Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/zIhDRYD60UQH3hZd2p3v_qAnhzM.roa
File: zIhDRYD60UQH3hZd2p3v_qAnhzM.roa (raw, json)
Hash identifier: l5NUo3aE2eu/p2L/bzS+MMzQih7L9/PeRNoQ9Wh/3M0=
Subject key identifier: CC:88:43:45:80:FA:D1:44:07:DE:16:5D:DA:9D:EF:FE:A0:27:87:33
Certificate issuer: /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial: 01865F317B18266C22A9FF9226845B016F59
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/zIhDRYD60UQH3hZd2p3v_qAnhzM.roa
Signing time: Fri 17 Feb 2023 11:45:23 +0000
ROA not before: Fri 17 Feb 2023 11:45:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 194.36.32.0/24 maxlen: 24
194.36.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Feb 2023 13:45:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5f:31:7b:18:26:6c:22:a9:ff:92:26:84:5b:01:6f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Validity
Not Before: Feb 17 11:45:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc88434580fad14407de165dda9deffea0278733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f2:94:19:99:c4:c3:09:22:91:8b:34:bc:87:
81:6c:83:b5:7f:4d:fb:70:27:68:11:9c:98:f7:69:
64:ef:ec:22:76:85:e3:b2:90:53:16:11:01:84:92:
91:03:62:20:dc:28:fd:60:7c:d7:a8:ed:d1:52:ae:
3a:26:9a:9e:8d:60:fd:5c:ce:db:7b:2a:3f:45:97:
5d:8c:06:d6:83:d0:86:a5:c7:0b:0e:6b:a9:24:32:
63:74:dc:b4:8d:26:60:3a:51:50:c5:1c:a2:d2:17:
90:e0:53:dd:0a:37:ca:42:50:b1:86:f9:56:7f:78:
a7:69:67:41:90:b8:89:ff:2e:6f:7c:a2:90:de:6a:
4c:4b:2e:ec:f2:33:09:07:e2:53:47:51:ea:13:6e:
4b:56:3a:7d:0a:ad:f7:f9:8d:73:76:e6:b1:33:a1:
3c:87:d3:7b:5d:16:c7:aa:c4:26:5d:00:dc:33:c2:
89:88:54:6c:7d:73:58:03:2c:53:1d:10:41:20:6e:
7e:53:7b:4c:f9:32:6b:36:bb:74:1b:6b:e4:9e:ce:
55:34:d2:15:01:17:30:78:cb:04:97:63:69:7e:aa:
58:c8:11:a8:5b:c0:30:df:f4:13:55:dd:b5:33:71:
02:51:37:78:d3:b7:cf:fc:13:03:8b:f7:93:a5:4c:
58:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:88:43:45:80:FA:D1:44:07:DE:16:5D:DA:9D:EF:FE:A0:27:87:33
X509v3 Authority Key Identifier:
keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/zIhDRYD60UQH3hZd2p3v_qAnhzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.32.0/23
Signature Algorithm: sha256WithRSAEncryption
03:63:be:7d:4c:d0:33:44:2e:3d:1d:f3:a2:af:22:cb:79:7d:
bb:c3:76:70:06:d5:ef:21:6c:29:ba:76:79:54:89:c9:c3:fc:
8f:8e:cb:e4:79:5d:29:61:98:f0:b4:f4:0c:f1:89:ff:ef:5d:
b9:a6:4a:61:30:88:55:6f:3c:39:83:fa:61:68:a5:a8:ea:2d:
c8:be:ba:51:ff:bf:82:5c:83:45:25:79:1a:ab:1c:41:01:1b:
f6:53:95:75:40:17:3f:92:85:20:6a:88:99:82:eb:3e:dd:de:
f3:67:47:79:78:77:22:6e:ec:0f:52:99:af:0a:82:1b:6e:92:
1f:36:a7:ef:56:fa:c1:58:3d:0a:ed:91:d9:59:61:71:64:7a:
13:e5:e7:0d:dc:a2:66:73:85:a6:d5:4b:74:bf:19:b8:74:9d:
f6:06:8a:42:a6:ad:11:3f:eb:84:9d:1f:b9:68:a5:97:3e:96:
e2:62:7e:65:2c:a9:d6:04:ac:22:1a:ba:0f:a6:8a:23:5e:69:
4b:0d:d1:c2:ac:1c:3a:07:1e:19:ca:03:f7:fd:23:a9:22:eb:
61:e4:9f:49:01:56:f3:f0:8b:4a:6b:23:22:cc:91:69:c0:2d:
b2:dc:ca:b9:34:7e:62:13:cb:a8:65:7d:2e:9f:66:3f:aa:17:
93:02:83:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:39 2024 by rpki-client on console-ams.rpki-client.org