Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/zmchbySLp19eDMYcw5hKFjvLV_4.roa
File: zmchbySLp19eDMYcw5hKFjvLV_4.roa (raw, json)
Hash identifier: BXPHtNrLgQWGNgvcKT5LQeQihJ6rEWOXd/xS6UU01dk=
Subject key identifier: CE:67:21:6F:24:8B:A7:5F:5E:0C:C6:1C:C3:98:4A:16:3B:CB:57:FE
Certificate issuer: /CN=d7880ed1021d0ecac71205673b004813b39dfc99
Certificate serial: 018570C2BF0BC7D2E130AED2D1C7D723B5A8
Authority key identifier: D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/zmchbySLp19eDMYcw5hKFjvLV_4.roa
Signing time: Mon 02 Jan 2023 04:34:49 +0000
ROA not before: Mon 02 Jan 2023 04:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3262
IP address blocks: 217.18.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:c2:bf:0b:c7:d2:e1:30:ae:d2:d1:c7:d7:23:b5:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7880ed1021d0ecac71205673b004813b39dfc99
Validity
Not Before: Jan 2 04:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce67216f248ba75f5e0cc61cc3984a163bcb57fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:92:10:13:72:5c:4a:a0:41:a8:b9:ff:85:8a:
e3:b7:1a:45:c3:f5:95:42:fe:3e:1f:6c:60:88:6c:
0b:d8:84:fc:ff:61:68:6d:47:e5:3d:dc:a1:0b:fd:
76:16:84:97:f8:15:ca:5d:79:2e:62:91:b9:cc:52:
03:b8:e3:4b:57:81:29:c3:1f:ef:1d:12:2f:58:3c:
bc:2d:22:b1:ca:b4:84:05:05:54:1d:a7:ea:89:fe:
83:3a:71:c6:03:66:0e:80:4f:4b:5c:be:a1:d9:c2:
f4:e1:d0:ed:03:4d:49:29:5d:9d:f8:33:de:d3:21:
26:09:7a:57:c4:7b:43:16:f7:5a:44:d8:3e:4f:75:
04:c6:16:fb:c8:cf:a5:57:79:20:76:a0:fb:b1:fe:
1d:65:96:d3:5e:e1:0f:9a:db:24:91:c0:d6:40:7d:
c0:dd:2d:4e:cf:df:27:ae:6a:43:27:b3:d1:56:e6:
64:50:c3:9f:57:00:61:40:bd:02:0b:3e:21:ed:bc:
56:97:00:d9:94:ba:f6:67:a7:67:16:ba:31:5f:ad:
79:65:46:fa:92:bc:51:00:83:67:b0:2f:12:3f:b5:
71:39:48:97:98:10:bb:50:10:bd:89:ba:7c:3d:4a:
34:c8:0a:8a:e2:46:50:73:7f:77:3d:e4:dc:73:1f:
13:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:67:21:6F:24:8B:A7:5F:5E:0C:C6:1C:C3:98:4A:16:3B:CB:57:FE
X509v3 Authority Key Identifier:
keyid:D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/zmchbySLp19eDMYcw5hKFjvLV_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.18.238.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:2d:15:04:f7:6d:01:51:fb:b7:16:a6:2a:ea:13:c9:60:85:
eb:22:77:c7:4f:65:8e:ac:b5:fa:72:ce:b1:ba:5b:d1:74:cb:
dc:b8:70:cc:aa:61:17:e7:20:0d:8c:8a:1a:eb:1d:1b:68:7e:
55:08:2a:ea:70:4a:24:33:74:bf:de:9e:50:fd:3f:80:d2:7a:
a6:9d:80:d8:15:a0:44:18:d7:6b:0c:a5:f7:fb:18:55:91:87:
c6:e4:9c:80:f5:a2:bd:3d:31:9d:21:b6:7c:bc:1b:41:b6:16:
f5:f3:ae:1a:8f:ab:36:dc:48:77:2a:a5:b8:d9:a6:98:5c:9a:
a5:87:94:a4:e6:c5:3b:b1:1c:f5:d4:2a:d6:e4:16:e5:26:62:
26:e4:f8:af:a1:0a:8b:f8:c0:0a:d3:c0:1f:30:a9:e5:eb:af:
d8:3f:2d:56:f6:b4:ef:d8:da:36:60:15:ee:2b:b7:34:08:56:
fe:75:5d:c1:1b:55:3a:9b:d5:71:d0:96:ff:d3:bf:d9:eb:84:
c4:01:aa:ee:1f:af:c6:24:1e:ac:62:e9:a5:7d:34:82:7a:69:
f7:b6:0c:cc:07:a6:37:4a:aa:42:2d:24:72:05:cc:9c:18:d4:
55:27:65:0f:2c:5a:ed:a6:59:18:cc:d8:ba:80:70:ce:2d:10:
31:aa:40:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:47 2024 by rpki-client on console-fra.rpki-client.org