Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/Z_gOx4T-oluqPS1zn193mAsZHjw.roa
File: Z_gOx4T-oluqPS1zn193mAsZHjw.roa (raw, json)
Hash identifier: wPGk5I8gbqzCpUkm9IIxBe/92+eRQGD6ttcFQqxZKHU=
Subject key identifier: 67:F8:0E:C7:84:FE:A2:5B:AA:3D:2D:73:9F:5F:77:98:0B:19:1E:3C
Certificate issuer: /CN=8f368feb9e553bdd131562584a3353b1d7555c50
Certificate serial: 0191090E19C70E027EA7E3B2EA70AD634CD8
Authority key identifier: 8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/Z_gOx4T-oluqPS1zn193mAsZHjw.roa
Signing time: Wed 31 Jul 2024 13:50:04 +0000
ROA not before: Wed 31 Jul 2024 13:50:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56754
IP address blocks: 94.176.184.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Aug 2024 14:06:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:09:0e:19:c7:0e:02:7e:a7:e3:b2:ea:70:ad:63:4c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f368feb9e553bdd131562584a3353b1d7555c50
Validity
Not Before: Jul 31 13:50:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67f80ec784fea25baa3d2d739f5f77980b191e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:06:63:66:f6:95:a2:df:c7:01:c6:33:82:80:
80:cb:18:0f:ad:ab:70:6d:6a:a6:a7:bf:a4:5b:be:
0f:20:5b:ea:77:9c:02:94:b5:c1:f0:69:dd:d6:b4:
0f:59:d0:8f:d9:a1:d7:c5:cd:f7:01:a2:6b:99:4d:
a2:bb:2a:e6:d3:9a:80:5b:b1:d6:97:7c:97:ba:14:
89:1c:54:d3:5b:23:a3:c1:40:ec:71:3d:d8:bc:96:
88:3b:1e:81:df:7c:e9:aa:39:32:ac:02:09:c2:45:
00:ed:14:a7:40:4e:a9:ef:6c:d7:b9:75:97:21:1c:
10:05:7e:20:86:4a:fa:1c:a5:af:ff:56:e2:a6:1a:
84:df:25:12:16:26:2f:29:e9:0a:ff:8f:2a:2e:5b:
d1:4b:7f:44:64:59:f2:2c:96:fd:3a:1a:4c:c2:ac:
d7:a3:d7:40:bb:02:74:04:bc:a6:70:c5:3c:68:f5:
ec:43:7f:4e:fe:e2:3e:7b:85:22:58:fe:a5:ca:30:
6d:94:ae:6e:79:e9:0c:0e:8c:c0:c1:9b:49:9f:0d:
90:20:b6:90:d0:a5:16:d5:f4:e9:d3:1c:b9:7b:18:
7b:59:74:d4:ca:11:8c:b7:76:c9:e5:9b:d0:eb:ae:
57:e2:5a:f0:22:b3:8a:6e:bf:a5:c9:82:dd:b2:f0:
f7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F8:0E:C7:84:FE:A2:5B:AA:3D:2D:73:9F:5F:77:98:0B:19:1E:3C
X509v3 Authority Key Identifier:
keyid:8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/Z_gOx4T-oluqPS1zn193mAsZHjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.176.184.0/23
Signature Algorithm: sha256WithRSAEncryption
18:10:1d:9e:42:c1:42:cb:ba:88:bf:78:40:89:d1:93:47:e8:
28:1c:15:06:ce:c7:2a:74:82:6c:d6:3d:64:75:81:0e:97:0f:
1e:8a:00:ec:2d:ed:2f:17:37:d1:ec:0b:10:9b:4c:9a:a2:5e:
75:00:a5:9a:c1:4a:0e:b4:8f:cb:0a:f3:b7:e9:5a:9b:de:22:
6a:71:3b:46:10:e4:8a:e3:75:39:bd:5f:47:95:ea:cd:b8:2c:
29:5b:a4:89:d6:00:3a:44:67:10:13:78:b3:c8:9a:95:ec:22:
e5:f4:c8:83:a1:46:9b:ac:f6:1b:c6:89:d5:65:54:73:60:ef:
37:a3:56:e2:3b:e9:cc:c6:8d:bc:07:d7:d1:ff:19:71:a1:5e:
07:7d:d2:74:92:dd:af:ed:ce:c0:e1:b6:6d:0e:a5:12:33:d7:
f7:73:ee:73:02:54:ba:b5:79:0e:54:cd:46:65:da:85:30:04:
ea:86:f5:b9:14:b9:6f:0a:5e:0d:18:86:a8:f9:ac:00:d6:fe:
ba:dc:6b:35:56:10:74:e5:a0:66:90:41:2a:f9:9d:c0:61:79:
1e:28:4f:f2:f5:20:16:f6:39:47:93:7b:0a:c3:3e:09:db:6c:
a5:3d:a9:1b:a6:ed:42:97:83:3e:4d:c0:2c:72:f8:69:26:7b:
34:29:40:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 16:11:52 2024 by rpki-client on console-fra.rpki-client.org