Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/zYooBzm_w5N8rNRg8QUvnahQS3M.roa
File: zYooBzm_w5N8rNRg8QUvnahQS3M.roa (raw, json)
Hash identifier: LyAfBuRHYxyKck5twx1VHnlFNEBU2Hag+u5DmD9bJag=
Subject key identifier: CD:8A:28:07:39:BF:C3:93:7C:AC:D4:60:F1:05:2F:9D:A8:50:4B:73
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01856ED4D3D8DA4346588FA341B32F471FC4
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/zYooBzm_w5N8rNRg8QUvnahQS3M.roa
Signing time: Sun 01 Jan 2023 19:35:19 +0000
ROA not before: Sun 01 Jan 2023 19:35:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204774
IP address blocks: 201.49.190.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:d3:d8:da:43:46:58:8f:a3:41:b3:2f:47:1f:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 1 19:35:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd8a280739bfc3937cacd460f1052f9da8504b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:da:27:14:f3:b7:a9:8d:ca:9f:60:9f:d0:bc:
c2:2e:42:22:cb:34:b8:bc:7a:8f:c5:6a:cb:54:23:
d6:83:a8:80:98:3f:7d:97:82:1e:7d:de:fb:e8:5b:
cc:1a:97:5b:de:37:85:bf:3a:8f:23:a6:5c:62:65:
dc:dc:95:79:22:35:7c:0e:c2:bc:15:2a:bc:fa:9b:
93:71:dc:d3:0b:fa:d9:38:49:cb:8e:8b:90:df:47:
e7:49:56:b5:0e:a5:a9:9b:c1:81:02:e5:1d:0b:7e:
67:23:18:07:70:19:fa:3f:c3:a8:94:dd:12:b4:71:
aa:48:a9:1e:ac:c3:13:21:8c:75:e1:d1:9a:63:e7:
72:04:de:a1:d5:48:7f:b2:a4:8c:6f:a2:a4:e0:e4:
66:e4:f3:19:98:2f:95:7e:34:71:94:ff:8e:ba:39:
0f:62:64:87:c2:4e:72:77:c4:f9:d9:f1:e2:e6:0c:
2f:84:8d:94:5c:24:7b:c7:5e:de:26:f2:5e:f9:d4:
5c:81:6c:4e:86:8a:87:93:fb:63:91:8b:30:cd:35:
01:c5:ce:87:2a:34:a4:b1:a6:ca:10:d4:53:bb:14:
b5:dc:f5:bd:06:55:0d:74:50:05:d3:4b:f2:31:95:
06:9b:78:5f:fa:e3:9b:2e:84:b9:cb:94:68:66:69:
48:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:8A:28:07:39:BF:C3:93:7C:AC:D4:60:F1:05:2F:9D:A8:50:4B:73
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/zYooBzm_w5N8rNRg8QUvnahQS3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.49.190.0/24
Signature Algorithm: sha256WithRSAEncryption
83:6f:38:69:5b:c8:3f:3c:35:1c:1d:19:39:d6:4c:d3:78:ca:
24:ed:bd:42:c3:9b:83:38:79:d5:9c:92:64:a5:72:98:03:7a:
2b:4c:40:fa:5f:b5:c0:7e:97:6a:f7:50:42:52:6b:a0:00:93:
e6:d4:38:8c:9e:89:df:d5:f7:a3:32:5d:d8:53:8c:ce:11:b0:
72:cb:df:b8:4d:1e:06:9c:32:05:bd:f8:9b:3d:5c:38:69:34:
c0:39:7a:ee:ba:87:e6:b5:77:46:8a:d3:3a:59:32:92:d6:09:
75:0e:34:87:45:98:cb:3b:0b:fd:73:75:e2:de:60:74:6e:6b:
44:54:c6:ae:5a:a4:ae:1c:c3:c2:25:48:6e:f1:67:37:80:5a:
3c:53:14:cf:94:24:16:51:b5:c9:c6:44:61:ce:af:cf:fb:ac:
6f:26:ca:8a:8a:22:22:75:6f:db:63:47:3f:c2:8e:44:e8:2a:
62:29:40:0f:53:73:eb:d2:2e:aa:fd:72:bd:41:7e:d8:b9:b6:
d1:6e:46:49:23:e3:8a:43:b8:26:33:d5:18:82:64:fe:f9:fe:
b1:a5:52:25:5c:e8:e5:d9:d1:8f:77:cd:ea:62:c8:cc:63:3c:
6b:c6:3a:20:5b:f6:e4:ec:2a:bf:73:03:e2:6e:f8:18:55:d5:
31:95:9c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:47 2024 by rpki-client on console-fra.rpki-client.org