:ec:e0:9d:63:e2:f3:87:76:db:c7:f2:01:df:7c:fa:95:
09:f7:52:49:7a:79:0e:5a:a7:18:d9:aa:3c:cc:09:09:15:a3:
fe:34:b0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:19 2024 by rpki-client on console-fra.rpki-client.org